
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e20383334.roa
File: 38392e3230372e3137382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1XNyubnQueixGeeVotHmIZnrwfHlxPqHuUDqX0LjRoQ=
Subject key identifier: 4B:C4:2F:FC:49:AC:AE:62:2B:D9:A7:FF:D4:E7:AA:0A:07:58:19:8F
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 531CC7BBC8CD3C46DA2607F760AADEFC301DC69D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e20383334.roa
Signing time: Wed 23 Sep 2026 23:52:49 +0000
ROA not before: Wed 23 Sep 2026 23:47:49 +0000
ROA not after: Wed 22 Sep 2027 23:52:49 +0000
asID: 834
IP address blocks: 89.207.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 04:23:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:1c:c7:bb:c8:cd:3c:46:da:26:07:f7:60:aa:de:fc:30:1d:c6:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Sep 23 23:47:49 2026 GMT
Not After : Sep 22 23:52:49 2027 GMT
Subject: CN=4BC42FFC49ACAE622BD9A7FFD4E7AA0A0758198F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:78:a9:3a:5d:e6:94:30:c7:77:f2:8f:f7:
6c:78:85:68:54:7f:ef:13:4b:6c:c8:bd:b2:84:62:
a8:61:ee:9d:3a:9f:b0:49:7b:ad:fd:ce:e4:f5:cd:
2c:c4:14:3e:7a:f5:d6:b2:12:1a:b3:80:38:93:85:
31:47:1c:2b:0b:f0:7b:af:00:40:7c:ba:14:77:ee:
2c:fb:f6:fa:31:ff:94:62:d5:d3:5e:e0:9c:84:a3:
75:cd:62:a1:36:91:7d:f2:c6:8d:c0:ca:6b:24:ae:
f3:27:f5:eb:96:82:6d:aa:e6:83:97:6d:62:17:79:
15:ca:af:2d:93:2f:44:d1:9d:89:67:1d:f1:32:60:
d2:de:3e:07:2e:62:68:9b:65:c9:ec:54:8e:57:01:
26:9c:16:9d:a6:85:e2:e5:3e:f4:16:ce:46:cd:12:
bf:f7:22:d6:5b:55:37:ca:b0:33:52:4d:d4:84:ff:
d8:37:de:f8:a2:a6:01:f4:a7:36:ca:b9:98:0b:62:
44:3b:33:f4:1f:e8:5a:0c:30:8c:24:c2:45:14:aa:
8f:a3:61:56:cc:84:33:b3:d9:90:a1:55:9e:d5:07:
43:55:45:74:0c:f5:ba:f9:49:cc:5a:11:1b:34:12:
1d:d4:2d:aa:3e:5b:f5:a5:c2:a9:57:fa:2b:6c:ed:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C4:2F:FC:49:AC:AE:62:2B:D9:A7:FF:D4:E7:AA:0A:07:58:19:8F
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.178.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8e:a7:c9:4e:be:e2:93:5b:db:21:6e:f5:35:32:f2:9d:20:
4c:88:69:b1:be:fa:c0:50:3c:f5:63:ca:35:9a:f9:97:f0:9c:
4b:c0:0a:52:05:14:ad:22:9d:ce:82:94:a1:70:de:aa:48:0d:
ff:4a:03:a5:c9:17:d0:c8:98:69:12:d5:f8:15:fc:c1:02:71:
84:54:79:73:0e:cb:75:20:27:49:d4:b3:06:3f:44:c4:cd:29:
eb:30:4c:6d:ed:fe:a3:6f:5d:b5:e6:ea:8f:ee:a3:a8:1e:d7:
a2:30:43:9b:75:01:6d:33:3d:9f:96:e7:89:1d:ec:42:63:d3:
e3:e2:5b:c0:ed:41:cd:7d:7b:85:98:9a:3b:9f:91:c5:0c:62:
45:64:25:47:11:b0:cb:e4:19:e2:19:51:60:d1:c9:aa:4b:47:
99:f9:63:58:32:e1:2b:29:f1:af:39:1f:f6:d9:9b:88:bd:96:
b8:7d:83:2e:40:ea:63:d2:d4:22:c9:dd:d5:0b:f5:2d:c2:00:
e9:4c:bc:47:41:4a:6d:64:82:24:47:c5:16:ca:35:b7:d9:ae:
64:92:39:12:14:8f:67:e7:45:4e:59:60:a8:ac:15:1c:2e:c1:
7a:bd:c5:63:cb:26:79:98:c1:72:e1:3d:7a:6b:cb:30:28:74:
bd:cb:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:41 2026 by rpki-client