
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203430363736.roa
File: 3137322e39392e32322e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: 5WbJwRYPZb5jjO8yDjZuO7OKrdqfmEQOj1qIYALtVUo=
Subject key identifier: 84:B9:34:E2:21:46:55:60:8E:81:A7:5B:29:BC:51:58:D4:85:AE:40
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 7BE5842BBBAC446300FB0976BD0449FB4605D8E0
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203430363736.roa
Signing time: Wed 27 May 2026 01:32:00 +0000
ROA not before: Wed 27 May 2026 01:27:00 +0000
ROA not after: Wed 26 May 2027 01:32:00 +0000
asID: 40676
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 23:16:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e5:84:2b:bb:ac:44:63:00:fb:09:76:bd:04:49:fb:46:05:d8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: May 27 01:27:00 2026 GMT
Not After : May 26 01:32:00 2027 GMT
Subject: CN=84B934E2214655608E81A75B29BC5158D485AE40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:58:90:38:4b:29:5e:52:95:8b:06:25:1f:
66:29:dd:0c:22:88:73:9b:3b:94:13:75:38:2c:7d:
ea:07:a3:fa:ac:5a:11:e6:4a:99:00:ea:8f:31:f4:
8f:c9:38:21:f5:d7:ff:82:7f:77:4a:95:29:4e:1d:
93:0a:bb:e0:ac:13:9c:5a:6e:d3:44:e2:81:5d:38:
9f:c4:ef:3a:cf:f9:ca:e6:89:fb:e3:2a:52:f5:0a:
76:9e:aa:a7:d8:ea:77:b4:dc:2c:c0:57:f1:34:5a:
cc:a0:9c:d8:ce:52:92:d8:f3:74:4f:29:e4:b3:82:
41:8a:73:99:84:ef:4d:d1:1b:53:e0:76:03:09:f9:
c9:fb:b7:3b:a2:ae:5b:04:53:7a:d4:c4:bf:32:2d:
ee:d3:aa:43:25:99:5a:44:20:08:1e:32:6e:b3:d3:
b9:8b:62:77:7f:38:c2:6d:e3:70:d5:2e:db:06:0d:
30:d2:8a:ad:b1:46:4b:e0:59:a2:b0:e2:29:ef:65:
4c:4f:c9:f5:6f:cc:6b:9d:4f:84:ac:ec:b0:97:ca:
5d:79:82:06:6b:ac:9d:90:16:c4:77:6e:77:4d:dc:
32:69:36:1f:b9:83:8f:dc:71:a1:a1:12:74:48:4b:
17:eb:22:cf:d9:25:84:ec:19:7b:21:0d:85:6a:a5:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:34:E2:21:46:55:60:8E:81:A7:5B:29:BC:51:58:D4:85:AE:40
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
31:24:19:ce:3b:31:34:70:22:04:88:cc:78:eb:af:3c:23:fb:
ec:00:dc:30:01:b9:4f:ab:8f:aa:79:af:56:b0:a2:63:0c:76:
fc:1d:67:de:97:b6:c6:4b:e9:86:30:f3:3f:dc:1f:bc:90:54:
54:a2:d4:4b:cf:ea:7a:27:ac:d4:53:f5:21:f9:73:a8:2f:c8:
1d:b3:28:31:77:a6:0a:e8:30:67:11:60:25:12:5c:f1:e8:82:
37:45:6b:1d:b3:a8:6d:58:a9:4d:14:7d:92:e4:c7:e2:71:35:
58:da:80:0d:fb:79:86:55:b1:1d:07:c9:51:2a:7f:c7:c8:68:
2f:79:f6:e4:68:ce:b0:7f:41:bb:48:83:5f:e4:53:6a:f1:3b:
f9:c3:df:18:51:ce:94:98:cb:c4:08:98:7e:e5:b5:ca:53:a0:
db:68:09:0e:0b:aa:04:c4:54:eb:6c:9a:67:3d:bd:e3:39:dc:
f2:9c:e4:7a:d3:64:6f:21:f7:01:1e:d3:f2:68:be:8f:80:1a:
66:5f:cf:5e:2e:12:24:c7:8b:8c:90:29:35:30:40:4c:20:81:
a0:56:2d:e7:f0:63:59:72:67:4a:57:22:24:07:30:38:dc:bc:
cf:5f:a6:23:87:7f:b3:2f:1d:24:a1:73:e0:a3:a0:e9:0b:97:
c8:34:bb:68
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUe+WEK7usRGMA+wl2vQRJ+0YF2OAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3
MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjYwNTI3MDEyNzAwWhcNMjcwNTI2MDEzMjAw
WjAzMTEwLwYDVQQDEyg4NEI5MzRFMjIxNDY1NTYwOEU4MUE3NUIyOUJDNTE1OEQ0
ODVBRTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+JYkDhLKV5S
lYsGJR9mKd0MIohzmzuUE3U4LH3qB6P6rFoR5kqZAOqPMfSPyTgh9df/gn93SpUp
Th2TCrvgrBOcWm7TROKBXTifxO86z/nK5on74ypS9Qp2nqqn2Op3tNwswFfxNFrM
oJzYzlKS2PN0Tynks4JBinOZhO9N0RtT4HYDCfnJ+7c7oq5bBFN61MS/Mi3u06pD
JZlaRCAIHjJus9O5i2J3fzjCbeNw1S7bBg0w0oqtsUZL4FmisOIp72VMT8n1b8xr
nU+ErOywl8pdeYIGa6ydkBbEd253TdwyaTYfuYOP3HGhoRJ0SEsX6yLP2SWE7Bl7
IQ2FaqVjlQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFIS5NOIhRlVgjoGnWym8UVjU
ha5AMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv
NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4
MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl
MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzAzNjM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYxYwDQYJKoZIhvcNAQELBQAD
ggEBADEkGc47MTRwIgSIzHjrrzwj++wA3DABuU+rj6p5r1awomMMdvwdZ96XtsZL
6YYw8z/cH7yQVFSi1EvP6nonrNRT9SH5c6gvyB2zKDF3pgroMGcRYCUSXPHogjdF
ax2zqG1YqU0UfZLkx+JxNVjagA37eYZVsR0HyVEqf8fIaC959uRozrB/QbtIg1/k
U2rxO/nD3xhRzpSYy8QImH7ltcpToNtoCQ4LqgTEVOtsmmc9veM53PKc5HrTZG8h
9wEe0/Jovo+AGmZfz14uEiTHi4yQKTUwQEwggaBWLefwY1lyZ0pXIiQHMDjcvM9f
piOHf7MvHSShc+CjoOkLl8g0u2g=
-----END CERTIFICATE-----
Generated at Sun May 31 10:32:37 2026 by rpki-client