
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20323132323338.roa
File: 3139392e39312e3130302e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: Iyoca0GwNJEZsMKDEokYQku7t9RsySwGQgpMhG/KVP4=
Subject key identifier: 55:0C:E4:1A:25:CA:73:21:EF:1E:4F:E7:3A:30:83:AF:94:56:53:D8
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 1BBD00EF322CA9D252B73158F13C3740C482C7E9
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20323132323338.roa
Signing time: Fri 27 Mar 2026 01:53:32 +0000
ROA not before: Fri 27 Mar 2026 01:48:32 +0000
ROA not after: Fri 26 Mar 2027 01:53:32 +0000
asID: 212238
IP address blocks: 199.91.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 31 Mar 2026 20:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bd:00:ef:32:2c:a9:d2:52:b7:31:58:f1:3c:37:40:c4:82:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Mar 27 01:48:32 2026 GMT
Not After : Mar 26 01:53:32 2027 GMT
Subject: CN=550CE41A25CA7321EF1E4FE73A3083AF945653D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:a5:7a:b0:1b:f0:d2:4f:f6:78:94:30:62:
f4:47:ac:3b:df:ef:17:95:f7:bd:d9:39:2e:94:6d:
97:44:f1:7a:e4:7e:57:8f:9c:d1:a2:c6:e7:57:09:
b4:43:ed:95:ff:ab:6e:70:e4:09:e3:17:05:c4:fa:
28:82:48:c9:3d:68:da:0b:9c:06:8e:10:51:22:c2:
14:10:e3:36:31:c7:91:f7:15:c4:97:07:2f:f4:c4:
3c:3e:e4:6c:75:bc:cd:5c:28:81:72:ec:42:ad:92:
20:22:f5:e8:8f:e2:76:6b:68:23:dc:8a:39:2e:bd:
3b:ae:9c:09:12:cc:af:aa:43:f1:8b:f2:8d:1d:c4:
d4:73:56:18:0d:5f:a6:e6:83:c2:c8:cc:dd:75:bd:
64:55:84:bb:cb:04:65:29:b5:b7:49:88:63:bf:8b:
f4:0a:b6:49:c6:26:0e:1a:37:b1:52:a1:46:f8:ed:
4b:ed:98:7e:59:3d:0d:c5:5d:fe:80:b9:ab:af:c6:
78:ec:3b:30:d4:d2:7e:04:32:6b:17:7e:c7:1b:27:
5d:71:fe:f2:46:bf:5a:0a:d5:9a:11:3a:bc:a8:a4:
58:d2:88:dc:20:53:1c:15:ec:34:26:d8:62:33:ef:
d9:c1:74:82:75:6b:7b:2a:0a:df:43:10:34:33:1e:
45:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:E4:1A:25:CA:73:21:EF:1E:4F:E7:3A:30:83:AF:94:56:53:D8
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.100.0/24
Signature Algorithm: sha256WithRSAEncryption
84:3e:b7:fa:69:eb:68:00:a6:82:c1:fd:78:92:e6:16:45:75:
93:77:73:ff:89:df:a5:7f:f2:af:86:d1:59:5c:be:3f:c8:08:
e6:77:b8:dc:2e:82:4c:4e:ce:4d:4b:4f:c4:9a:41:9a:aa:e0:
a1:e3:3f:cc:c0:e4:05:fb:d7:33:e1:59:bf:2c:6d:ac:43:a7:
47:85:80:24:cd:16:d9:2a:7a:78:78:57:3b:8f:04:9d:7a:8d:
6a:f9:2b:60:cc:c5:84:a0:cd:19:c0:99:6d:78:a1:ba:cd:66:
f1:b0:15:74:d7:db:62:b7:4a:4c:81:9d:b9:2f:86:d8:4c:a3:
3a:5f:f4:0d:11:a5:6e:c9:78:72:40:c6:cc:9f:0c:99:2f:86:
37:4c:e4:32:c6:82:67:04:05:35:ac:6d:50:7d:dd:ed:73:95:
59:8a:33:78:6e:60:9c:27:4c:fb:af:70:ca:b6:37:3b:72:14:
d5:65:e5:eb:47:7b:7b:27:20:f8:6c:16:3b:17:43:b9:99:4d:
35:5b:2e:11:fd:d6:88:a3:e6:50:84:80:80:4a:08:c9:7b:ee:
75:6c:e5:fd:fd:ad:88:b3:e8:32:c2:77:fd:26:ce:49:74:b0:
ca:e2:71:c3:63:a4:d1:6c:cd:55:6e:6b:79:29:2e:96:2a:95:
52:74:b2:60
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUG70A7zIsqdJStzFY8Tw3QMSCx+kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjYwMzI3MDE0ODMyWhcNMjcwMzI2MDE1MzMy
WjAzMTEwLwYDVQQDEyg1NTBDRTQxQTI1Q0E3MzIxRUYxRTRGRTczQTMwODNBRjk0
NTY1M0Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+SlerAb8NJP
9niUMGL0R6w73+8Xlfe92TkulG2XRPF65H5Xj5zRosbnVwm0Q+2V/6tucOQJ4xcF
xPoogkjJPWjaC5wGjhBRIsIUEOM2MceR9xXElwcv9MQ8PuRsdbzNXCiBcuxCrZIg
IvXoj+J2a2gj3Io5Lr07rpwJEsyvqkPxi/KNHcTUc1YYDV+m5oPCyMzddb1kVYS7
ywRlKbW3SYhjv4v0CrZJxiYOGjexUqFG+O1L7Zh+WT0NxV3+gLmrr8Z47Dsw1NJ+
BDJrF37HGyddcf7yRr9aCtWaETq8qKRY0ojcIFMcFew0JthiM+/ZwXSCdWt7Kgrf
QxA0Mx5FBQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFFUM5BolynMh7x5P5zowg6+U
VlPYMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx1tkMA0GCSqGSIb3DQEB
CwUAA4IBAQCEPrf6aetoAKaCwf14kuYWRXWTd3P/id+lf/KvhtFZXL4/yAjmd7jc
LoJMTs5NS0/EmkGaquCh4z/MwOQF+9cz4Vm/LG2sQ6dHhYAkzRbZKnp4eFc7jwSd
eo1q+StgzMWEoM0ZwJlteKG6zWbxsBV019tit0pMgZ25L4bYTKM6X/QNEaVuyXhy
QMbMnwyZL4Y3TOQyxoJnBAU1rG1Qfd3tc5VZijN4bmCcJ0z7r3DKtjc7chTVZeXr
R3t7JyD4bBY7F0O5mU01Wy4R/daIo+ZQhICASgjJe+51bOX9/a2Is+gywnf9Js5J
dLDK4nHDY6TRbM1Vbmt5KS6WKpVSdLJg
-----END CERTIFICATE-----
Generated at Tue Mar 31 02:10:03 2026 by rpki-client