
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa
File: 3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa (raw, json)
Hash identifier: J7c7U43AismVCnEk3AtbLWYprG+GSaLRyAIaMUWKutQ=
Subject key identifier: 87:6E:E9:3B:F4:C0:CE:8F:E2:A1:19:81:76:41:5B:9C:4F:A3:5F:36
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 7A151D26CCA72DE9ABB52EB2C853FCD72DDFE93B
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa
Signing time: Sun 30 Aug 2026 20:59:09 +0000
ROA not before: Sun 30 Aug 2026 20:54:09 +0000
ROA not after: Sun 29 Aug 2027 20:59:09 +0000
asID: 216382
IP address blocks: 128.254.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 06:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:15:1d:26:cc:a7:2d:e9:ab:b5:2e:b2:c8:53:fc:d7:2d:df:e9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Aug 30 20:54:09 2026 GMT
Not After : Aug 29 20:59:09 2027 GMT
Subject: CN=876EE93BF4C0CE8FE2A1198176415B9C4FA35F36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:f1:27:e4:3b:03:2d:33:ef:dc:d6:1e:fe:
5a:59:09:0f:5d:7e:45:96:09:e3:38:8c:7f:a9:94:
27:a3:be:c6:36:a5:37:99:31:14:d4:c0:ca:94:43:
26:50:9c:8c:f2:6f:c4:84:1f:e6:7c:3f:06:25:37:
49:85:cd:7b:de:50:f7:69:37:f6:45:5b:79:ec:7f:
d9:73:1b:11:d0:c6:a9:15:ab:ce:34:b3:4e:0c:76:
df:ac:0a:d5:a2:e6:dd:9f:17:81:22:1a:40:fb:28:
92:9a:bc:d0:ff:6a:fe:f0:b8:2e:26:15:77:10:ae:
69:73:ac:e9:5d:0e:71:d0:e9:4f:54:1a:af:29:df:
24:3c:e3:ec:0b:e5:39:42:18:a0:fc:25:32:bc:46:
e0:49:47:a9:28:83:f1:6e:0c:c4:2a:28:dc:c1:ce:
52:a4:dd:9d:ba:a9:79:e7:47:51:6f:75:05:81:e5:
b4:ba:d5:0b:7f:c0:45:d9:e8:d2:06:50:b0:9a:94:
c3:49:a1:2d:2c:a4:dc:1c:e1:c0:b5:64:1b:ae:28:
ff:16:50:07:5b:15:0a:97:e9:b3:1f:c3:ca:6f:be:
e4:67:10:cd:9d:cc:59:2b:b5:92:0c:67:e7:c3:6e:
27:9e:c7:d5:e8:f3:05:37:dc:56:65:08:e1:cd:09:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:6E:E9:3B:F4:C0:CE:8F:E2:A1:19:81:76:41:5B:9C:4F:A3:5F:36
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230362e302f32342d3234203d3e20323136333832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.254.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7e:d5:c9:21:16:c2:a9:de:9f:55:63:71:08:2e:de:17:6d:
e1:03:ae:05:44:2b:e7:1a:af:78:fd:36:17:19:a2:67:94:6b:
13:e8:16:34:15:bd:6b:34:6d:b5:3c:b9:a9:f6:be:8e:e7:f1:
c0:a3:f1:bb:57:2d:2d:40:fe:97:58:09:ee:1a:37:60:0d:25:
e6:49:6d:42:61:ab:34:91:7b:b5:b0:74:b9:f1:89:53:eb:c0:
80:90:1b:a7:b7:a7:15:d2:c8:34:b6:26:6f:29:fe:30:26:3f:
9c:dc:a3:03:89:59:1e:6f:f3:85:a4:b7:13:97:1a:f6:c1:64:
71:c7:4c:25:cf:b8:c0:da:00:6d:da:fe:ad:62:54:2b:4c:a9:
41:e3:46:c5:f4:6d:79:07:f0:a0:6b:d7:e2:9e:f6:66:e4:96:
f7:6f:36:3d:44:d9:5f:ac:76:f8:eb:8b:e9:17:fb:50:b9:bd:
b7:79:a6:e6:23:76:53:92:9c:cc:8c:d9:df:fa:f8:75:0b:6c:
cf:e9:a9:9d:4e:73:c9:2d:c5:7f:6a:d4:7c:80:2c:e8:f8:e3:
b4:1d:c3:30:fd:6a:f5:1c:03:02:31:ca:56:6e:25:e9:7a:eb:
f0:f4:01:58:b2:ac:35:3a:cc:c3:31:d2:11:a5:af:9d:62:d3:
86:f5:0c:58
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUehUdJsynLemrtS6yyFP81y3f6TswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjYwODMwMjA1NDA5WhcNMjcwODI5MjA1OTA5
WjAzMTEwLwYDVQQDEyg4NzZFRTkzQkY0QzBDRThGRTJBMTE5ODE3NjQxNUI5QzRG
QTM1RjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB3xJ+Q7Ay0z
79zWHv5aWQkPXX5FlgnjOIx/qZQno77GNqU3mTEU1MDKlEMmUJyM8m/EhB/mfD8G
JTdJhc173lD3aTf2RVt57H/ZcxsR0MapFavONLNODHbfrArVoubdnxeBIhpA+yiS
mrzQ/2r+8LguJhV3EK5pc6zpXQ5x0OlPVBqvKd8kPOPsC+U5Qhig/CUyvEbgSUep
KIPxbgzEKijcwc5SpN2duql550dRb3UFgeW0utULf8BF2ejSBlCwmpTDSaEtLKTc
HOHAtWQbrij/FlAHWxUKl+mzH8PKb77kZxDNncxZK7WSDGfnw24nnsfV6PMFN9xW
ZQjhzQkfmwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIdu6Tv0wM6P4qEZgXZBW5xP
o182MB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzYzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACA/s4wDQYJKoZIhvcN
AQELBQADggEBAA9+1ckhFsKp3p9VY3EILt4XbeEDrgVEK+car3j9NhcZomeUaxPo
FjQVvWs0bbU8uan2vo7n8cCj8btXLS1A/pdYCe4aN2ANJeZJbUJhqzSRe7WwdLnx
iVPrwICQG6e3pxXSyDS2Jm8p/jAmP5zcowOJWR5v84WktxOXGvbBZHHHTCXPuMDa
AG3a/q1iVCtMqUHjRsX0bXkH8KBr1+Ke9mbklvdvNj1E2V+sdvjri+kX+1C5vbd5
puYjdlOSnMyM2d/6+HULbM/pqZ1Oc8ktxX9q1HyALOj447QdwzD9avUcAwIxylZu
Jel66/D0AViyrDU6zMMx0hGlr51i04b1DFg=
-----END CERTIFICATE-----
Generated at Thu Sep 10 07:32:44 2026 by rpki-client