
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa
File: 3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa (raw, json)
Hash identifier: KcDUxRrSHpQxCk2TN8mGwKlEF7BYcllQLWuW4H2y7ck=
Subject key identifier: 93:F8:62:54:40:AA:AB:0F:50:57:0E:55:0B:D7:6D:63:93:56:17:6C
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 40C37747187CAC6F4C19E960A24B2F70F1A2F5C7
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa
Signing time: Wed 17 Jun 2026 13:36:09 +0000
ROA not before: Wed 17 Jun 2026 13:31:09 +0000
ROA not after: Wed 16 Jun 2027 13:36:09 +0000
asID: 397423
IP address blocks: 198.37.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 13:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:c3:77:47:18:7c:ac:6f:4c:19:e9:60:a2:4b:2f:70:f1:a2:f5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Jun 17 13:31:09 2026 GMT
Not After : Jun 16 13:36:09 2027 GMT
Subject: CN=93F8625440AAAB0F50570E550BD76D639356176C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2a:51:77:14:05:19:94:89:e2:ea:37:43:59:
19:e2:07:74:f2:92:f0:dd:ce:3a:f3:cf:50:77:21:
fd:a8:62:4b:fe:60:1c:c1:81:da:4f:0e:5b:24:5b:
f6:fc:10:db:bd:87:cf:36:f1:19:08:25:88:64:d3:
cb:d4:d9:e9:de:e5:82:da:d8:02:f2:a3:38:a4:9a:
45:1b:91:f2:cd:dc:57:84:1f:43:ee:b5:29:d0:0b:
88:d3:ba:76:44:0e:b8:2c:4c:b5:f2:08:0a:72:9c:
f5:1e:61:d0:cb:59:d0:6a:0c:bd:5d:92:8e:91:55:
ca:bc:dd:2e:0a:39:c5:dd:15:d2:fe:c4:ac:10:f2:
35:f9:a1:ac:7f:21:07:89:79:72:34:a4:bc:af:6c:
84:81:4a:fd:6b:05:d9:f8:82:28:27:98:31:a9:56:
97:8b:34:dd:41:26:b0:70:c3:9d:52:36:24:ac:69:
1f:62:a9:6f:62:97:45:1a:81:06:83:62:7d:ea:97:
77:46:6a:3e:24:5e:26:4f:ca:36:62:23:e7:04:d0:
f2:4a:ab:2a:1a:6a:3e:9c:42:ac:eb:1c:df:10:3f:
b5:ec:24:79:09:b0:ae:c4:6e:cc:7f:93:48:ae:95:
63:30:a3:c6:8c:58:0a:67:bc:88:5e:90:7d:2c:bb:
77:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F8:62:54:40:AA:AB:0F:50:57:0E:55:0B:D7:6D:63:93:56:17:6C
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937343233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.37.112.0/20
Signature Algorithm: sha256WithRSAEncryption
68:be:2d:df:8e:40:98:32:77:75:ee:b4:29:23:86:f5:c2:ee:
cb:7c:95:d6:43:65:fa:6a:22:fb:8f:fb:3d:be:1c:63:ed:25:
c6:b4:6d:10:ea:c8:aa:57:56:5d:d0:30:a3:ef:2b:1a:28:e6:
d6:5b:27:13:b7:e4:b8:dc:26:cd:37:bb:17:c1:07:89:e0:08:
4a:8a:0e:63:ac:64:35:59:0e:55:61:ae:97:32:8e:b3:d2:f9:
04:72:3a:fa:db:77:d6:5c:fb:52:a1:65:1a:45:79:3a:2d:4c:
de:f6:06:f6:1a:a8:96:42:eb:c4:a0:f8:f5:b0:78:f3:04:ff:
65:29:b2:b1:4e:b4:ee:98:05:c7:68:a8:92:85:5a:63:23:44:
45:9e:f4:27:45:14:d7:7e:b2:6c:fc:c5:c5:5b:93:fe:a7:a9:
b1:d6:83:e3:a9:d2:bf:c8:5d:a6:48:ac:fd:3a:d6:f6:47:2e:
a2:20:fb:c8:1b:e5:fe:25:04:1c:8d:ef:d9:23:f3:eb:56:99:
e0:b6:cf:57:44:fb:30:da:1a:d1:a1:94:78:92:63:ed:fa:06:
de:8d:50:f2:e6:19:bc:d3:0d:eb:94:44:49:9e:93:65:7d:96:
d1:ea:46:a8:b1:51:2b:1d:ca:0f:fc:8e:92:f0:40:18:99:ed:
26:66:ba:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:02:10 2026 by rpki-client