
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
File: 3137322e39392e32332e302f32342d3234203d3e20333938393632.roa (raw, json)
Hash identifier: 3aGIVZK5J8NOyug0I5idrlhWwn7nxXPmPjyus41aRdI=
Subject key identifier: AB:DD:88:62:18:D9:25:99:D4:A8:DF:7D:DB:35:DC:6E:7A:76:5A:D3
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 1F86961DEEFE60503CE9222BB3C4FCD9F170EF1C
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
Signing time: Wed 12 Aug 2026 09:36:19 +0000
ROA not before: Wed 12 Aug 2026 09:31:19 +0000
ROA not after: Wed 11 Aug 2027 09:36:19 +0000
asID: 398962
IP address blocks: 172.99.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 10:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:86:96:1d:ee:fe:60:50:3c:e9:22:2b:b3:c4:fc:d9:f1:70:ef:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Aug 12 09:31:19 2026 GMT
Not After : Aug 11 09:36:19 2027 GMT
Subject: CN=ABDD886218D92599D4A8DF7DDB35DC6E7A765AD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:e5:47:b9:00:ff:52:dc:ce:6a:60:a6:94:
01:0d:da:2c:42:76:f4:57:21:0b:4a:1c:8b:64:f7:
2b:2f:f8:0f:d4:a0:53:55:30:d2:05:7f:fc:b6:14:
1b:d6:a3:48:78:6a:56:1c:56:91:ac:f2:d4:7c:fb:
22:fc:2c:f8:a3:d1:67:e2:5c:37:46:93:b7:70:5d:
5c:e7:27:d2:b1:b4:07:07:50:9c:5a:e7:98:1d:91:
a5:98:46:5b:eb:b1:f8:90:88:f9:63:c3:be:11:c3:
ca:be:57:4a:86:7a:99:a3:1d:08:b9:8d:3c:e0:80:
0a:e1:a1:02:d7:46:d8:e2:8d:ae:23:39:cc:ea:2f:
39:4d:66:56:b9:8f:ee:bd:e4:0d:67:06:61:b9:ab:
b9:89:fd:a8:eb:e3:d5:9b:eb:91:d0:28:5e:c1:18:
93:ae:f6:1a:4e:d3:d5:28:e8:e3:5e:a8:d2:a1:95:
da:e9:c7:27:c3:bb:17:79:6a:58:88:60:97:73:d7:
70:61:f4:38:b6:60:f9:77:d7:f2:bd:06:91:42:9c:
32:31:13:0e:55:bc:9b:26:af:34:f9:ff:f4:43:bd:
e4:18:2e:8e:c7:5d:5c:4e:62:3e:b9:02:2a:cc:cc:
85:cc:53:d3:ac:40:d2:4f:49:5b:1e:5c:e9:a3:71:
fa:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DD:88:62:18:D9:25:99:D4:A8:DF:7D:DB:35:DC:6E:7A:76:5A:D3
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
172.99.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:de:7a:e4:6d:fa:e9:39:9a:e8:8f:f1:86:b9:11:02:9d:bc:
f2:7b:ef:97:fd:3b:77:8d:a5:1d:0a:c4:34:c0:71:fa:41:5d:
29:b9:fc:37:74:82:db:33:24:9a:0f:e0:37:d3:b8:4a:e1:56:
c4:25:6f:b2:4a:54:fb:f3:f5:49:d7:06:ca:85:a5:b4:a9:25:
fb:fd:cd:14:cb:4c:2e:6b:57:60:b3:97:e0:f6:ec:a4:6c:ce:
e9:9f:f9:1e:97:d7:94:79:0a:13:03:a3:38:4e:2f:a5:ac:21:
a7:48:12:28:f4:02:0b:ac:2f:d2:8b:7d:da:8a:d0:5b:cc:de:
ce:a9:fe:5e:46:65:7a:58:40:09:17:d0:1d:8a:c2:46:a7:c7:
46:76:4e:79:dc:8a:5b:b3:1d:6e:07:0a:a3:76:ed:03:d4:ff:
87:ef:72:65:cf:5d:e3:18:a9:8a:e6:36:35:89:9d:aa:c2:c0:
3e:34:c8:2d:a1:d8:30:ae:83:0f:ea:f1:64:e3:32:9d:95:bd:
56:3e:52:7e:8f:e5:c6:43:0b:fd:65:65:70:6f:cc:7f:1a:99:
e5:2c:19:51:b8:94:ac:25:16:90:6d:0f:59:22:78:c6:ee:27:
9a:35:63:c0:fc:43:12:e2:a7:92:e3:6d:56:5a:79:46:e9:83:
4a:09:f3:8c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUH4aWHe7+YFA86SIrs8T82fFw7xwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3
MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjYwODEyMDkzMTE5WhcNMjcwODExMDkzNjE5
WjAzMTEwLwYDVQQDEyhBQkREODg2MjE4RDkyNTk5RDRBOERGN0REQjM1REM2RTdB
NzY1QUQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJ/lR7kA/1Lc
zmpgppQBDdosQnb0VyELShyLZPcrL/gP1KBTVTDSBX/8thQb1qNIeGpWHFaRrPLU
fPsi/Cz4o9Fn4lw3RpO3cF1c5yfSsbQHB1CcWueYHZGlmEZb67H4kIj5Y8O+EcPK
vldKhnqZox0IuY084IAK4aEC10bY4o2uIznM6i85TWZWuY/uveQNZwZhuau5if2o
6+PVm+uR0ChewRiTrvYaTtPVKOjjXqjSoZXa6ccnw7sXeWpYiGCXc9dwYfQ4tmD5
d9fyvQaRQpwyMRMOVbybJq80+f/0Q73kGC6Ox11cTmI+uQIqzMyFzFPTrEDST0lb
Hlzpo3H6FwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKvdiGIY2SWZ1Kjffds13G56
dlrTMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv
NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4
MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl
MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMzMzkzODM5MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxjFzANBgkqhkiG9w0BAQsF
AAOCAQEAOt565G366Tma6I/xhrkRAp288nvvl/07d42lHQrENMBx+kFdKbn8N3SC
2zMkmg/gN9O4SuFWxCVvskpU+/P1SdcGyoWltKkl+/3NFMtMLmtXYLOX4PbspGzO
6Z/5HpfXlHkKEwOjOE4vpawhp0gSKPQCC6wv0ot92orQW8zezqn+XkZlelhACRfQ
HYrCRqfHRnZOedyKW7MdbgcKo3btA9T/h+9yZc9d4xipiuY2NYmdqsLAPjTILaHY
MK6DD+rxZOMynZW9Vj5Sfo/lxkML/WVlcG/MfxqZ5SwZUbiUrCUWkG0PWSJ4xu4n
mjVjwPxDEuKnkuNtVlp5RumDSgnzjA==
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:24 2026 by rpki-client