
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532363938.roa
File: 3139392e3233312e36362e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier: ZqfZehCzWgrUgED+e7XUtJ7e0BPk9OdjI9GX+AIEm04=
Subject key identifier: B2:3D:D8:DC:68:84:9A:08:01:BA:41:1E:A0:02:F6:05:75:7C:D6:11
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 16B15DE47E7486854E2E2E48FDA37EE927B53737
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532363938.roa
Signing time: Tue 01 Sep 2026 05:23:32 +0000
ROA not before: Tue 01 Sep 2026 05:18:32 +0000
ROA not after: Tue 31 Aug 2027 05:23:32 +0000
asID: 152698
IP address blocks: 199.231.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 22:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b1:5d:e4:7e:74:86:85:4e:2e:2e:48:fd:a3:7e:e9:27:b5:37:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Sep 1 05:18:32 2026 GMT
Not After : Aug 31 05:23:32 2027 GMT
Subject: CN=B23DD8DC68849A0801BA411EA002F605757CD611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1d:35:81:96:de:55:4d:ae:50:4d:95:ab:14:
ef:4c:71:71:d9:d4:fd:00:d7:d6:de:64:31:42:23:
98:39:5d:d4:2e:38:fe:9c:e9:83:29:7e:b3:9c:fd:
25:f6:6b:47:a8:f0:72:6e:42:ca:1e:85:43:df:1f:
6e:19:5f:fc:f8:f3:6b:3b:61:ab:3e:e6:81:7a:91:
4a:51:01:d7:54:fc:18:be:cc:12:6a:1f:12:17:fd:
86:1c:10:19:41:3b:d0:5d:c5:86:2a:b3:26:68:31:
96:e7:c6:d6:79:55:34:9b:87:1d:2d:0d:43:11:94:
20:90:8e:2f:e6:4d:db:b4:a3:0f:48:6b:a6:cd:d5:
f7:27:30:0e:56:00:f6:88:bf:ab:e3:3b:69:3e:58:
19:6b:16:94:c3:73:bc:c1:63:be:d6:59:84:a4:e7:
14:61:ff:8f:ff:0a:98:e9:35:85:d1:07:2b:25:c0:
36:40:d7:45:a5:72:78:09:55:3b:50:14:6a:81:7a:
73:f6:f0:67:6b:f4:46:37:19:a0:86:1d:7f:eb:cc:
d2:ec:95:0e:d1:23:8b:f1:73:f8:16:13:6c:cf:cd:
df:05:a5:54:81:99:ee:5e:8d:14:c7:7a:98:b6:de:
ab:f3:68:eb:a3:84:78:55:db:d9:9a:4c:4f:6b:e0:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3D:D8:DC:68:84:9A:08:01:BA:41:1E:A0:02:F6:05:75:7C:D6:11
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
af:5d:b0:da:9d:0a:e4:d4:48:9e:b9:c4:d2:22:06:2d:c9:df:
af:d1:2b:3f:05:4b:d7:53:c1:8b:03:63:1c:d0:56:d4:41:d0:
a2:74:75:6d:ea:c3:50:64:6a:ce:9b:0a:20:86:c3:79:a1:47:
a8:56:e1:75:d8:a0:31:8c:fa:ec:7d:f9:c8:0b:e8:22:02:eb:
35:7c:9d:46:5f:79:5c:75:22:7c:5e:35:5d:d2:45:b4:d4:c4:
b2:9b:8b:5c:0a:50:2b:a2:1b:04:ee:eb:aa:e8:0c:98:73:06:
76:fc:1d:f0:62:9a:08:4a:e2:66:41:e4:61:36:1e:14:ac:08:
32:f4:7f:fb:0c:2c:00:0d:df:9d:e2:cf:ac:fa:fa:32:45:66:
8f:f8:7e:1f:9a:7a:5f:3a:29:28:6d:56:66:37:fb:cb:2a:ac:
90:36:c3:42:40:cb:96:6c:86:9b:16:c0:4a:00:5a:f1:5c:14:
30:09:e9:a0:fd:b9:c9:e4:43:46:fd:e5:da:15:56:f5:e9:c2:
4f:fc:e9:d4:98:2c:4c:cd:c4:50:f3:b6:b8:3d:32:e2:d9:37:
da:09:9d:af:2e:9f:e2:d4:9c:e4:21:d7:03:e9:62:6f:bb:99:
fd:d3:5a:66:7d:5f:3f:e7:98:91:59:3c:ca:0a:9e:39:75:73:
9a:09:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:30 2026 by rpki-client