
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203430363736.roa
File: 3139382e33372e3131322e302f32302d3234203d3e203430363736.roa (raw, json)
Hash identifier: kbjtRxHINPc6VeLq7Pi9r12Ngakk7h7Abw8SsQfUnGM=
Subject key identifier: E7:65:9F:60:AC:89:B3:D9:ED:91:4B:D6:04:EC:2D:1F:64:05:12:FA
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 7D6EB6A723D34C3BC782C6B94A25312BF582C866
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203430363736.roa
Signing time: Wed 17 Jun 2026 11:36:09 +0000
ROA not before: Wed 17 Jun 2026 11:31:09 +0000
ROA not after: Wed 16 Jun 2027 11:36:09 +0000
asID: 40676
IP address blocks: 198.37.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 13:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6e:b6:a7:23:d3:4c:3b:c7:82:c6:b9:4a:25:31:2b:f5:82:c8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Jun 17 11:31:09 2026 GMT
Not After : Jun 16 11:36:09 2027 GMT
Subject: CN=E7659F60AC89B3D9ED914BD604EC2D1F640512FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:0b:c0:bf:b8:07:a2:d8:de:a8:ef:46:f2:
f5:b6:4b:5c:cc:77:d5:ed:5b:a4:0f:f2:84:ae:4f:
6a:b6:b4:5b:e2:ad:90:50:48:b2:e2:42:0f:96:be:
71:b5:d8:13:e6:3d:66:85:37:5a:0e:09:9e:13:24:
d1:28:33:af:4a:e7:6d:ef:39:e9:e4:e7:fc:10:f1:
34:6e:49:ad:b5:1e:78:82:29:12:d5:7d:bb:4e:64:
bd:94:67:bd:88:39:57:88:46:0d:04:3f:13:49:8d:
40:8d:aa:07:83:5c:be:1d:9e:94:b2:f7:3d:47:a8:
d1:60:ac:67:f9:0b:f2:67:15:3c:17:0e:cf:de:80:
ee:b3:c4:51:3b:eb:dd:52:20:79:64:3d:9f:8f:82:
73:12:41:0d:ba:cd:bc:6e:9f:d3:e0:12:44:73:81:
ae:0a:ef:26:d1:20:49:ad:8c:75:5f:40:90:03:51:
6b:03:76:90:0e:50:d3:41:5c:df:45:08:f5:fe:04:
ac:43:63:2c:24:8b:65:37:d8:b4:82:5e:8a:a4:f9:
da:50:0e:0b:69:e1:62:db:c9:49:5f:5d:76:72:05:
33:98:61:88:09:5d:0a:13:9e:04:c7:9a:8b:6d:10:
bf:72:fa:34:b7:70:5b:15:c5:df:8c:78:96:71:3c:
dd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:65:9F:60:AC:89:B3:D9:ED:91:4B:D6:04:EC:2D:1F:64:05:12:FA
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.37.112.0/20
Signature Algorithm: sha256WithRSAEncryption
86:31:1b:46:6f:57:38:41:79:53:7a:da:f8:ad:3f:a9:25:64:
3e:94:5d:b7:e7:31:0b:a0:58:5f:ac:f2:43:61:c0:c5:c2:bd:
aa:ad:5f:d5:72:c2:cf:c6:bc:24:93:9e:12:34:7a:8e:35:3d:
9e:f9:17:c4:b4:8c:e5:04:27:44:c7:ed:23:e5:95:fb:0a:ce:
8b:5e:53:d6:6c:22:16:ba:3a:d9:7b:fb:cb:07:e3:dd:e8:92:
e2:0e:9d:5d:56:51:c9:e4:b1:21:49:1d:8d:01:5c:d9:24:ce:
9a:13:f7:70:56:f7:4c:c4:66:18:33:89:79:83:40:4e:79:b5:
66:80:25:68:ed:f0:f1:79:7a:59:14:d6:1b:d7:f3:91:da:94:
62:b2:75:2f:07:10:1d:f2:2f:dc:01:1c:05:c8:b6:aa:99:38:
de:47:55:d8:cd:5a:a5:2d:c7:cd:f9:94:73:fc:61:07:2d:7a:
e9:4b:e9:10:78:31:bc:a1:6c:2b:54:26:4a:ba:75:6f:7d:bf:
e0:d2:48:3d:e7:59:7c:11:ad:91:73:b9:8e:82:bc:88:32:e1:
a2:f2:32:24:82:3b:82:2b:93:d8:cb:f3:60:f4:1f:3b:98:44:
20:43:33:fd:54:91:51:24:5b:c5:6f:1d:0f:65:34:f5:00:09:
39:a3:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:01:47 2026 by rpki-client