
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136342e302f32342d3234203d3e203534323836.roa
File: 32332e3234362e3136342e302f32342d3234203d3e203534323836.roa (raw, json)
Hash identifier: 8JPnKO7nhlrEZvgz/CJ0l/efW0+3m/GHukzqaMeqlFw=
Subject key identifier: 75:FF:4C:C5:3C:F6:55:33:C6:29:00:D0:1C:AF:5D:85:B3:EB:AB:A4
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 206FE999FB328432AB1F0FFE76FC59EA4EF5AFD6
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136342e302f32342d3234203d3e203534323836.roa
Signing time: Thu 24 Sep 2026 15:01:03 +0000
ROA not before: Thu 24 Sep 2026 14:56:03 +0000
ROA not after: Thu 23 Sep 2027 15:01:03 +0000
asID: 54286
IP address blocks: 23.246.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6f:e9:99:fb:32:84:32:ab:1f:0f:fe:76:fc:59:ea:4e:f5:af:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: Sep 24 14:56:03 2026 GMT
Not After : Sep 23 15:01:03 2027 GMT
Subject: CN=75FF4CC53CF65533C62900D01CAF5D85B3EBABA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:6c:01:51:d9:ee:c9:ee:e2:59:60:98:ae:
7a:53:15:4a:fe:c4:27:2b:d7:c8:88:e5:0a:df:1b:
5b:a4:46:a1:ac:3b:f1:ce:68:57:00:5c:fa:13:a1:
fb:a7:28:2d:50:18:e1:2f:ed:4f:00:5e:5c:1a:14:
32:f6:c2:f6:f3:84:3c:9b:d8:5e:65:39:75:33:6f:
f5:49:1e:e7:dc:1a:cd:51:aa:a7:f0:cb:95:a7:bc:
ed:80:49:a9:eb:a4:7e:b2:51:90:ec:6d:07:d7:e6:
71:94:88:18:a4:bb:96:8e:df:fd:71:e7:cf:29:27:
7c:c4:31:a6:8c:48:66:2b:1d:c9:c5:29:44:bc:e6:
e2:dd:9b:16:64:65:5c:3f:72:6e:17:8e:ba:98:47:
a7:53:ce:05:b1:c2:49:13:7d:53:93:d8:49:83:78:
64:69:1a:20:96:9e:38:0a:9a:55:ab:65:e2:5c:e0:
e7:ab:03:10:2d:79:70:fb:cd:22:d3:3e:a5:5b:42:
aa:43:31:c1:29:2c:ce:da:d2:10:63:5a:75:7d:66:
a3:29:cf:73:8c:26:d6:d2:1e:9f:87:64:d8:ba:6d:
17:aa:c3:45:6e:f2:87:1c:43:6a:1b:34:da:c4:90:
a3:01:d6:89:30:b7:c5:d8:a4:8a:32:64:ce:e7:ec:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FF:4C:C5:3C:F6:55:33:C6:29:00:D0:1C:AF:5D:85:B3:EB:AB:A4
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136342e302f32342d3234203d3e203534323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.246.164.0/24
Signature Algorithm: sha256WithRSAEncryption
54:c5:2e:30:f6:c7:48:83:e6:5b:f7:2c:39:b0:0c:7c:81:5e:
36:12:60:0e:42:49:67:e7:3d:7d:bc:8c:9f:a3:1d:56:ad:bc:
d2:af:a1:6f:e5:0b:2c:29:30:ef:f7:5f:9c:e0:70:90:c7:06:
17:56:79:77:77:6d:f3:96:6f:67:5a:ee:19:35:5f:1a:21:b3:
48:b1:d7:a0:09:9d:37:b1:2e:f4:aa:23:1a:3e:c2:84:11:64:
37:b3:21:f0:b2:3f:e6:ca:a5:7d:76:db:b1:ea:e5:67:03:1e:
1d:d5:1c:83:aa:07:10:b5:ba:33:64:2d:fd:b7:2a:d0:ed:26:
67:51:f2:ee:5e:c7:db:92:0c:55:ed:53:4e:e1:8e:98:b5:99:
28:b0:34:1e:1a:88:30:4c:59:a7:31:5f:ac:ae:77:52:e7:92:
71:b4:9e:71:d6:14:3f:7c:32:f3:1a:8a:1c:70:6c:66:d6:81:
ee:c6:dd:89:b9:5b:6a:a5:f7:04:1f:bd:55:96:94:ab:d8:77:
e2:fc:0c:81:26:5a:fd:f3:f6:a9:f5:0b:54:33:cf:4b:3b:96:
83:24:bb:6d:e8:f6:09:d4:3a:7d:cb:a7:e4:45:ac:b0:c3:35:
56:ff:a0:ad:43:6f:48:ac:db:c3:1a:0c:12:28:c1:b8:07:4e:
74:d4:c4:94
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUIG/pmfsyhDKrHw/+dvxZ6k71r9YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl
NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjYwOTI0MTQ1NjAzWhcNMjcwOTIzMTUwMTAz
WjAzMTEwLwYDVQQDEyg3NUZGNENDNTNDRjY1NTMzQzYyOTAwRDAxQ0FGNUQ4NUIz
RUJBQkE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRBsAVHZ7snu
4llgmK56UxVK/sQnK9fIiOUK3xtbpEahrDvxzmhXAFz6E6H7pygtUBjhL+1PAF5c
GhQy9sL284Q8m9heZTl1M2/1SR7n3BrNUaqn8MuVp7ztgEmp66R+slGQ7G0H1+Zx
lIgYpLuWjt/9cefPKSd8xDGmjEhmKx3JxSlEvObi3ZsWZGVcP3JuF466mEenU84F
scJJE31Tk9hJg3hkaRoglp44CppVq2XiXODnqwMQLXlw+80i0z6lW0KqQzHBKSzO
2tIQY1p1fWajKc9zjCbW0h6fh2TYum0XqsNFbvKHHENqGzTaxJCjAdaJMLfF2KSK
MmTO5+xbyQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHX/TMU89lUzxikA0ByvXYWz
66ukMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv
QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh
Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw
MmE1MGEwMzkxMC8wLzMyMzMyZTMyMzQzNjJlMzEzNjM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDMyMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABf2pDANBgkqhkiG9w0BAQsF
AAOCAQEAVMUuMPbHSIPmW/csObAMfIFeNhJgDkJJZ+c9fbyMn6MdVq280q+hb+UL
LCkw7/dfnOBwkMcGF1Z5d3dt85ZvZ1ruGTVfGiGzSLHXoAmdN7Eu9KojGj7ChBFk
N7Mh8LI/5sqlfXbbserlZwMeHdUcg6oHELW6M2Qt/bcq0O0mZ1Hy7l7H25IMVe1T
TuGOmLWZKLA0HhqIMExZpzFfrK53UueScbSecdYUP3wy8xqKHHBsZtaB7sbdiblb
aqX3BB+9VZaUq9h34vwMgSZa/fP2qfULVDPPSzuWgyS7bej2CdQ6fcun5EWssMM1
Vv+grUNvSKzbwxoMEijBuAdOdNTElA==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:06:52 2026 by rpki-client