
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20343031363733.roa
File: 3139392e34382e3234332e302f32342d3234203d3e20343031363733.roa (raw, json)
Hash identifier: htlCg8whu7GcfSXCrGQEr4NMk1W6T62dLaXgMzjD49U=
Subject key identifier: 22:8F:29:19:81:1E:76:08:80:FF:3F:8F:A4:E1:32:11:7D:D5:21:A0
Certificate issuer: /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial: 483F0399BF1AE8CBB624B93DCE3F3344A3F0FF8A
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20343031363733.roa
Signing time: Fri 20 Mar 2026 20:35:54 +0000
ROA not before: Fri 20 Mar 2026 20:30:54 +0000
ROA not after: Fri 19 Mar 2027 20:35:54 +0000
asID: 401673
IP address blocks: 199.48.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 25 Mar 2026 13:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:3f:03:99:bf:1a:e8:cb:b6:24:b9:3d:ce:3f:33:44:a3:f0:ff:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Validity
Not Before: Mar 20 20:30:54 2026 GMT
Not After : Mar 19 20:35:54 2027 GMT
Subject: CN=228F2919811E760880FF3F8FA4E132117DD521A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:77:5d:e1:b9:e5:9d:8f:71:48:e5:37:5e:
b7:52:f6:6d:ed:ee:6c:d0:56:78:67:b0:45:e4:f3:
b0:50:07:92:14:58:8f:a0:9b:db:22:e9:16:b1:28:
8b:37:3c:cf:a3:f7:a4:f6:4a:2e:85:c0:98:35:b7:
22:7a:13:d2:10:5b:d5:7b:3c:ef:c9:14:57:8f:13:
45:9f:4c:ea:ff:77:59:b0:dd:0c:55:4f:0d:82:4d:
68:58:3e:86:ab:0c:52:cd:19:15:96:bd:4a:14:c5:
b7:8d:c6:05:b5:00:c5:3d:9a:9d:fe:a7:36:7c:b4:
4a:8c:a2:0f:f0:18:9b:92:f6:7a:ad:e7:2d:57:08:
40:3d:38:ec:5d:03:09:b9:e5:1e:8b:42:b4:66:2f:
7b:cf:39:cf:c5:b2:16:4e:7a:ba:f4:9b:db:83:97:
3c:fe:bd:78:f7:b7:35:c1:20:f8:f4:1f:7f:cd:6f:
e5:4c:db:56:e0:7f:63:0b:41:31:2e:ec:b5:68:5b:
53:fb:b9:dc:be:e9:90:4f:fe:4f:ff:56:5f:75:c9:
1e:5c:d7:4f:a1:73:26:f4:a1:fa:be:f0:56:d0:fc:
dd:5f:ef:3a:eb:dc:00:91:ea:97:4c:65:a8:2e:ca:
1a:65:f9:06:cf:8f:d2:5c:cb:fc:d4:6c:26:ab:67:
78:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:29:19:81:1E:76:08:80:FF:3F:8F:A4:E1:32:11:7D:D5:21:A0
X509v3 Authority Key Identifier:
keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20343031363733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.48.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a3:3c:be:c2:7d:e9:6f:32:f9:ba:b5:8f:82:22:5f:dd:48:
20:78:b6:f4:96:50:59:46:a2:42:2c:7b:fe:96:81:cc:78:f8:
ce:e6:d6:9a:72:6e:28:47:d9:8b:01:63:0f:c8:29:3b:ff:de:
18:02:4d:28:67:5d:2e:fd:a6:9a:6e:aa:b8:1b:14:51:b3:4f:
