
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
File: 3139392e39312e3130312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: YTPJANN+Jb/SrkhPq3D16il3A9wOyy3BSiRZYnU6ILI=
Subject key identifier: 1A:77:09:45:10:97:02:F3:53:29:FB:03:44:DE:5C:7D:2B:F8:4A:5A
Certificate issuer: /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial: 76F16C24275CB4C20F963279059DEDCBDE7D22AF
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
Signing time: Fri 27 Mar 2026 01:55:48 +0000
ROA not before: Fri 27 Mar 2026 01:50:48 +0000
ROA not after: Fri 26 Mar 2027 01:55:48 +0000
asID: 834
IP address blocks: 199.91.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 31 Mar 2026 20:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f1:6c:24:27:5c:b4:c2:0f:96:32:79:05:9d:ed:cb:de:7d:22:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Validity
Not Before: Mar 27 01:50:48 2026 GMT
Not After : Mar 26 01:55:48 2027 GMT
Subject: CN=1A770945109702F35329FB0344DE5C7D2BF84A5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:16:54:1f:41:e1:fb:2a:e6:6d:18:56:71:76:
77:00:50:25:fd:5e:c1:00:e7:a4:66:7f:2f:92:47:
ef:a1:09:b8:9d:53:e6:15:78:a3:0f:98:3f:ce:e1:
0e:0b:72:83:3b:02:51:0b:71:ad:93:26:31:2d:a7:
43:7f:9b:c0:58:5b:e3:e1:43:ac:8c:25:c4:6e:cc:
c3:31:15:78:4c:ea:9b:96:46:8d:d0:b3:cf:2d:1b:
bb:a2:e8:09:d1:8d:45:c1:33:86:14:2c:90:b0:05:
1d:71:a1:f9:15:38:c9:76:04:fa:41:67:8d:92:a5:
40:b8:88:98:d0:16:98:32:43:4f:2e:f7:bc:f3:fd:
b9:b2:7e:ff:d6:4a:e4:cb:79:fb:1d:7e:5b:39:8d:
f0:f6:bb:04:e2:06:56:1d:1b:9c:c1:24:d2:0c:4c:
04:4c:72:15:74:58:f9:29:30:7c:e0:61:d1:9c:24:
23:f5:08:9e:ab:c6:08:cb:5e:d7:94:b4:89:bd:b7:
09:68:8a:a7:45:78:8d:5f:eb:89:f8:9d:50:ba:4e:
70:24:3e:44:9b:8d:c1:33:2f:a8:70:4a:7d:1e:da:
e9:12:3c:52:16:ad:ff:48:5f:af:15:d2:42:bf:92:
cc:8d:ed:53:01:87:46:93:8e:cc:f3:1e:15:7a:18:
99:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:77:09:45:10:97:02:F3:53:29:FB:03:44:DE:5C:7D:2B:F8:4A:5A
X509v3 Authority Key Identifier:
keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.91.101.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c2:98:af:07:aa:ca:a3:bb:ef:2d:75:17:a1:c4:63:ea:5e:
ad:8e:b1:10:64:d5:38:a0:98:c8:bf:97:95:25:6a:41:ad:21:
9e:e9:50:31:2b:6a:d2:e4:59:53:7b:1b:07:ad:1f:ae:be:2d:
65:63:d9:91:c3:ba:36:05:73:d8:b6:d4:f7:71:2d:87:e6:7b:
35:47:39:6d:9e:ff:6c:5d:e7:9f:2e:16:d3:4c:e4:a4:a2:d6:
8f:c8:ea:af:0a:be:0c:58:0f:17:da:43:24:18:fe:03:30:e4:
5b:d0:ec:a5:8c:a4:0b:39:71:1e:5d:84:aa:48:f2:86:b1:f3:
ef:7f:0e:38:d6:6a:34:c0:97:54:c1:79:77:56:6c:d2:cf:30:
2a:34:12:87:e1:8c:e5:26:d6:5c:11:84:3f:5a:0f:dd:6e:18:
de:ed:4a:66:6b:48:2b:50:37:f7:63:c6:94:21:94:7b:4c:bf:
2b:4c:b1:f4:9c:44:94:77:c5:a3:3a:17:58:50:a6:07:08:8c:
22:31:b1:03:07:ca:33:2b:c1:74:98:0d:55:72:e7:f8:4f:a2:
c9:a0:7a:a0:37:14:3c:c0:b9:aa:c9:15:b1:d6:2a:0d:4d:ab:
9b:45:dc:2a:22:1a:fe:41:90:d6:b9:92:98:4c:5b:8d:4e:73:
87:8e:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:20:21 2026 by rpki-client