
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
File: 3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (raw, json)
Hash identifier: bx/Y54qSaYCSjy3lcT5vrifR9ohmPWNuyNkSzsYWMto=
Subject key identifier: A0:9A:43:D3:7A:C2:0B:91:6E:DF:8A:2A:F0:7B:85:73:34:B6:2D:BF
Certificate issuer: /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial: 0B977993F44CF55F4C98E4690620AC678D8FF88C
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
Signing time: Tue 08 Sep 2026 03:59:10 +0000
ROA not before: Tue 08 Sep 2026 03:54:10 +0000
ROA not after: Tue 07 Sep 2027 03:59:10 +0000
asID: 396881
IP address blocks: 192.138.210.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 06:42:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:97:79:93:f4:4c:f5:5f:4c:98:e4:69:06:20:ac:67:8d:8f:f8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Validity
Not Before: Sep 8 03:54:10 2026 GMT
Not After : Sep 7 03:59:10 2027 GMT
Subject: CN=A09A43D37AC20B916EDF8A2AF07B857334B62DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:62:92:32:67:a4:e2:4b:d6:98:34:29:cb:20:
5d:c5:b5:e0:0d:a0:31:a9:e0:b9:69:57:d4:d1:bb:
9e:9f:6e:44:06:e1:84:1a:c1:2e:df:ff:08:20:8e:
bb:86:32:f2:a4:39:69:f8:cb:f8:80:7e:83:36:1a:
a0:29:c3:93:a2:1a:f1:a5:7b:8e:ec:35:2e:a5:c0:
6c:b2:fc:30:56:c0:0d:2a:8e:eb:dc:24:ba:e3:53:
dd:90:82:e2:8d:2a:12:36:f7:08:e5:f7:9a:6c:4f:
ec:7e:af:07:3d:12:97:b0:9b:f5:57:c0:ef:1c:fb:
9b:2b:1e:b4:14:ff:71:fb:82:64:2e:ae:1f:ca:26:
f0:83:1c:c3:28:33:6a:24:99:3c:68:ba:d6:d4:9a:
03:e1:00:7a:3f:46:6b:03:c4:43:67:a4:a8:b0:02:
3d:1e:f7:ee:de:53:cd:ae:c1:dc:0f:ae:5d:5e:4d:
01:32:c1:19:40:5a:e3:06:ce:cb:db:0d:4c:cc:b1:
83:a9:66:94:bc:e7:45:95:5e:d5:1d:36:da:d5:b8:
6c:89:96:10:b5:a4:80:d1:96:ee:49:75:a2:94:f2:
ea:0a:e0:ef:cf:bf:fa:cc:ad:76:c2:61:6f:21:8b:
1a:ba:1e:a9:f0:3e:16:f2:08:02:db:01:e1:8b:5c:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9A:43:D3:7A:C2:0B:91:6E:DF:8A:2A:F0:7B:85:73:34:B6:2D:BF
X509v3 Authority Key Identifier:
keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.138.210.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:ed:85:80:7d:c8:a0:98:b9:27:24:59:a9:41:47:8a:86:c5:
8a:73:76:84:f2:09:8e:13:91:0a:6c:1c:bf:89:fd:66:cd:fb:
b7:83:94:d4:cd:e5:dd:20:b9:0a:4c:c1:3f:d9:20:5a:10:b1:
71:3b:f4:11:d1:e7:5e:be:54:42:f7:e2:60:44:89:52:ce:6a:
a5:5e:7f:ed:3a:5d:44:fd:37:57:55:44:28:14:8b:71:5e:45:
b1:22:a4:62:bd:b2:ca:d9:31:2b:72:38:be:6a:2b:46:44:cb:
d8:70:99:b4:e3:33:39:4d:aa:e9:aa:be:03:bd:90:a6:d5:7e:
15:ac:7c:71:44:ab:ae:73:73:f1:e0:b4:ea:24:57:b6:f8:0d:
84:b4:50:c4:2b:b0:1c:a9:b2:74:6e:94:66:0f:02:b6:7e:bf:
c7:f7:d3:c9:b5:5d:04:79:df:c7:10:0e:fc:fd:b3:7a:9b:31:
1e:c6:ba:0c:b8:9e:7f:b9:97:90:bb:11:1e:5f:d2:ff:47:2d:
c9:42:84:16:00:85:6a:2d:fa:da:cc:c4:50:15:38:a3:bc:bb:
14:d6:ac:12:8e:02:44:31:a5:6f:de:77:95:38:7d:f9:69:8e:
aa:f7:83:66:cd:a2:a6:44:5b:a1:00:5c:c9:54:af:95:dd:03:
48:67:38:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:37:07 2026 by rpki-client