62:88:b2:55:b4:36:d7:2d:41:57:5f:69:0d:b4:58:f2:0f:9a:
19:57:8d:bf:2b:0d:8b:02:7d:39:c9:8a:38:d3:53:dc:e0:24:
34:dd:cb:41:57:86:3a:23:5e:77:10:53:57:19:15:4c:e5:1d:
4e:26:21:8b:bf:27:0f:e3:aa:a6:b5:e4:5b:3f:9e:2c:09:a6:
91:19:6d:d8:36:e8:2b:e9:1e:fb:38:6f:12:78:2a:63:ee:32:
a9:5c:17:e7:4a:85:33:ba:21:e3:39:1b:9d:d0:df:6a:89:de:
ec:f2:54:d4:93:86:bc:aa:ff:ea:0f:4f:f0:7d:6f:01:08:87:
52:df:35:ea:31:e6:c8:e2:61:8e:3c:8e:1e:6e:4b:33:c2:16:
8e:14:07:30:b2:a0:15:fa:23:48:6f:06:ec:d7:f5:32:33:47:
24:f5:f1:1f:a1:b3:49:6e:14:3c:67:37:51:f0:a4:41:ed:c5:
47:1d:a9:8f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUSD8Dmb8a6Mu2JLk9zj8zRKPw/4owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjAwMjAyYjE4OGUzNTFmYzI5NTA2Mjc1Nzk1YmI4OWNl
NzdjMDAwZjZlNWI5YjhmYTUwHhcNMjYwMzIwMjAzMDU0WhcNMjcwMzE5MjAzNTU0
WjAzMTEwLwYDVQQDEygyMjhGMjkxOTgxMUU3NjA4ODBGRjNGOEZBNEUxMzIxMTdE
RDUyMUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0V3XeG55Z2P
cUjlN163UvZt7e5s0FZ4Z7BF5POwUAeSFFiPoJvbIukWsSiLNzzPo/ek9kouhcCY
NbciehPSEFvVezzvyRRXjxNFn0zq/3dZsN0MVU8Ngk1oWD6GqwxSzRkVlr1KFMW3
jcYFtQDFPZqd/qc2fLRKjKIP8BibkvZ6rectVwhAPTjsXQMJueUei0K0Zi97zznP
xbIWTnq69Jvbg5c8/r1497c1wSD49B9/zW/lTNtW4H9jC0ExLuy1aFtT+7ncvumQ
T/5P/1ZfdckeXNdPoXMm9KH6vvBW0PzdX+8669wAkeqXTGWoLsoaZfkGz4/SXMv8
1Gwmq2d4FQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCKPKRmBHnYIgP8/j6ThMhF9
1SGgMB8GA1UdIwQYMBaAFD7oclq6tLgiFWyeMox6GIpmgedJMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5MmMyZTUwODYzYzNlLzAv
M0VFODcyNUFCQUI0QjgyMjE1NkM5RTMyOEM3QTE4OEE2NjgxRTc0OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2I0NTg2OTY0LTNjOGItNDQ0MS04YjhhLWIyZDA3NzIxZjM0Ni82MDAy
MDJiMTg4ZTM1MWZjMjk1MDYyNzU3OTViYjg5Y2U3N2MwMDBmNmU1YjliOGZhNS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4ZThiOTA3MDE4OTJj
MmU1MDg2M2MzZS8wLzMxMzkzOTJlMzQzODJlMzIzNDMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMxMzYzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzDzMA0GCSqGSIb3DQEB
CwUAA4IBAQBcozy+wn3pbzL5urWPgiJf3UggeLb0llBZRqJCLHv+loHMePjO5taa
cm4oR9mLAWMPyCk7/94YAk0oZ10u/aaabqq4GxRRs09iiLJVtDbXLUFXX2kNtFjy
D5oZV42/Kw2LAn05yYo401Pc4CQ03ctBV4Y6I153EFNXGRVM5R1OJiGLvycP46qm
teRbP54sCaaRGW3YNugr6R77OG8SeCpj7jKpXBfnSoUzuiHjORud0N9qid7s8lTU
k4a8qv/qD0/wfW8BCIdS3zXqMebI4mGOPI4ebkszwhaOFAcwsqAV+iNIbwbs1/Uy
M0ck9fEfobNJbhQ8ZzdR8KRB7cVHHamP
-----END CERTIFICATE-----
Generated at Wed Mar 25 07:23:14 2026 by rpki-client