
$ rpki-client -vvvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31302e302f32342d3234203d3e203138383534.roa
File: 3139392e3234392e31302e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier: cmUk6/5oOfEBoQ9e84moSUJe0QyS9I2S2cnnouGgH7w=
Subject key identifier: A3:9D:E6:49:94:5B:99:F0:27:F0:D5:BD:50:93:BB:B3:77:68:F4:EE
Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial: 2B7D655A7CA6D6386D224321727130312B653F70
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31302e302f32342d3234203d3e203138383534.roa
Signing time: Sat 03 Oct 2026 15:25:24 +0000
ROA not before: Sat 03 Oct 2026 15:20:24 +0000
ROA not after: Sat 02 Oct 2027 15:25:24 +0000
asID: 18854
IP address blocks: 199.249.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:7d:65:5a:7c:a6:d6:38:6d:22:43:21:72:71:30:31:2b:65:3f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Validity
Not Before: Oct 3 15:20:24 2026 GMT
Not After : Oct 2 15:25:24 2027 GMT
Subject: CN=A39DE649945B99F027F0D5BD5093BBB37768F4EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:41:d8:0a:fe:d8:12:0f:31:65:ff:3f:c8:
b9:6e:29:94:87:4b:43:7a:5d:b4:86:fa:07:57:f0:
82:a5:2c:06:87:3d:52:0e:57:14:35:c8:51:81:9e:
e7:6e:49:16:64:84:f9:90:61:44:18:23:c4:ff:f9:
c0:b0:01:c1:a3:38:b9:bf:35:cd:b1:78:74:b8:99:
d6:d6:ef:3d:7a:56:03:34:a2:99:94:40:71:fc:a1:
f0:c1:ee:26:e7:46:d9:eb:b6:e9:cb:5b:0e:69:7b:
5c:23:45:af:f5:dd:e3:7d:e3:1b:c3:b3:af:a9:d9:
cb:99:19:99:01:55:06:ef:b0:85:1a:21:14:e3:d3:
c7:ff:8e:30:3c:57:cf:04:43:51:3e:f5:ed:9e:06:
c7:81:eb:1e:20:dc:bd:b1:b5:17:bb:31:f5:9e:e5:
85:25:00:ab:e1:d1:28:57:d7:cd:9b:72:48:a2:4b:
19:63:e7:29:5f:63:7e:4f:13:c0:78:f0:e8:4a:58:
03:02:58:3e:a8:9e:40:13:d4:cb:17:1d:51:88:42:
e5:5d:fe:da:38:75:3d:39:64:18:3c:e8:a1:5c:f7:
6f:6c:ae:aa:d2:f2:55:8d:df:df:6d:83:bd:05:e9:
54:e6:f2:0b:b1:39:28:85:54:5c:08:e2:17:3a:d9:
41:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9D:E6:49:94:5B:99:F0:27:F0:D5:BD:50:93:BB:B3:77:68:F4:EE
X509v3 Authority Key Identifier:
keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31302e302f32342d3234203d3e203138383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.249.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2a:ef:d6:55:8e:d7:91:0c:93:2e:e8:b2:16:53:db:ca:7e:
09:68:ec:89:c3:fe:c2:20:39:4d:4a:7a:a7:65:b1:d5:bb:d7:
5d:5d:c8:64:b2:1c:ed:d2:e3:e2:c3:80:8d:82:e8:2f:09:a2:
39:a1:ab:94:94:5d:59:20:b8:9f:bb:5d:16:94:51:fb:98:66:
3c:c7:9f:21:7e:1f:49:e6:17:9d:60:e0:c4:97:d5:73:38:32:
3e:0f:3a:66:26:ff:f2:23:7b:a6:83:4e:95:01:9e:ca:99:24:
b8:4d:07:b3:56:ac:d7:7f:de:93:aa:d6:96:61:c2:94:09:58:
4f:b2:0d:86:5d:98:a9:e9:63:91:e0:87:70:c8:7c:87:f5:8e:
49:e9:5d:8d:4c:05:63:58:96:60:a8:9b:63:7b:61:5f:a8:39:
cc:6c:ab:30:c1:ee:bd:a4:a0:b2:ab:7a:2b:e8:fc:8f:6a:71:
cc:c6:70:bc:48:71:f7:b3:93:f9:e0:d8:61:00:fb:0e:aa:a7:
1d:d2:7d:63:38:8b:c7:78:43:52:94:db:06:74:d5:4d:2a:93:
54:cc:bf:86:28:73:b6:93:0a:14:b1:80:80:5f:64:b4:30:2a:
39:62:b8:9d:ac:d6:a2:ad:a7:db:5a:3c:52:94:aa:a2:18:71:
d7:87:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:16 2026 by rpki-client