
$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
File: 3133312e3134332e39342e302f32342d3234203d3e203436343735.roa (raw, json)
Hash identifier: EsSc6M3F7QzS068J5h5aEmWiVv8Jb0OVazWqG6xTJTE=
Subject key identifier: 3B:2E:60:2F:A4:17:91:41:BF:12:44:08:73:9D:F6:85:29:E5:94:EB
Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial: 243BE55D66ECDBB6231B258FA50DCF9AABA9A1F3
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
Signing time: Wed 11 Feb 2026 00:55:53 +0000
ROA not before: Wed 11 Feb 2026 00:50:53 +0000
ROA not after: Wed 10 Feb 2027 00:55:53 +0000
asID: 46475
IP address blocks: 131.143.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 22:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:3b:e5:5d:66:ec:db:b6:23:1b:25:8f:a5:0d:cf:9a:ab:a9:a1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Validity
Not Before: Feb 11 00:50:53 2026 GMT
Not After : Feb 10 00:55:53 2027 GMT
Subject: CN=3B2E602FA4179141BF124408739DF68529E594EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e6:0f:48:cc:11:e2:f6:84:6a:80:3e:b2:35:
4e:5d:0e:88:c4:75:46:78:8a:ca:04:97:96:f0:06:
24:60:c6:69:a0:bc:0c:48:f8:f1:48:9a:6e:fe:a0:
09:7a:c8:f1:23:2d:ed:cb:99:c2:f1:1a:02:2d:a6:
82:c2:dc:b0:44:cb:d7:18:dc:15:4b:90:90:0e:42:
f7:bf:7c:a5:19:f9:5a:9b:e6:be:82:9e:7c:84:e3:
49:b6:4c:c8:d7:47:48:80:2d:90:26:17:a0:56:ba:
d6:a0:ee:ce:4c:54:93:61:82:51:57:e1:76:b2:54:
b1:25:7b:98:6a:43:2c:d8:9d:8b:c0:18:03:52:53:
76:41:f0:69:cd:0c:46:0b:d1:00:b1:e9:27:8a:50:
dc:5e:41:4f:79:54:ff:31:fd:fe:93:3c:ef:98:3b:
42:dd:c9:f6:a3:1b:49:55:f7:cc:08:45:f2:67:70:
d8:e5:4f:6c:3e:c8:0d:9f:7f:b8:40:ef:3e:00:93:
28:f0:a2:d0:7e:8f:e3:70:33:b4:a3:bb:85:6d:7e:
24:3c:30:e6:08:aa:a5:fb:3d:be:f8:3a:d3:f9:d2:
57:59:e5:f0:55:f3:d9:93:03:f6:e7:63:a7:9f:1c:
d3:88:7a:f6:fa:3f:41:f5:35:e3:43:5a:5a:d9:b5:
ef:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:2E:60:2F:A4:17:91:41:BF:12:44:08:73:9D:F6:85:29:E5:94:EB
X509v3 Authority Key Identifier:
keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.143.94.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b6:20:50:6b:97:5e:ca:4d:81:90:96:72:3a:01:9b:11:3e:
2b:8b:41:58:f3:c9:be:a8:fe:11:5b:b4:92:82:88:f6:22:12:
d0:ff:67:fe:e5:e3:86:3c:84:90:ce:90:8c:c0:2e:d9:a0:bb:
a3:ad:3a:39:23:64:2f:f5:76:af:74:94:be:2d:88:13:c6:34:
e4:b5:e9:a0:9f:8c:a5:39:5a:3e:2b:66:3a:42:45:b1:b4:17:
