
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136352e302f32342d3234203d3e20343032363239.roa
File: 32332e3234362e3136352e302f32342d3234203d3e20343032363239.roa (raw, json)
Hash identifier: Ia6wMmtAcu06+gXBIqtLaiJjrwJdBJhypfkWwNGgCJQ=
Subject key identifier: 85:0C:C4:41:3A:FB:EA:C9:62:C1:72:04:E0:13:E1:61:4F:A0:39:9D
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 237AFF146E8F64CD15A7E2B043A089D68E687E05
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136352e302f32342d3234203d3e20343032363239.roa
Signing time: Tue 22 Sep 2026 00:10:08 +0000
ROA not before: Tue 22 Sep 2026 00:05:08 +0000
ROA not after: Tue 21 Sep 2027 00:10:08 +0000
asID: 402629
IP address blocks: 23.246.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:7a:ff:14:6e:8f:64:cd:15:a7:e2:b0:43:a0:89:d6:8e:68:7e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: Sep 22 00:05:08 2026 GMT
Not After : Sep 21 00:10:08 2027 GMT
Subject: CN=850CC4413AFBEAC962C17204E013E1614FA0399D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:1e:65:cf:81:6d:b9:0b:4d:1c:f7:0e:08:
02:3a:73:28:bb:18:ff:19:7e:42:25:5a:37:a2:96:
33:07:b7:42:78:77:c1:cb:3d:be:89:e2:ef:cb:39:
c9:62:cf:08:eb:bf:f2:91:25:a0:18:80:62:ea:be:
4e:e9:87:52:9d:ec:cc:b5:e1:88:75:84:e1:17:b9:
3f:10:5b:c3:85:df:f1:4a:3d:0c:a4:ad:10:b2:5d:
77:d3:0c:ed:fe:54:5a:06:f1:2e:7a:19:1f:93:7a:
4c:74:89:0c:5d:00:d3:8b:cf:f9:71:a1:80:5d:0a:
4a:e6:59:c0:80:00:55:76:bb:6e:e0:e4:b4:8e:84:
6d:36:a4:1b:73:c9:5a:8a:c1:04:a9:76:7f:f7:6c:
a3:55:93:60:43:29:7d:a0:69:0c:44:88:83:12:f9:
b9:e7:bf:36:a5:59:76:55:76:56:30:50:68:eb:16:
29:43:0e:87:7f:c6:40:3a:f0:64:71:5a:21:99:fa:
fb:ee:a2:77:7b:dd:42:91:62:7f:50:12:43:ec:b3:
18:ff:e5:c9:a0:63:79:ea:12:1c:31:87:f7:fd:2d:
8e:c8:92:cc:6a:d2:2d:3b:14:f9:d9:eb:a7:74:73:
00:46:32:d2:a3:c2:c0:3b:e5:46:f2:c0:60:a6:3a:
dd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0C:C4:41:3A:FB:EA:C9:62:C1:72:04:E0:13:E1:61:4F:A0:39:9D
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136352e302f32342d3234203d3e20343032363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.246.165.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:8b:a7:b2:6a:48:ba:b0:06:61:4b:33:d3:cf:84:75:7f:e3:
61:63:12:bf:b8:24:5a:32:e0:6b:d4:d3:df:7e:06:83:f1:80:
46:f9:db:07:c9:25:eb:0b:27:31:e9:51:3a:27:43:0f:72:aa:
ec:6e:2c:99:8e:e7:e9:4a:8e:9e:41:86:76:9b:17:8b:f6:92:
37:af:83:c4:bd:16:76:d3:be:9d:78:7e:a7:0a:3c:26:31:b7:
01:be:32:8c:8d:d0:f4:30:e5:b2:c8:b1:de:4d:0a:48:f1:9a:
99:fd:4f:f7:a5:55:46:f8:62:98:6f:32:53:99:69:34:4b:3f:
24:52:30:5c:9f:5b:27:26:f4:b6:6b:53:0a:57:0c:de:65:97:
0a:26:c9:3a:17:7a:48:f8:2b:31:db:7d:4a:8b:11:20:b6:29:
72:ef:59:59:13:ca:c4:3f:0b:7c:b7:40:94:51:6c:36:b2:36:
72:af:de:26:b4:31:91:44:89:c3:8b:75:80:96:a0:2b:49:14:
3a:e5:ab:13:39:b7:db:74:b7:fe:ec:4e:0e:39:0f:e4:c1:49:
43:15:f0:8e:46:f0:c7:93:d1:5e:ab:46:69:69:51:a3:d9:27:
b0:fc:2f:72:e1:7c:4e:79:79:2a:18:f7:19:a9:05:a9:51:32:
b0:57:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:38:40 2026 by rpki-client