
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20343031383139.roa
File: 3139382e3137352e3136382e302f32342d3234203d3e20343031383139.roa (raw, json)
Hash identifier: fv42etcuFHuAPNb7yuShsBmg+embXeEdLlUp+NraIho=
Subject key identifier: 2E:C0:B2:04:B7:4E:1C:ED:96:7A:78:80:3B:4F:85:B4:8E:19:42:C6
Certificate issuer: /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial: 2B1C88AFDA662F12E857418A75DBE61A67631654
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20343031383139.roa
Signing time: Thu 26 Feb 2026 09:23:21 +0000
ROA not before: Thu 26 Feb 2026 09:18:21 +0000
ROA not after: Thu 25 Feb 2027 09:23:21 +0000
asID: 401819
IP address blocks: 198.175.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 05:03:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:1c:88:af:da:66:2f:12:e8:57:41:8a:75:db:e6:1a:67:63:16:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Validity
Not Before: Feb 26 09:18:21 2026 GMT
Not After : Feb 25 09:23:21 2027 GMT
Subject: CN=2EC0B204B74E1CED967A78803B4F85B48E1942C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f5:06:46:f1:6f:66:57:af:2b:6a:b6:6e:77:
37:a9:ac:e5:4a:2b:06:21:12:2d:f3:62:c6:d7:f3:
17:6e:54:24:7d:b9:e9:8a:9e:f9:52:93:76:4b:ee:
c6:f1:cb:21:13:b7:4b:52:df:53:6d:e1:bf:95:fe:
78:b4:31:db:85:34:6e:29:a0:fa:02:98:ae:7c:48:
76:f8:bb:32:39:f3:f7:42:3c:07:18:9f:f5:72:75:
87:2d:c9:a4:10:c8:60:d9:d8:35:de:11:7a:e2:41:
ee:72:ed:c1:ce:15:d3:59:49:03:eb:0e:5a:e6:1e:
ee:3f:46:7b:68:d8:8b:4d:12:bd:b2:d7:ff:f0:43:
fb:e4:0b:0d:d8:10:27:b7:56:17:c7:1d:c3:0a:57:
d8:77:22:5c:5d:a8:27:dd:ea:1b:af:68:0a:2f:af:
4b:5e:29:e2:ba:5d:1a:f4:4d:b0:8d:1c:76:73:c3:
3b:fc:23:33:87:08:b4:d4:22:b4:32:81:a8:95:e2:
f6:ec:df:7f:b5:c1:89:86:8f:c9:ac:86:6f:5d:26:
70:19:d1:04:65:42:fe:d6:1d:aa:d6:ea:76:c2:67:
b7:91:74:b3:bf:5c:5d:6c:08:31:24:21:5c:a0:6a:
09:c7:26:49:17:fe:08:a2:f6:e1:de:0f:6a:ea:7a:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C0:B2:04:B7:4E:1C:ED:96:7A:78:80:3B:4F:85:B4:8E:19:42:C6
X509v3 Authority Key Identifier:
keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20343031383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.175.168.0/24
Signature Algorithm: sha256WithRSAEncryption
81:88:c2:71:e6:ed:b6:3a:90:16:f8:a0:7f:53:50:89:25:f4:
41:66:2c:4a:d8:d9:2c:9f:66:74:06:2f:9e:f3:6b:c4:1f:ee:
cd:5e:db:09:37:d6:c6:c0:5e:66:56:19:72:59:78:b3:b3:e4:
5b:37:a8:e3:bb:5e:29:0a:d2:fe:af:dc:48:d2:bf:f8:20:b6:
07:44:ba:2b:ed:3d:8a:61:87:fd:35:56:e4:94:d6:3c:5f:67:
06:d9:38:7c:c1:1f:03:99:91:d6:74:22:e5:c8:df:60:28:83:
0f:74:12:5f:11:26:a7:43:3a:e6:b6:b5:6d:10:57:83:82:ab:
ee:3a:41:73:fa:23:ae:20:f1:f6:64:5c:02:fc:43:9c:11:d3:
e9:dc:70:b0:fa:f4:68:4e:78:0f:bd:54:26:96:e4:95:df:28:
49:ef:9c:95:98:e4:f1:52:2c:ba:d7:c9:d6:73:e0:62:85:7e:
4f:29:10:f1:3a:4e:da:73:78:b9:ef:00:ee:82:61:5a:58:e8:
5e:30:9c:7b:73:d0:a5:cf:9c:1f:fe:d8:1d:83:bf:57:bf:3a:
5f:5a:b3:0a:d2:4f:8b:f1:a7:4f:9d:8c:6e:72:7d:1a:68:13:
ef:a1:8b:39:39:b2:63:9a:17:92:1c:24:b4:67:b5:37:20:c3:
70:b3:d7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:30 2026 by rpki-client