95:f3:f7:5f:b0:39:61:be:af:a5:e1:8c:f9:aa:22:d7:41:04:
99:19:27:97:55:81:1c:8a:db:6f:a9:14:1c:4f:21:5a:d8:a2:
c4:0a:87:b6:16:d4:8e:9b:d8:2f:5a:ac:74:1a:83:5f:64:eb:
fd:de:33:ec:90:6f:ff:e9:78:4b:9c:08:79:4f:18:24:aa:13:
51:c4:aa:fe:30:b4:f3:e4:84:dc:ca:0c:46:4d:37:a8:c9:e0:
da:b1:03:a1:90:3b:b5:4d:e4:b8:11:90:fe:c8:56:77:83:89:
6c:aa:0e:f5:52:5f:4e:1e:ab:34:5c:69:a3:38:80:6b:73:70:
2a:db:48:cf:c1:f6:9d:cb:c1:da:d8:c1:e5:ae:09:59:51:4c:
b5:26:67:ca:67:b1:0e:9d:82:c0:80:87:fa:e0:f3:63:be:c3:
0a:69:19:f9
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUJDvlXWbs27YjGyWPpQ3PmqupofMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUyODc5ZDI4M2M3YTM4Y2QyOThiYzUzZWM2NzA0YjI5
YjYxZmNmYmRhZmU4ZWJlOTAwHhcNMjYwMjExMDA1MDUzWhcNMjcwMjEwMDA1NTUz
WjAzMTEwLwYDVQQDEygzQjJFNjAyRkE0MTc5MTQxQkYxMjQ0MDg3MzlERjY4NTI5
RTU5NEVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuYPSMwR4vaE
aoA+sjVOXQ6IxHVGeIrKBJeW8AYkYMZpoLwMSPjxSJpu/qAJesjxIy3ty5nC8RoC
LaaCwtywRMvXGNwVS5CQDkL3v3ylGflam+a+gp58hONJtkzI10dIgC2QJhegVrrW
oO7OTFSTYYJRV+F2slSxJXuYakMs2J2LwBgDUlN2QfBpzQxGC9EAseknilDcXkFP
eVT/Mf3+kzzvmDtC3cn2oxtJVffMCEXyZ3DY5U9sPsgNn3+4QO8+AJMo8KLQfo/j
cDO0o7uFbX4kPDDmCKql+z2++DrT+dJXWeXwVfPZkwP252OnnxzTiHr2+j9B9TXj
Q1pa2bXvKQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDsuYC+kF5FBvxJECHOd9oUp
5ZTrMB8GA1UdIwQYMBaAFMmMiSrQ4NgriSUaHxdzMTmDG3iXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5Lzg1M2NiNDg0NmVlMzQzMTNiYWMwNjk1NGI1YWI4NmJiLzAv
Qzk4Qzg5MkFEMEUwRDgyQjg5MjUxQTFGMTc3MzMxMzk4MzFCNzg5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyLzVlMTRlNzM3LTc3YjktNGVmYi1hNWVhLWUzMTE5NTk0YTY2Ni82NTI4
NzlkMjgzYzdhMzhjZDI5OGJjNTNlYzY3MDRiMjliNjFmY2ZiZGFmZThlYmU5MC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84NTNjYjQ4NDZlZTM0MzEzYmFjMDY5
NTRiNWFiODZiYi8wLzMxMzMzMTJlMzEzNDMzMmUzOTM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzNjM0MzczNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIOPXjANBgkqhkiG9w0BAQsF
AAOCAQEAjLYgUGuXXspNgZCWcjoBmxE+K4tBWPPJvqj+EVu0koKI9iIS0P9n/uXj
hjyEkM6QjMAu2aC7o606OSNkL/V2r3SUvi2IE8Y05LXpoJ+MpTlaPitmOkJFsbQX
lfP3X7A5Yb6vpeGM+aoi10EEmRknl1WBHIrbb6kUHE8hWtiixAqHthbUjpvYL1qs
dBqDX2Tr/d4z7JBv/+l4S5wIeU8YJKoTUcSq/jC08+SE3MoMRk03qMng2rEDoZA7
tU3kuBGQ/shWd4OJbKoO9VJfTh6rNFxpoziAa3NwKttIz8H2ncvB2tjB5a4JWVFM
tSZnymexDp2CwICH+uDzY77DCmkZ+Q==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:27:20 2026 by rpki-client