
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
File: 3137322e39392e32322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: uNLztjke5lfSwJMwx4pejC5HBde0jTqrvWBxjypfUws=
Subject key identifier: CD:C8:B2:2B:1E:47:2E:2D:52:0A:2D:80:F8:8D:0B:C5:81:B5:03:8D
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 20E660F166B36B68FED4F07B7F397B492D776EE9
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
Signing time: Sat 27 Jun 2026 01:23:43 +0000
ROA not before: Sat 27 Jun 2026 01:18:43 +0000
ROA not after: Sat 26 Jun 2027 01:23:43 +0000
asID: 834
IP address blocks: 172.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 29 Jun 2026 16:36:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e6:60:f1:66:b3:6b:68:fe:d4:f0:7b:7f:39:7b:49:2d:77:6e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Jun 27 01:18:43 2026 GMT
Not After : Jun 26 01:23:43 2027 GMT
Subject: CN=CDC8B22B1E472E2D520A2D80F88D0BC581B5038D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e4:6e:e7:61:c7:41:e0:b4:f9:22:5f:80:fd:
80:e8:46:a5:9a:ae:fa:1a:e7:cc:a6:f9:e0:39:37:
52:7d:d9:c6:d6:f7:90:be:8f:2a:3b:bc:fe:ed:3a:
d4:6c:dd:b5:9e:05:8e:7a:e0:41:df:71:4f:b4:9d:
c9:46:51:c7:2e:ce:98:4e:f4:5a:56:55:92:6a:ac:
95:5a:0a:65:ae:eb:87:5d:e2:c2:3b:74:ed:ec:0e:
b6:63:d4:19:52:78:4e:c4:0b:b6:71:34:66:41:8b:
fc:ea:4f:86:c0:68:63:b8:0b:4d:31:72:ed:a1:56:
d5:1f:a7:a2:14:f9:c7:f5:cc:81:a6:38:f7:17:b4:
58:9f:ba:32:6a:c9:48:20:19:b9:5e:22:9e:72:c7:
91:ed:23:f3:1b:4e:f1:56:cf:b4:08:4a:88:3e:ad:
ef:1f:3a:ae:62:c6:52:7e:59:b0:5d:e4:8f:16:71:
d8:ec:fb:68:31:21:c9:11:55:6b:2c:1a:fd:0b:ae:
12:77:e4:9d:2b:1a:4f:af:82:1e:a5:c3:0e:c2:07:
95:57:f9:70:9c:98:13:0b:c9:49:8f:2c:eb:e1:39:
f1:62:19:d3:53:70:50:23:05:3b:e6:e1:44:e4:3a:
0c:3b:e5:1e:95:5e:ef:65:36:f9:c1:e8:aa:66:0e:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C8:B2:2B:1E:47:2E:2D:52:0A:2D:80:F8:8D:0B:C5:81:B5:03:8D
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ab:3d:27:a3:e5:9a:48:ea:15:41:55:f0:9c:c2:27:b9:b9:
3f:d1:98:a2:a0:43:c6:07:3e:c2:7a:2a:fd:1b:94:9e:7a:0c:
bd:fa:d5:43:65:2d:f6:97:e5:9e:35:2a:b1:ea:15:d9:08:71:
9d:ed:eb:c7:c8:64:39:c1:ad:89:16:39:f4:bf:93:b1:2e:f5:
cc:09:d6:15:55:a1:bc:c3:f9:85:d9:46:88:8d:ce:b0:01:43:
1b:01:d2:43:ac:0d:13:92:02:40:a8:7f:65:88:78:ef:cf:df:
92:1d:9c:bb:f8:ba:e8:f8:4f:1b:62:fb:b3:ef:97:a0:50:80:
11:64:80:6f:a7:9f:e9:4a:ad:73:2e:2a:0d:19:d2:24:82:84:
64:02:63:b1:a6:8a:e5:af:c7:14:c9:28:d7:3a:39:2b:12:9a:
07:e7:cc:01:9f:c8:5c:fe:ae:31:46:8b:cb:bb:6a:b2:93:0c:
28:63:fd:36:2b:81:e7:b9:8b:7c:f6:95:4b:e5:46:c6:54:1b:
aa:eb:51:40:14:b4:42:8b:06:66:8f:6b:a2:b1:d7:83:4e:7c:
23:c4:e1:a8:ca:b9:99:c9:c6:b6:43:7b:c5:15:2f:a7:dc:bf:
14:e9:8d:9d:ed:6c:ff:42:c0:41:aa:a4:44:82:54:9b:18:ae:
d3:24:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:05 2026 by rpki-client