
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS137409.roa
File: AS137409.roa (raw, json)
Hash identifier: fs2MnknEgxmkV1rNdEfSMM0xqGQohHB1OTQJSFSMo2Q=
Subject key identifier: BC:73:F3:C6:A8:73:9B:43:E9:3B:2D:7E:DE:C0:28:03:EA:5B:3E:BD
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 25267EC51639DEE494214B92C5A61254D832559F
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS137409.roa
Signing time: Thu 29 Oct 2026 17:12:33 +0000
ROA not before: Thu 29 Oct 2026 17:07:33 +0000
ROA not after: Thu 28 Oct 2027 17:12:33 +0000
asID: 137409
IP address blocks: 199.235.129.0/24 maxlen: 24
199.235.133.0/24 maxlen: 24
199.235.134.0/24 maxlen: 24
199.235.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 09:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:26:7e:c5:16:39:de:e4:94:21:4b:92:c5:a6:12:54:d8:32:55:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Oct 29 17:07:33 2026 GMT
Not After : Oct 28 17:12:33 2027 GMT
Subject: CN=BC73F3C6A8739B43E93B2D7EDEC02803EA5B3EBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6a:c4:cc:8e:c8:6a:af:56:29:0a:6e:ee:af:
57:24:cc:96:69:a1:aa:45:1c:3e:07:16:be:53:06:
1d:7e:f2:4c:73:36:cf:67:66:61:e5:07:6f:12:6f:
a7:c3:55:2c:bc:ca:64:a9:d1:4b:ec:03:35:09:6b:
8c:64:be:cd:d1:7c:3b:41:46:74:a3:f4:ff:dd:85:
de:a0:43:78:76:44:8e:9e:f2:5e:87:26:07:e2:41:
85:18:6b:8e:32:62:a3:08:59:ca:7b:dc:2b:1b:d7:
51:b9:f7:74:cc:bc:c4:f1:d2:3a:c9:64:b5:ba:84:
18:23:a0:6b:5b:da:bf:2b:13:32:51:29:9f:18:55:
40:6e:8b:a4:c0:2d:68:e7:e6:5f:bc:2d:2f:62:f7:
d6:61:39:f3:fb:df:cb:84:cf:95:5b:19:1b:b6:9a:
bf:c0:40:c9:91:cb:55:49:a5:0c:91:44:77:a6:52:
55:59:ea:c6:56:be:56:8a:fb:df:a1:26:e7:de:04:
73:85:fd:e3:c1:e0:95:25:32:ff:0d:80:5d:51:70:
92:26:b1:c3:15:82:bd:ca:05:90:76:da:b2:7e:63:
36:a4:46:0a:02:b6:55:9f:c9:0d:53:8e:4f:45:01:
cc:66:34:32:14:f0:d6:de:4b:28:99:7e:c3:79:a2:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:73:F3:C6:A8:73:9B:43:E9:3B:2D:7E:DE:C0:28:03:EA:5B:3E:BD
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS137409.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.129.0/24
199.235.133.0-199.235.135.255
Signature Algorithm: sha256WithRSAEncryption
c5:11:75:d1:05:b0:24:1b:14:92:e3:38:80:35:31:c9:e9:7d:
ce:32:73:89:62:7e:85:e1:10:3e:72:db:04:23:0c:dd:75:cf:
38:db:8c:15:b6:0b:d3:ba:88:42:1f:7a:87:cc:d3:9c:e2:5d:
a3:d4:4c:b2:9a:1e:f1:b8:66:55:82:61:1d:03:a6:92:41:b7:
e9:30:3a:18:2e:db:1e:cc:62:c0:99:cc:69:d5:e8:b2:a4:92:
8b:b9:38:c3:34:fa:07:8d:86:96:08:da:a5:9c:9f:20:8b:0e:
bb:d1:fd:0b:c7:d1:86:ea:86:70:00:ad:d6:2d:38:21:2d:6a:
1a:fa:8c:7b:82:8f:94:17:ea:50:52:1d:9c:b4:1a:b1:5c:e4:
9c:cf:9c:ba:43:17:5a:cb:f2:02:62:24:41:85:d7:4a:3d:e6:
fa:b5:cd:97:9d:71:7f:fa:7d:99:7e:94:15:02:6c:89:65:2a:
27:d9:4e:4f:b4:02:c9:c3:19:ad:a9:4a:c0:77:53:09:a5:5e:
73:fc:69:89:d2:23:6d:a0:4a:e5:43:6d:3e:6f:1d:d2:9c:80:
59:ab:80:05:a1:6d:26:97:43:37:56:98:56:3a:c2:f3:ff:fe:
d0:c4:ed:d5:07:29:31:df:f3:e1:17:bc:23:40:dd:40:34:27:
4c:1b:39:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:23:00 2026 by rpki-client