
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130322e302f32342d3234203d3e203139343337.roa
File: 3139392e39312e3130322e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier: 1QM89D0kUDjklmFX+x+kUKBhod1+NuBxQfZkjV1/xfo=
Subject key identifier: 89:42:1D:C2:BE:B4:07:86:26:40:B0:02:02:27:7A:47:D9:C0:05:E1
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 2C158184737D6D8B1A9D37A513E89E2B59A92FD2
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130322e302f32342d3234203d3e203139343337.roa
Signing time: Wed 08 Apr 2026 18:35:56 +0000
ROA not before: Wed 08 Apr 2026 18:30:56 +0000
ROA not after: Wed 07 Apr 2027 18:35:56 +0000
asID: 19437
IP address blocks: 199.91.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 00:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:15:81:84:73:7d:6d:8b:1a:9d:37:a5:13:e8:9e:2b:59:a9:2f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Apr 8 18:30:56 2026 GMT
Not After : Apr 7 18:35:56 2027 GMT
Subject: CN=89421DC2BEB407862640B00202277A47D9C005E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c2:94:36:f9:28:27:93:fb:ec:71:16:ae:34:
b6:62:ed:96:cc:6f:a0:dc:e8:1b:c0:7f:49:aa:07:
e4:82:22:70:72:63:1a:1a:f6:cb:eb:02:9a:c7:df:
5a:22:10:fb:fe:38:3b:13:df:20:b3:9c:b0:7a:82:
7d:37:93:20:0f:b1:cc:b5:fc:d6:fe:8a:98:df:08:
28:1b:aa:31:94:d9:8f:5b:e1:0d:fb:ee:fa:bc:e7:
06:fe:cc:2c:db:ce:61:c3:21:02:df:bf:34:31:13:
cb:d7:de:6d:ad:74:44:71:b8:72:d0:06:a4:80:14:
70:15:e9:a1:a7:b0:d4:f2:52:4e:1d:ae:e2:91:d4:
b3:8f:5d:a4:8d:7c:bf:6c:f9:e8:f9:48:55:06:f6:
d6:f0:a5:11:f7:5b:60:8f:98:76:b2:bb:d1:bb:d0:
51:a6:e4:0d:a2:68:e4:55:4e:79:a2:78:24:44:be:
07:05:32:6f:b3:fd:f9:33:d3:9c:37:bb:cb:29:31:
4e:9b:a3:41:92:28:27:07:a8:69:51:66:a4:86:bc:
da:0c:fb:73:6c:3a:ac:59:6d:bd:17:fc:52:61:f8:
ff:41:ef:90:0b:f0:9e:98:63:77:a7:cd:64:30:37:
f0:ff:2a:e3:d2:44:de:ff:f6:03:5f:b4:b7:f7:99:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:42:1D:C2:BE:B4:07:86:26:40:B0:02:02:27:7A:47:D9:C0:05:E1
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130322e302f32342d3234203d3e203139343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.102.0/24
Signature Algorithm: sha256WithRSAEncryption
29:5b:39:c8:cb:5c:8f:dc:4e:45:7f:85:40:17:cc:ff:e6:a3:
c4:26:0d:fa:1b:63:97:bf:90:b7:13:36:3e:ec:31:99:c8:11:
23:3b:82:65:6e:8e:90:38:e0:14:b4:68:04:dc:a7:7a:95:c8:
72:23:3c:71:10:07:28:70:11:b1:5a:08:a4:a8:e1:d6:21:fd:
e0:b0:5f:70:3b:24:a3:00:95:59:27:a0:12:f7:5b:a6:b8:03:
a1:a4:de:86:26:d2:48:1d:62:dd:75:ff:a5:97:07:3d:2a:42:
7e:63:e6:5b:d3:52:52:f1:02:cc:8b:57:70:41:fc:ba:cd:07:
b2:38:69:86:83:91:29:79:ce:07:12:cf:94:50:b9:e6:bd:42:
64:4d:53:04:28:92:54:d2:75:88:c9:2f:bf:61:83:d6:2a:08:
db:d0:78:6a:28:9f:b3:16:e3:08:48:91:d3:67:70:82:a4:98:
71:bb:40:06:bd:0a:3a:bf:d0:05:64:8d:07:10:f4:2e:e7:99:
bf:75:ec:1a:a4:af:70:35:85:87:6a:82:f8:ab:fe:59:9d:34:
5c:bd:4c:e5:db:4d:a4:38:be:d2:c7:e0:5b:30:1f:4f:b8:91:
51:d1:5d:25:64:fa:87:c1:a7:03:43:d7:8f:62:6f:f2:4f:ff:
5d:00:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:27 2026 by rpki-client