
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e20383334.roa
File: 3139392e39312e3130302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: i8MxH3Fk4coCQSLJpn2QwypQ+bSWkpaU9u48iYELq4A=
Subject key identifier: 84:A1:64:76:39:09:0A:72:AB:00:B0:A1:BB:FB:02:B1:88:23:37:07
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 417DBBEF2E88B28CCBF97E9D07E55AC39B5A35BC
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e20383334.roa
Signing time: Sun 22 Feb 2026 03:33:57 +0000
ROA not before: Sun 22 Feb 2026 03:28:57 +0000
ROA not after: Sun 21 Feb 2027 03:33:57 +0000
asID: 834
IP address blocks: 199.91.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7d:bb:ef:2e:88:b2:8c:cb:f9:7e:9d:07:e5:5a:c3:9b:5a:35:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Feb 22 03:28:57 2026 GMT
Not After : Feb 21 03:33:57 2027 GMT
Subject: CN=84A1647639090A72AB00B0A1BBFB02B188233707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:26:79:f2:af:e3:2a:33:1d:0b:8b:fa:35:
b5:45:cd:29:a8:db:c5:80:79:ed:e6:c2:ab:c4:00:
2a:15:7c:74:18:01:96:8b:37:e7:f8:94:61:19:11:
65:0f:7f:00:29:a5:2e:77:db:e2:cb:8c:a6:4a:24:
84:24:57:d4:4d:98:07:78:02:00:6f:65:0c:e0:45:
65:a1:9a:58:7d:1f:a1:7d:cc:5c:1b:41:31:eb:94:
a4:89:0b:b7:98:04:da:d8:9c:ac:f0:f3:15:80:bf:
73:c9:72:59:e2:a3:11:49:db:49:59:1b:2a:92:55:
e6:30:eb:76:d2:8f:34:ba:f4:16:a9:94:af:01:6c:
b2:61:81:09:a1:9a:77:c1:27:51:ce:cb:e3:8c:ec:
ad:dc:30:fc:91:c4:2b:90:cc:7b:81:eb:d0:49:99:
90:2b:10:91:36:d4:1a:f8:dc:25:87:8f:5a:a3:bf:
ce:fa:b4:dc:fe:be:57:80:68:62:b2:ab:ea:c6:13:
12:7e:84:d1:b9:c9:43:61:8b:39:c3:79:bb:1b:01:
ba:ab:64:ab:81:95:9e:b8:fb:b8:32:46:b0:01:2f:
2b:a5:14:a9:07:41:88:fc:84:91:f8:24:c2:d3:c3:
47:4c:ae:d4:69:96:01:62:b5:e4:81:fe:21:77:67:
5d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A1:64:76:39:09:0A:72:AB:00:B0:A1:BB:FB:02:B1:88:23:37:07
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.100.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ad:06:31:84:8d:64:a7:b4:9f:2c:54:56:c6:3b:3c:02:08:
c2:a4:5e:28:14:d9:32:c8:b2:0b:0a:2e:7a:55:8b:21:ba:02:
46:f3:f8:a2:7d:4e:30:34:cc:04:af:57:2e:96:af:31:be:c4:
86:ef:e9:60:48:f7:c1:d0:98:6a:4f:12:23:e5:46:01:32:62:
7a:b8:51:ab:fe:6d:f4:08:64:09:2a:93:cc:68:b5:1b:ff:59:
2c:3e:e5:12:61:94:35:0a:fe:25:bb:1d:97:51:0f:13:f3:bb:
9f:c0:db:ea:b5:f4:4c:f7:d3:c1:1c:1f:49:1d:31:88:be:dd:
45:4d:f8:0d:78:07:b0:c7:1b:a7:20:87:98:d1:82:55:00:b3:
7f:f1:c4:3f:3e:b1:b2:af:06:c0:9c:05:29:37:2d:7b:b8:12:
6e:2e:6e:51:39:e8:e6:c0:a4:4d:3d:48:b9:57:70:8e:7c:88:
e6:bb:48:ca:e0:bd:0b:c0:6a:1a:12:6b:5d:02:2f:3e:44:a0:
8d:1e:47:5e:ea:2e:71:88:26:ef:50:b9:f7:a9:38:64:06:f1:
1b:6f:89:38:1c:bf:a5:e1:45:a1:3e:0b:8c:37:b6:ab:f8:8f:
1c:b9:d6:f4:00:fa:db:e6:43:41:f6:c6:40:73:67:e7:f7:72:
a7:11:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:07 2026 by rpki-client