
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa
File: 3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa (raw, json)
Hash identifier: hcIH6T+bLy0ZHu6DZYemmtCUKuUm8G1N2rzd6iz0V0s=
Subject key identifier: 00:ED:A8:04:92:C6:55:43:77:42:8E:EA:AC:13:37:A0:7A:50:31:E2
Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial: 572CD550D2BCD3969B850ECA3F88C92AC00BEB31
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa
Signing time: Thu 30 Apr 2026 15:59:32 +0000
ROA not before: Thu 30 Apr 2026 15:54:32 +0000
ROA not after: Thu 29 Apr 2027 15:59:32 +0000
asID: 209888
IP address blocks: 208.91.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 08:32:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:2c:d5:50:d2:bc:d3:96:9b:85:0e:ca:3f:88:c9:2a:c0:0b:eb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Validity
Not Before: Apr 30 15:54:32 2026 GMT
Not After : Apr 29 15:59:32 2027 GMT
Subject: CN=00EDA80492C6554377428EEAAC1337A07A5031E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:ee:87:69:ae:6a:82:83:32:19:2a:67:3b:
3f:af:de:35:f1:5b:20:59:8a:38:61:99:ac:89:74:
bf:a5:19:11:ae:de:03:d1:73:2d:fb:82:36:05:f3:
0f:f0:c7:7e:d3:fd:4f:ce:dc:30:50:15:53:89:81:
f4:ae:6d:db:4b:72:3c:bb:8c:2d:4b:83:91:c7:c5:
47:45:78:6e:79:7e:1e:be:17:aa:08:e6:c4:af:c7:
97:a1:07:9d:eb:1b:56:4e:bb:81:2b:2f:77:5e:b9:
9b:2d:93:4a:21:25:10:69:0b:01:01:cf:d5:46:29:
fb:5c:e3:50:60:4f:77:32:a2:68:26:f6:b1:46:e0:
1b:e7:a8:23:26:73:66:21:77:cf:07:7a:95:29:d3:
e9:5f:a3:f5:34:a6:42:0b:64:38:8a:77:83:9e:31:
04:d3:51:34:57:d3:bd:69:a7:cd:e7:4a:db:73:75:
b9:ac:d1:5f:14:a4:16:b8:e7:79:e8:45:a7:38:26:
ed:82:92:99:f5:96:b7:6f:2e:c7:17:b0:10:4a:fa:
c7:4d:18:5b:8c:97:bf:11:ea:f3:7e:74:b6:d1:9d:
47:a3:14:c4:bd:19:94:44:c8:5c:a8:54:8b:ec:fb:
20:0f:67:e0:77:90:9a:41:c4:79:c9:f0:67:c8:59:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:ED:A8:04:92:C6:55:43:77:42:8E:EA:AC:13:37:A0:7A:50:31:E2
X509v3 Authority Key Identifier:
keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
81:47:49:86:0b:70:d1:16:8d:5a:d1:f3:06:b7:6d:61:f5:ab:
3d:05:f0:c4:6f:41:f6:50:49:1c:ff:f4:ae:3f:fb:f5:c6:54:
b1:57:a5:1f:1b:05:34:02:56:6f:de:69:99:8f:a5:cf:94:44:
04:63:3e:9f:6a:9b:96:f0:a2:5f:d0:13:3c:15:36:8a:8d:ad:
45:1d:22:de:94:96:02:7e:b3:44:70:ac:d7:c9:4f:c9:4b:b8:
60:ee:f6:69:da:a8:10:7e:f9:50:4d:10:b4:e1:5e:3b:e4:56:
37:db:db:0d:58:44:fe:80:21:9d:51:68:f6:b1:48:c1:61:59:
5d:d0:4a:0b:fe:d9:9d:dd:42:d4:9c:93:a7:9a:92:f3:34:99:
f5:64:0d:86:5d:bd:5c:40:a0:52:88:de:46:70:2c:53:14:1e:
e7:c4:3c:be:53:f0:b9:20:1b:5c:53:49:0d:f8:cc:7e:bd:b2:
f0:d4:54:cb:4d:42:46:f4:8f:f2:0e:2c:b2:2c:1d:ad:c5:3b:
31:0b:36:2e:24:25:a8:c5:b5:7c:e6:8b:78:54:51:8a:00:b4:
0d:a4:d5:0a:ad:db:57:db:db:92:2e:67:54:fc:50:3e:ec:bf:
e0:dc:55:d6:c6:52:f4:26:32:54:2e:b3:73:77:82:95:1f:d3:
1e:cd:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:34 2026 by rpki-client