
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3135322e302f32312d3234203d3e20383334.roa
File: 3139382e312e3135322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: VbcGI+QQKxf+Rlxkvi2wkWdmUDVYM1uYRWFXeS1v3a0=
Subject key identifier: 19:FC:E8:F1:8E:5E:D1:3A:92:6F:D7:A2:2D:4D:A5:1A:8C:A5:86:BC
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 65CE76CAF8BA7FCF87119D41055A1D7E6CE45200
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3135322e302f32312d3234203d3e20383334.roa
Signing time: Wed 03 Jun 2026 19:41:08 +0000
ROA not before: Wed 03 Jun 2026 19:36:08 +0000
ROA not after: Wed 02 Jun 2027 19:41:08 +0000
asID: 834
IP address blocks: 198.1.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 18:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ce:76:ca:f8:ba:7f:cf:87:11:9d:41:05:5a:1d:7e:6c:e4:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Jun 3 19:36:08 2026 GMT
Not After : Jun 2 19:41:08 2027 GMT
Subject: CN=19FCE8F18E5ED13A926FD7A22D4DA51A8CA586BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:dc:44:38:8f:54:5d:11:9b:fd:08:d5:86:
a1:a7:32:ee:7d:d5:d7:f4:4a:f4:0b:5f:fb:f6:9d:
41:d7:e8:1a:9b:18:08:bb:fe:6f:7c:4f:1f:be:38:
40:6d:3d:2c:72:12:a0:97:0d:90:6b:5c:23:37:82:
6a:dd:4e:4b:cf:7d:0e:1a:7d:94:2d:ec:97:ed:c7:
4f:60:73:ff:93:23:57:ae:18:fc:83:fb:e6:63:31:
a2:60:98:97:d1:89:fa:a8:cd:68:f2:b7:57:43:8b:
5a:8b:f7:07:70:e3:9e:69:2a:83:45:ee:dc:ae:51:
f6:c4:a7:1a:3c:a2:f1:a1:41:aa:c9:7b:ee:ff:90:
98:c7:1c:0f:c7:fd:b5:bd:6e:73:44:67:64:71:dc:
3f:1d:5b:f4:db:87:21:a9:ff:e4:aa:fa:35:4d:c0:
48:1c:06:d0:c2:67:56:78:9f:1a:1b:22:3b:00:64:
f7:b5:0b:d6:5b:43:11:78:39:bf:44:0a:d4:f2:2b:
8a:61:44:bd:ae:7f:cd:8d:62:62:51:c3:82:bd:f8:
49:f9:ef:a9:45:1a:a5:19:b3:c9:d6:91:8b:7a:70:
77:d3:ce:1f:b6:c5:dd:5b:3a:9f:5d:b6:76:39:42:
bd:e2:37:d4:34:ee:34:e1:c5:58:8c:70:bf:b1:cf:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:FC:E8:F1:8E:5E:D1:3A:92:6F:D7:A2:2D:4D:A5:1A:8C:A5:86:BC
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3135322e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.1.152.0/21
Signature Algorithm: sha256WithRSAEncryption
00:8a:a4:d5:64:40:75:c5:85:08:67:94:60:4b:88:0d:b1:d4:
b6:65:47:b0:1f:64:54:9a:90:f5:8e:be:51:cd:de:7f:6c:e5:
43:05:39:b9:32:24:61:25:97:9e:a4:68:f6:2f:cc:ce:88:fa:
4a:d8:8d:f5:ce:5a:f7:b9:b6:a9:2a:e9:69:f2:3c:b2:3e:48:
18:f5:03:ff:92:54:57:d1:9a:50:d1:b0:f0:b7:b8:26:23:7c:
f7:ba:1c:c1:97:3f:48:51:64:dc:db:c1:13:4f:49:fd:7b:be:
83:c4:d9:55:17:53:2e:30:4c:6b:4d:94:34:0b:98:bc:8b:c2:
39:73:12:c9:26:20:19:96:fd:d1:80:91:6f:42:83:eb:43:08:
66:d7:b7:88:97:b3:43:e9:e7:04:ea:37:0c:d6:19:90:00:50:
45:89:29:10:f7:45:d9:6c:39:c3:8d:0f:1d:15:7f:b4:84:5c:
23:d3:bb:09:28:52:0c:41:4b:20:10:10:2e:e6:7b:6d:e9:96:
6c:89:81:11:9f:ea:05:31:a8:9b:2d:c5:2a:a0:2b:e3:3e:0f:
f0:5f:d4:b2:37:ac:41:71:94:c1:d6:25:f7:2e:19:de:30:fc:
34:6f:0d:26:4a:91:6c:cd:57:89:98:42:b5:50:87:d7:82:be:
c0:0f:02:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:37 2026 by rpki-client