
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
File: 3139392e36382e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 1PCUZ/5lWinFDzDtPKPYda8N4qBoBfbXrcZdrYxIQR8=
Subject key identifier: 04:C2:ED:D1:1C:B9:DC:39:96:EC:18:7C:6F:23:F0:06:15:8F:44:8C
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 0814B6EA4577282E6FF04036DF211FB11667E7C2
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
Signing time: Wed 04 Mar 2026 13:57:57 +0000
ROA not before: Wed 04 Mar 2026 13:52:57 +0000
ROA not after: Wed 03 Mar 2027 13:57:57 +0000
asID: 834
IP address blocks: 199.68.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 25 Mar 2026 08:05:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:14:b6:ea:45:77:28:2e:6f:f0:40:36:df:21:1f:b1:16:67:e7:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Mar 4 13:52:57 2026 GMT
Not After : Mar 3 13:57:57 2027 GMT
Subject: CN=04C2EDD11CB9DC3996EC187C6F23F006158F448C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:0b:53:d8:97:ad:56:70:76:71:3a:39:68:
2f:2c:41:c7:63:2a:bb:d7:f4:fc:a8:d4:ef:95:69:
e2:9f:f7:7d:df:44:85:bf:03:46:3d:7f:e7:cf:49:
bf:a3:63:c1:32:67:39:62:b9:b6:55:9d:d8:a2:33:
ca:7c:3a:a5:b1:1c:c6:04:5e:63:89:3f:57:d0:32:
63:1f:b4:23:ee:2a:f3:89:a6:ba:8a:e9:9e:13:d1:
99:c3:57:2f:de:83:b3:1c:da:96:73:88:c9:cf:ca:
d5:11:4c:64:5d:2e:7e:c2:8a:78:d0:43:1c:7d:04:
be:c1:fb:ff:9b:4a:1d:12:11:e5:5d:12:35:fa:e5:
f7:86:94:ea:00:2b:b5:ef:b3:8f:25:ad:37:90:ae:
cd:16:40:b0:f2:77:3e:3b:fa:ab:d1:b2:9d:4c:78:
d1:76:9d:02:40:d5:31:f0:c4:9d:56:56:21:25:a7:
32:91:d0:cb:f6:8e:c4:44:bc:38:39:e2:6e:78:fa:
c7:dd:a4:45:0b:c5:6a:1b:fb:5f:9b:c2:f9:9d:41:
f3:fe:64:07:22:7e:af:0e:b0:43:6c:0d:eb:c8:b0:
72:08:2d:46:07:71:26:29:b8:3c:6d:7c:c9:a7:ed:
3d:e3:da:aa:23:36:15:f7:11:a8:f7:b2:38:39:45:
bd:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C2:ED:D1:1C:B9:DC:39:96:EC:18:7C:6F:23:F0:06:15:8F:44:8C
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.68.218.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d2:4a:47:a1:03:1d:2e:6d:ac:ea:77:54:b1:e2:d6:91:44:
56:e8:ea:6c:4f:5b:f9:69:30:d5:18:19:ac:9b:4c:77:3a:c8:
15:6f:92:6b:7a:f6:c4:d6:46:a3:46:68:41:27:7f:43:e2:88:
37:7b:a6:e7:2f:42:d3:a1:f0:ea:c4:d5:dc:c0:43:74:e4:9c:
a7:a3:13:4b:a5:bf:5f:9a:68:5a:f0:2d:b5:3f:c8:88:d5:c4:
e7:86:7b:f9:4e:72:26:ac:a1:f1:f6:af:c0:29:3a:81:7c:a8:
7d:22:1d:ad:e2:85:fe:3b:bc:7a:61:4a:7a:1b:3f:6d:de:49:
d7:54:90:92:7f:d2:13:2d:bb:40:17:06:d2:dc:bb:c1:49:21:
f9:fa:a6:79:52:4a:b9:2d:59:18:8e:cb:30:0b:e0:25:08:af:
f3:1a:fb:21:22:16:f5:e7:52:2e:cf:a6:63:13:24:e0:94:8d:
e5:7b:40:5c:5b:e0:41:be:79:a3:df:ae:61:c1:db:99:c0:13:
1a:56:c9:e6:ae:cc:d4:d1:22:62:b6:5f:84:32:4b:9b:5a:51:
4e:27:2d:22:b3:06:a8:cb:47:c4:76:77:08:85:df:7c:2d:06:
de:96:eb:57:1d:41:84:36:7f:7b:41:f2:aa:95:38:d7:e7:8f:
d9:79:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:58:14 2026 by rpki-client