
$ rpki-client -vvvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31312e302f32342d3234203d3e203138383534.roa
File: 3139392e3234392e31312e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier: y3IcuGtkHxbjgZJeIpVlHjWhoq0/RsWKXxgzS3NZ0YY=
Subject key identifier: 5D:2D:E2:91:69:82:7F:13:F2:DE:4B:F3:13:AF:E1:7F:3A:5E:B5:1A
Certificate issuer: /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial: 0566E57A58F58F522FBFAA8670F6BE3E0DC35116
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31312e302f32342d3234203d3e203138383534.roa
Signing time: Sat 03 Oct 2026 15:25:20 +0000
ROA not before: Sat 03 Oct 2026 15:20:20 +0000
ROA not after: Sat 02 Oct 2027 15:25:20 +0000
asID: 18854
IP address blocks: 199.249.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:66:e5:7a:58:f5:8f:52:2f:bf:aa:86:70:f6:be:3e:0d:c3:51:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Validity
Not Before: Oct 3 15:20:20 2026 GMT
Not After : Oct 2 15:25:20 2027 GMT
Subject: CN=5D2DE29169827F13F2DE4BF313AFE17F3A5EB51A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:98:36:1a:b3:a2:e7:03:46:43:05:3f:55:58:
bb:a2:08:d1:69:2e:5b:d4:f0:1f:dc:9f:8a:bc:1b:
2d:8b:60:b7:07:eb:05:f2:9c:27:f8:1f:1d:87:db:
b2:b7:06:e5:d1:f9:a5:ef:50:16:c0:9b:30:06:d4:
85:51:57:c2:1d:dc:f7:f8:b9:0f:31:f7:16:d0:62:
e4:d4:7f:36:93:45:7f:d0:55:f1:40:65:3a:dd:60:
a1:01:b8:d5:9b:9c:74:4f:db:20:20:bf:ba:82:88:
05:19:00:43:81:8a:a6:f4:27:ad:a5:50:a4:01:64:
a6:73:78:12:5d:3d:74:0f:df:11:2e:07:e6:12:64:
2c:bd:28:e1:18:f3:d1:47:7e:1d:84:a5:e4:84:e4:
83:86:55:00:fc:18:5d:14:2c:22:c6:f3:7f:18:1d:
8c:6c:24:22:f3:37:3e:c2:18:25:dc:77:2a:0a:45:
5b:62:c7:f2:2e:e2:ee:40:bb:69:6c:8e:cd:21:85:
a6:60:da:a3:8e:69:a7:e0:e0:98:6a:90:d9:bc:f4:
af:d5:36:90:72:61:8f:f7:41:7e:10:6e:09:67:ef:
cd:24:5e:ab:bb:13:c9:51:f8:53:36:06:a5:59:79:
4b:dc:7b:e8:2a:bc:23:d5:60:c2:69:29:4d:4b:be:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2D:E2:91:69:82:7F:13:F2:DE:4B:F3:13:AF:E1:7F:3A:5E:B5:1A
X509v3 Authority Key Identifier:
keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31312e302f32342d3234203d3e203138383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.249.11.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e6:34:40:de:d8:5a:9f:09:c9:bb:33:21:d4:74:fe:3a:aa:
ef:72:9f:9e:7d:b5:a8:9b:fc:e2:81:41:cf:96:ce:3f:9d:30:
57:64:11:b3:80:29:73:f4:7f:34:71:25:9e:2c:e7:ed:51:dd:
b8:24:27:12:c4:09:ad:f0:0e:5a:7c:2c:09:63:97:72:bd:d9:
f4:d0:67:76:6c:26:41:88:1a:07:b4:e5:59:c5:92:93:6f:83:
61:48:13:38:75:0e:8a:49:f9:1b:c9:1d:85:f0:78:a5:82:97:
58:6c:ac:89:25:3e:52:16:1d:67:af:5f:20:2c:4f:49:88:9f:
d3:dd:ad:0f:8b:e9:63:f1:03:a4:56:10:15:00:dd:fd:ec:2b:
8c:d3:1a:c5:91:bd:0a:a9:80:ab:38:e3:3f:c6:8a:22:8a:e9:
e9:34:88:60:41:d9:83:d0:fe:5a:e2:6f:ab:b3:db:45:55:36:
d9:cd:26:3d:2e:6b:f4:bd:0b:0d:b9:15:6a:e5:32:3d:e6:f8:
ba:48:21:7e:d9:e6:94:49:8f:df:7e:07:e2:1d:06:a0:2c:4d:
7d:c1:07:cc:7c:54:02:d1:d2:f3:8a:88:53:5c:43:2b:74:65:
18:6e:d4:ae:7b:39:bc:81:7d:b7:70:0e:f3:fb:cb:2c:41:60:
61:43:45:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:38:46 2026 by rpki-client