
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32332d3234203d3e20383334.roa
File: 3139322e302e32322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: Y10kJF1dbjqiNOdmuPODCS1CeWlsSTE1Ij5myN9IzP4=
Subject key identifier: 62:87:99:C8:4D:EB:64:36:D2:43:39:58:A9:18:65:60:25:21:A3:CE
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 7AFA80961B6BE0310472E5EC58DBC18C20B8DA42
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32332d3234203d3e20383334.roa
Signing time: Wed 07 Oct 2026 06:10:40 +0000
ROA not before: Wed 07 Oct 2026 06:05:40 +0000
ROA not after: Wed 06 Oct 2027 06:10:40 +0000
asID: 834
IP address blocks: 192.0.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 10:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fa:80:96:1b:6b:e0:31:04:72:e5:ec:58:db:c1:8c:20:b8:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Oct 7 06:05:40 2026 GMT
Not After : Oct 6 06:10:40 2027 GMT
Subject: CN=628799C84DEB6436D2433958A91865602521A3CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f6:26:7c:01:9b:31:79:c0:4d:31:ab:cc:25:
e8:01:9c:79:0c:3a:ff:43:14:72:b2:1e:c3:34:ff:
6d:a6:f1:23:65:b4:29:4b:f5:34:bb:fe:9b:c7:54:
98:0c:80:62:38:2b:9d:52:1c:77:31:8f:b7:b4:b5:
c3:c2:f2:0d:62:d9:78:a4:0a:03:80:b2:37:df:01:
da:03:ed:ef:9f:77:f4:04:15:d6:06:13:06:4a:c1:
1f:a6:d2:49:38:2f:f7:2f:33:9f:8e:a4:b8:37:f2:
e3:8c:b5:df:ae:3a:8a:5d:12:f7:e6:e5:4d:20:3c:
12:9e:e6:cb:38:b0:14:ac:43:c9:ae:fc:8d:89:26:
4a:d9:ac:20:34:07:9d:10:e8:44:a3:39:1f:db:9f:
7e:c0:4e:ab:49:0d:64:3c:7e:62:d5:fe:7c:8a:8f:
57:01:62:99:bc:b6:e9:a5:da:18:7b:83:19:8e:34:
93:8c:96:fb:49:e8:db:c8:c6:d2:0d:3c:b8:6f:fe:
a3:ae:44:94:4f:64:b1:7a:42:ad:d1:f3:d1:5a:f8:
27:b5:19:52:49:be:23:82:51:de:e6:e2:16:09:54:
a7:52:54:02:19:22:2f:1e:4c:d8:1f:3b:73:5c:1b:
a5:3c:70:6e:64:0c:e6:b4:03:79:0a:f3:d5:ac:a4:
39:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:87:99:C8:4D:EB:64:36:D2:43:39:58:A9:18:65:60:25:21:A3:CE
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.22.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a0:61:3c:89:df:80:18:01:aa:9f:88:ed:57:1e:e7:11:d6:
0b:df:b3:23:c7:b6:aa:c8:40:2e:50:a9:bc:e3:db:8b:c4:b0:
d7:ee:e0:f3:7b:1f:35:f2:a9:25:61:e5:a5:9c:bb:b4:e9:2f:
7f:f6:99:73:17:bb:73:37:47:b7:f9:86:98:d4:da:df:8d:de:
94:03:b1:ce:e2:63:73:3e:91:dd:53:1c:8b:1d:0d:07:ae:f1:
e0:71:17:7d:83:b9:c7:52:0c:eb:1d:b2:db:99:c6:72:40:7d:
dc:ec:2e:f1:c7:53:43:5d:7b:af:47:ae:a5:4e:4c:e5:bf:f9:
97:dc:d2:0c:c4:fa:de:bd:99:e2:ba:87:a8:54:01:88:79:ea:
53:4e:01:64:01:42:ae:53:13:ee:e3:8c:21:f3:b3:b1:21:5f:
cb:82:32:37:60:47:d5:00:dd:50:59:cb:a7:f3:9d:c8:d4:32:
2c:1f:28:c3:25:7d:d0:f8:59:11:b8:9e:f9:74:d9:1b:4c:7d:
40:54:20:f3:c7:1e:66:c9:db:5b:6d:e6:6b:1c:c0:21:b5:a3:
df:df:af:c2:77:ef:3c:d7:4f:00:b1:96:66:54:f3:87:44:64:
e6:28:e9:00:2e:ec:fc:5c:c1:d8:b1:3f:d7:de:fd:65:2c:6a:
4d:e3:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:57:26 2026 by rpki-client