
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e20333937363330.roa
File: 3139392e3233312e36382e302f32342d3234203d3e20333937363330.roa (raw, json)
Hash identifier: bnGHvl/9wbaDzrAM95GWrppDsu/UL8FaVhg0agilRQg=
Subject key identifier: D8:84:36:B0:FF:E5:BF:F6:8C:31:7B:EB:25:78:93:FB:B6:AD:05:31
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 67437CA6C61C71C9A72B524FA7F5EE248C23CA79
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e20333937363330.roa
Signing time: Fri 11 Sep 2026 12:36:20 +0000
ROA not before: Fri 11 Sep 2026 12:31:20 +0000
ROA not after: Fri 10 Sep 2027 12:36:20 +0000
asID: 397630
IP address blocks: 199.231.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:43:7c:a6:c6:1c:71:c9:a7:2b:52:4f:a7:f5:ee:24:8c:23:ca:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Sep 11 12:31:20 2026 GMT
Not After : Sep 10 12:36:20 2027 GMT
Subject: CN=D88436B0FFE5BFF68C317BEB257893FBB6AD0531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:38:25:df:28:f4:11:e2:6c:f2:47:f1:4f:34:
5d:bd:03:56:f5:ef:c4:82:11:3e:81:84:1e:35:32:
dd:4e:61:ae:16:01:14:ef:69:31:b2:72:78:fb:2e:
5f:03:7c:9a:b3:e1:7a:e8:a3:e2:5d:49:ea:d3:8f:
5e:ca:b7:4a:71:da:c9:08:ce:a9:d9:25:5a:45:13:
f1:2c:cd:ed:e2:6a:ac:c2:a8:84:58:de:47:ad:e4:
89:e7:e2:f3:1a:18:fb:4c:3d:b6:c0:06:17:71:b9:
c5:4b:37:f3:b8:88:b1:16:14:af:26:b2:08:7a:55:
fa:22:78:1a:7b:fe:86:16:78:81:66:37:50:15:c3:
a6:44:40:6c:9a:f8:97:53:8a:c5:4e:ec:c3:d5:ac:
13:2e:7b:7a:5b:8a:60:de:da:c5:5a:9a:ca:29:fe:
05:bd:e5:97:e3:28:c2:1a:a7:26:3a:2f:32:fa:b1:
86:8b:f2:59:29:3b:a7:ca:b9:ef:29:9b:cf:c7:3b:
e9:9d:af:be:a8:31:4b:13:39:bf:a1:61:4b:07:30:
06:c7:5e:05:05:9c:99:36:a0:4a:23:3d:96:e6:52:
8f:77:4f:fb:42:6d:69:64:94:39:f7:eb:df:5f:a7:
ed:4c:a2:9b:0b:26:e2:ba:e5:41:4a:d5:34:9d:5a:
08:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:36:B0:FF:E5:BF:F6:8C:31:7B:EB:25:78:93:FB:B6:AD:05:31
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e20333937363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:b7:59:b7:f7:d6:a9:cb:76:c9:46:19:9b:f8:9f:4f:2c:24:
8d:99:10:08:03:3d:11:00:b2:b8:d3:62:36:a8:8f:4e:a2:89:
a9:d5:4e:98:fd:a3:78:36:79:94:1d:ac:e9:ca:32:f9:bf:a6:
d2:7b:71:61:05:97:99:80:dc:cb:96:55:2d:2d:c2:1a:9c:26:
b8:79:ae:b3:93:69:0c:ed:74:b1:72:bc:d6:d5:1c:1e:25:f8:
a3:9a:85:5e:3c:86:ad:94:d3:39:a3:2b:79:54:5e:89:4e:90:
0b:c6:55:3d:75:04:2e:89:8d:e7:6c:8c:e2:1b:bd:e9:d7:e5:
04:28:0b:d4:dc:d8:61:d5:5e:a7:06:90:f8:29:b3:99:e6:1a:
42:d3:a6:5d:72:79:78:2c:b5:56:96:6b:ee:46:ec:1b:b4:33:
27:e9:32:60:d2:e2:17:fd:26:51:f4:f9:5b:07:9e:1d:e8:c4:
0f:5c:e1:d5:a3:2a:e1:3f:8d:49:ec:c8:2b:cc:19:e2:d2:ed:
d4:22:e4:21:15:fe:61:67:8b:33:c9:f3:23:a7:c3:99:b6:80:
ef:89:b7:27:8f:22:18:53:a5:34:80:a7:a3:ac:54:a3:9c:fb:
a9:c3:47:af:dd:38:63:e9:0c:4a:02:c3:dc:68:a8:29:57:17:
27:9e:b4:53
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZ0N8psYcccmnK1JPp/XuJIwjynkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwOTExMTIzMTIwWhcNMjcwOTEwMTIzNjIw
WjAzMTEwLwYDVQQDEyhEODg0MzZCMEZGRTVCRkY2OEMzMTdCRUIyNTc4OTNGQkI2
QUQwNTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jgl3yj0EeJs
8kfxTzRdvQNW9e/EghE+gYQeNTLdTmGuFgEU72kxsnJ4+y5fA3yas+F66KPiXUnq
049eyrdKcdrJCM6p2SVaRRPxLM3t4mqswqiEWN5HreSJ5+LzGhj7TD22wAYXcbnF
SzfzuIixFhSvJrIIelX6Ingae/6GFniBZjdQFcOmREBsmviXU4rFTuzD1awTLnt6
W4pg3trFWprKKf4FveWX4yjCGqcmOi8y+rGGi/JZKTunyrnvKZvPxzvpna++qDFL
Ezm/oWFLBzAGx14FBZyZNqBKIz2W5lKPd0/7Qm1pZJQ59+vfX6ftTKKbCybiuuVB
StU0nVoIrwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNiENrD/5b/2jDF76yV4k/u2
rQUxMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM3MzYzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+dEMA0GCSqGSIb3DQEB
CwUAA4IBAQAqt1m399apy3bJRhmb+J9PLCSNmRAIAz0RALK402I2qI9Ooomp1U6Y
/aN4NnmUHazpyjL5v6bSe3FhBZeZgNzLllUtLcIanCa4ea6zk2kM7XSxcrzW1Rwe
JfijmoVePIatlNM5oyt5VF6JTpALxlU9dQQuiY3nbIziG73p1+UEKAvU3Nhh1V6n
BpD4KbOZ5hpC06Zdcnl4LLVWlmvuRuwbtDMn6TJg0uIX/SZR9PlbB54d6MQPXOHV
oyrhP41J7MgrzBni0u3UIuQhFf5hZ4szyfMjp8OZtoDvibcnjyIYU6U0gKejrFSj
nPupw0ev3Thj6QxKAsPcaKgpVxcnnrRT
-----END CERTIFICATE-----
Generated at Sun Sep 20 16:54:21 2026 by rpki-client