
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203534323532.roa
File: 3139392e3233312e36382e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier: DSdxuB2IFbX9qD/GGLJ4ivlI7kEFBQD4ef9BJuEIq6A=
Subject key identifier: 87:A4:60:A7:C5:90:CC:D2:53:E6:71:B5:42:BF:23:A7:52:95:45:38
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 79EB1E1922BB240CDBD744C04C8673A961BF1934
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203534323532.roa
Signing time: Fri 11 Sep 2026 12:36:20 +0000
ROA not before: Fri 11 Sep 2026 12:31:20 +0000
ROA not after: Fri 10 Sep 2027 12:36:20 +0000
asID: 54252
IP address blocks: 199.231.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:eb:1e:19:22:bb:24:0c:db:d7:44:c0:4c:86:73:a9:61:bf:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Sep 11 12:31:20 2026 GMT
Not After : Sep 10 12:36:20 2027 GMT
Subject: CN=87A460A7C590CCD253E671B542BF23A752954538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:82:08:27:d4:3a:92:8d:2c:c2:c1:36:b8:3e:
17:79:f6:6e:2d:18:8d:78:59:75:d1:a8:ca:14:07:
e9:61:67:30:29:44:b3:88:42:b9:a0:1b:d8:52:40:
60:21:4b:26:c3:aa:17:dc:82:42:75:69:96:ee:70:
6c:1f:88:35:0d:1b:ba:c2:19:26:b7:24:be:68:8e:
7c:2b:92:b4:13:db:22:84:9e:4e:bb:d5:bc:8d:bd:
47:50:c3:d5:44:b4:07:3b:e5:2d:89:e3:a9:ff:ca:
97:8f:9f:1e:57:b2:38:aa:46:01:ae:df:26:c2:97:
38:db:fa:3b:05:58:cb:6d:ca:5a:3f:34:2c:a4:b3:
bc:b3:92:95:d0:30:17:d3:d5:31:10:24:ca:04:bb:
79:30:e2:ab:28:d1:78:cd:64:5f:34:7b:c1:d4:09:
52:63:7d:b8:50:a1:ba:73:ee:17:7f:b8:ae:cb:89:
49:68:56:b6:21:5a:b0:7c:6d:f9:58:fb:38:a6:39:
1e:58:6c:51:64:ae:cb:bf:56:a2:6d:81:5e:a9:7c:
07:08:90:32:5e:f6:39:1a:fe:43:6d:4d:ff:59:5b:
7c:f8:3e:15:52:3d:52:11:ed:ba:6b:a3:9d:d5:0c:
f0:26:72:6f:84:c3:27:91:bd:98:15:88:e3:6c:c4:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A4:60:A7:C5:90:CC:D2:53:E6:71:B5:42:BF:23:A7:52:95:45:38
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203534323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.68.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:e1:ab:97:4e:21:62:d4:af:ae:82:41:c1:d0:61:78:f2:0b:
c0:8c:c8:fc:27:a5:e4:a0:5f:f2:ea:c1:5a:9f:94:a0:b5:01:
0a:67:14:a6:a9:28:e1:3b:f9:4f:1a:cf:61:a3:78:2b:41:9e:
4a:38:6a:09:61:e4:12:eb:d1:6f:4d:21:d5:5d:cd:52:56:2a:
0f:70:a9:e2:04:68:45:ae:33:72:0e:ea:f9:ef:e7:ad:5c:fa:
41:a8:f2:46:b2:b0:7c:63:d1:d3:d3:8d:cf:c1:25:7e:a0:29:
a2:2d:61:a2:e5:56:5c:57:4a:78:50:f2:84:a0:de:89:4b:3c:
ee:db:50:7b:2f:be:ca:ee:2b:56:f7:9a:69:21:bb:43:80:f1:
c5:3e:51:4d:b3:dd:40:7e:68:ee:c6:ba:b1:74:d5:9e:fb:fe:
8d:2d:73:1c:53:a0:c6:01:1a:be:00:9f:2f:51:36:41:c1:a1:
32:85:48:9f:66:84:82:7e:2a:04:67:21:78:0b:1c:f5:b9:a4:
e8:d3:da:1a:0b:40:5c:93:b9:22:22:b0:67:55:e6:3a:07:4b:
0f:92:99:58:88:9e:80:fb:2c:03:5b:e7:08:a1:d7:e3:c1:03:
d7:b5:0e:fd:8a:3a:45:45:d8:cc:19:9e:b3:8a:bd:18:02:ab:
30:a6:e8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:22:20 2026 by rpki-client