
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20343032323635.roa
File: 3139392e39312e3130312e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: fSkL0OZy8O4eIwBxLjgAjDkA5Pl1wORHQedc5x7T9qE=
Subject key identifier: 6F:A1:3E:E4:DB:25:B1:59:2C:26:BA:03:8F:58:8E:A0:D1:B9:0D:9B
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 5DE60B734747AF2540A0B4F3817EDA8FD470FFE2
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20343032323635.roa
Signing time: Fri 18 Sep 2026 11:22:29 +0000
ROA not before: Fri 18 Sep 2026 11:17:29 +0000
ROA not after: Fri 17 Sep 2027 11:22:29 +0000
asID: 402265
IP address blocks: 199.91.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 17:49:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e6:0b:73:47:47:af:25:40:a0:b4:f3:81:7e:da:8f:d4:70:ff:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Sep 18 11:17:29 2026 GMT
Not After : Sep 17 11:22:29 2027 GMT
Subject: CN=6FA13EE4DB25B1592C26BA038F588EA0D1B90D9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5e:1b:c4:db:86:d0:a3:c4:f1:e9:82:d7:8d:
26:99:0b:18:87:ff:75:5a:84:b6:b8:8b:3e:43:63:
0a:1d:2f:96:99:f8:aa:3f:72:cc:3a:49:0e:49:92:
1a:8e:1d:32:13:07:37:a3:b9:95:3e:af:d2:35:67:
4a:df:0b:50:03:6b:b9:e2:f3:02:05:79:c0:78:28:
03:78:0b:ae:93:7e:ab:89:53:14:35:bc:c2:28:79:
4d:de:76:e6:47:3c:22:98:e4:06:dc:4b:7a:03:50:
16:c1:61:b5:61:0d:2f:d6:b9:53:ce:21:fb:42:74:
09:99:83:45:4d:03:31:24:83:ce:03:9d:d5:90:53:
21:40:52:23:9d:08:12:60:7b:57:75:8f:5b:43:ce:
86:32:f9:b7:b9:0f:54:7f:6b:a0:6e:17:0c:5c:ff:
dc:e7:16:73:11:e8:03:65:68:af:08:84:7e:9e:19:
a6:1c:dd:4f:7e:73:ff:91:39:b8:00:b0:68:02:a3:
c3:de:2d:f5:89:e3:e7:e3:ef:a6:5e:62:b1:c4:fb:
c1:1d:16:a6:45:f0:7e:30:71:3e:ad:0f:01:ab:42:
af:58:b6:22:81:40:bc:3b:de:91:5c:4a:31:8a:26:
06:fc:a1:66:b2:03:4b:aa:b6:03:1a:a2:8d:49:cf:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A1:3E:E4:DB:25:B1:59:2C:26:BA:03:8F:58:8E:A0:D1:B9:0D:9B
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:5e:33:1a:6b:0b:e5:59:ee:dd:08:d8:d8:83:7d:ec:ca:80:
e7:bf:2d:4e:c1:54:c6:e3:ec:c9:03:aa:9b:b4:cd:a8:6b:dd:
50:48:da:dd:fb:0c:52:b2:87:19:64:bc:c2:2d:f8:10:cf:68:
27:ce:0e:ae:60:88:55:ea:48:43:dd:c5:b1:6f:a2:e4:9a:8c:
83:30:06:07:a1:1e:b0:0a:da:6a:f1:ae:ac:7f:fd:24:97:d7:
18:77:c7:e8:f8:e1:57:60:c6:62:44:b9:9c:01:71:36:9a:e1:
25:fd:64:11:6b:e0:47:19:a3:15:96:16:04:3c:89:b9:3e:20:
52:b8:0f:e3:c0:bd:08:a2:25:d5:9f:2b:5b:52:77:1f:ea:b6:
0f:67:ce:41:2a:c0:3f:a5:a9:fb:b8:56:6e:b8:9b:f5:71:a6:
c4:a3:89:64:d8:30:85:79:a3:6b:1d:e4:c4:12:f4:5e:13:5d:
57:97:85:23:30:e5:46:1b:8e:92:f3:09:33:1e:52:02:e1:37:
3a:18:1c:e3:b6:29:68:12:b7:be:48:5d:0c:29:58:c7:9e:61:
ea:7f:20:82:33:58:a7:5e:28:15:67:69:1b:fb:49:84:e4:da:
1a:95:81:47:e3:f4:78:46:bf:9d:31:e4:37:2d:43:cd:6d:dc:
4f:98:37:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:42 2026 by rpki-client