
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
File: 32332e3138352e3230382e302f32342d3234203d3e20393833.roa (raw, json)
Hash identifier: P2i/En77UcWCUvlsrPkPmxVwNKnfwsJ5Rblv+cdx+4k=
Subject key identifier: 42:74:C5:53:57:F3:D4:B2:05:89:20:4C:C0:08:EA:52:FC:EE:85:4C
Certificate issuer: /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial: 168EE31BD34ECF5D9952A4B592D9544DE46A587A
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
Signing time: Fri 19 Jun 2026 07:53:13 +0000
ROA not before: Fri 19 Jun 2026 07:48:13 +0000
ROA not after: Fri 18 Jun 2027 07:53:13 +0000
asID: 983
IP address blocks: 23.185.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 04:24:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8e:e3:1b:d3:4e:cf:5d:99:52:a4:b5:92:d9:54:4d:e4:6a:58:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Validity
Not Before: Jun 19 07:48:13 2026 GMT
Not After : Jun 18 07:53:13 2027 GMT
Subject: CN=4274C55357F3D4B20589204CC008EA52FCEE854C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:43:79:98:d1:c0:fe:12:71:9e:cb:02:6d:
aa:81:d1:8a:8c:46:17:e0:d3:3e:d0:4a:36:75:9d:
fd:d4:92:db:a3:94:0f:c9:cd:ea:87:db:ca:aa:c4:
a0:29:82:d3:02:fb:48:89:da:ce:8a:f1:81:69:38:
03:83:76:fb:63:38:e5:67:ee:26:4c:78:e8:3d:86:
b7:f0:02:2a:55:a9:0a:75:11:c7:d3:84:84:46:aa:
57:03:62:98:33:c7:1e:fd:83:c3:99:cd:30:d4:b9:
18:d1:9c:e6:ee:62:6c:63:f0:a1:19:d3:7d:f8:b7:
dd:2a:be:35:4a:b2:8f:e9:1e:c5:72:30:ef:16:6b:
22:2d:a7:75:03:6c:09:e9:0b:76:8b:f3:90:19:a8:
02:a9:b9:0e:14:f4:db:62:27:23:5f:36:58:f6:e1:
94:ab:94:33:09:ae:b1:b5:c0:53:4f:6f:5b:3e:56:
32:c0:b4:8d:6b:97:92:e5:75:53:7b:ab:8d:63:e2:
0d:22:69:30:b5:27:05:5f:43:a4:09:53:05:8e:9d:
26:dc:6b:ba:9b:5f:e1:80:22:05:41:a0:d3:62:56:
12:ee:71:db:15:99:3b:f2:7a:9f:b3:39:61:49:92:
1e:02:81:3e:75:57:fd:c9:bd:c6:6b:8a:68:66:61:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:C5:53:57:F3:D4:B2:05:89:20:4C:C0:08:EA:52:FC:EE:85:4C
X509v3 Authority Key Identifier:
keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.185.208.0/24
Signature Algorithm: sha256WithRSAEncryption
50:25:ad:e4:1f:94:8c:c0:6e:ce:a1:41:ef:25:cf:a9:45:be:
ce:ae:a1:e2:bc:7e:e1:2d:c1:67:e4:d3:01:54:85:6d:ec:32:
90:7e:d0:10:ca:c6:09:10:f6:1c:b9:1e:e4:0d:01:b6:ce:a9:
22:b1:69:b5:45:56:94:c0:12:b5:70:49:e6:41:46:18:d2:03:
a7:43:e6:ef:fe:b2:23:cb:90:ce:55:5e:01:cd:6c:fe:3d:4b:
ba:f0:72:67:91:c6:61:ad:cc:7b:43:48:a9:4d:96:74:fa:44:
d0:8c:32:c7:d7:79:22:d0:66:c0:d9:ae:47:c7:e6:4d:01:a6:
57:ef:a5:ba:2d:ec:7f:91:4d:ce:6f:a8:ea:62:fd:35:a6:25:
10:c7:61:0c:24:50:5a:15:16:c6:73:68:33:14:3a:0f:99:d6:
7e:79:d9:c7:a5:6c:f7:ed:f1:27:de:43:10:0b:ed:f8:63:d5:
56:85:c8:67:bf:76:d2:26:12:b2:0d:21:b1:fc:4b:2c:5c:0f:
9e:51:46:fb:4d:54:f2:e3:26:bd:27:fa:ec:13:b8:f9:ed:74:
d8:a5:c3:e2:58:f9:8d:76:10:1a:1d:a8:fa:71:ae:6c:36:73:
cf:a9:63:ab:d0:40:32:35:d4:f6:a1:42:d9:a2:21:e5:86:58:
08:41:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:56 2026 by rpki-client