
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136372e302f32342d3234203d3e203534323836.roa
File: 32332e3234362e3136372e302f32342d3234203d3e203534323836.roa (raw, json)
Hash identifier: u5bWmNq+wWTXLBaT/XhbMzMl9uFNnZItgFVyN/3XOEk=
Subject key identifier: 12:6C:D1:DF:35:BB:47:31:9D:C8:28:79:A2:46:54:A0:C8:B8:C1:D5
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 6B9EBBC59A650CB39F8ED161C91A51A7C27CA315
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136372e302f32342d3234203d3e203534323836.roa
Signing time: Sat 01 Aug 2026 14:51:34 +0000
ROA not before: Sat 01 Aug 2026 14:46:34 +0000
ROA not after: Sat 31 Jul 2027 14:51:34 +0000
asID: 54286
IP address blocks: 23.246.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 12 Aug 2026 09:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:9e:bb:c5:9a:65:0c:b3:9f:8e:d1:61:c9:1a:51:a7:c2:7c:a3:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: Aug 1 14:46:34 2026 GMT
Not After : Jul 31 14:51:34 2027 GMT
Subject: CN=126CD1DF35BB47319DC82879A24654A0C8B8C1D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d5:cf:e2:e4:55:61:cd:61:a8:ea:28:bd:5b:
63:89:b7:42:c6:5c:f6:de:5a:0a:af:19:b4:9b:82:
18:7c:5e:c1:f2:a5:69:d4:e8:c5:85:6c:11:f7:29:
9b:d0:fe:3a:5a:39:61:5c:2e:6c:64:a6:8e:21:e5:
23:c0:83:28:95:55:7d:60:51:0b:96:52:67:8e:01:
99:4c:ca:62:5b:69:3c:5e:6c:57:a9:4d:f1:46:91:
d9:17:5e:e3:38:c3:f9:29:8c:03:16:d5:b5:c3:4d:
2e:72:b2:da:7d:ab:95:27:f7:32:0b:aa:be:b7:c9:
7f:f8:cd:ff:a7:e9:95:51:97:42:af:fb:eb:bb:47:
7c:20:81:cf:2c:3c:40:51:47:7d:08:26:89:87:a8:
2d:df:45:49:40:23:d6:66:7c:32:0c:c7:04:19:9c:
f7:24:5f:28:11:e8:4a:da:da:5f:c4:1c:b7:8b:f7:
0c:bc:83:cc:cd:2a:c1:f6:8d:47:9b:d9:6c:86:b6:
f9:c4:17:71:6d:4a:a2:1f:b7:7b:bd:4c:a7:c8:31:
37:50:c3:ac:56:2f:43:0d:e4:bf:57:2c:e3:37:2e:
90:31:51:f2:92:fb:b5:b5:a8:ea:26:fd:64:be:1a:
ac:e1:91:3e:f6:4b:26:5c:e7:de:b7:45:01:bf:ef:
5f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:6C:D1:DF:35:BB:47:31:9D:C8:28:79:A2:46:54:A0:C8:B8:C1:D5
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3234362e3136372e302f32342d3234203d3e203534323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.246.167.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7b:ea:33:7a:1f:d1:4b:05:a7:70:0e:4c:c8:e0:f7:2f:72:
7e:4c:97:d7:a2:cd:79:41:3e:54:8d:24:f7:95:d7:76:b3:77:
d8:20:30:e6:1f:25:dd:0b:85:17:33:8c:75:3a:76:0d:2e:53:
14:89:ba:7d:bb:93:25:2d:85:ec:fd:53:97:1d:b1:1d:95:91:
27:20:0c:60:33:40:e8:f3:97:a6:7d:c8:74:87:2f:5a:e1:27:
8f:30:0b:df:97:f3:ac:fd:6c:9e:d9:f6:0f:1a:9b:15:b7:9c:
99:23:1e:48:d3:80:f0:d9:cc:7b:a0:a7:cb:37:90:96:69:ac:
53:01:7f:4a:98:e4:05:f9:0e:a0:8d:2c:27:71:24:0b:ac:6d:
ab:9d:65:24:0e:1b:14:f2:57:a7:92:2a:b1:65:57:aa:08:88:
2b:a9:bd:b2:c1:9c:5d:c2:05:4c:b8:40:65:8a:89:fc:3d:e2:
d7:59:64:d4:66:1d:fe:ad:f5:7b:e2:7d:40:be:04:ce:37:06:
af:1b:1c:e0:fd:56:a5:c1:3f:67:23:18:80:e7:fa:e0:ea:28:
7f:d3:e7:a4:6d:7f:83:4d:6f:95:53:a1:a7:f7:d1:0c:e2:ca:
b0:e7:94:f4:57:e3:a5:2c:be:35:c1:0a:0d:65:b2:b3:a4:89:
d1:8e:c9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 16:38:56 2026 by rpki-client