
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3139392e372e3235322e302f32322d3234203d3e203230343733.roa
File: 3139392e372e3235322e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier: 5RMKCT5LkZiLgZt5hLCOpQgF6LHzDA97eXgsNKqkSNc=
Subject key identifier: 80:39:A9:9A:27:7D:D3:29:65:A6:5E:4A:EA:0F:6B:06:8F:7B:6A:88
Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial: 3B00C2E04490AD8B247C7F200DDAB69B7B595633
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3139392e372e3235322e302f32322d3234203d3e203230343733.roa
Signing time: Tue 10 Mar 2026 14:35:54 +0000
ROA not before: Tue 10 Mar 2026 14:30:54 +0000
ROA not after: Tue 09 Mar 2027 14:35:54 +0000
asID: 20473
IP address blocks: 199.7.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 11 Mar 2026 15:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:00:c2:e0:44:90:ad:8b:24:7c:7f:20:0d:da:b6:9b:7b:59:56:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Validity
Not Before: Mar 10 14:30:54 2026 GMT
Not After : Mar 9 14:35:54 2027 GMT
Subject: CN=8039A99A277DD32965A65E4AEA0F6B068F7B6A88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:32:a1:80:28:c6:44:23:4c:65:a3:88:b0:
99:44:9d:75:7e:e7:49:cd:91:c6:88:bf:40:3e:fc:
94:17:a2:99:21:b5:3f:3b:f5:07:8b:15:a1:1b:9b:
d1:42:00:70:94:7b:a4:a9:37:ad:b8:f1:4e:6e:2c:
64:6b:74:e0:8e:f2:ba:09:0d:86:ef:bc:f8:d8:32:
1a:00:3c:0e:ef:6b:0b:da:b3:f1:90:77:7d:dd:a8:
97:ee:e2:60:82:ac:dc:cd:b6:59:fa:d1:41:b9:0c:
98:ff:26:bc:9e:8a:d4:f2:b3:8f:da:d4:6a:57:f7:
ad:79:37:fa:d4:b4:cc:7c:04:9d:e8:04:1d:d3:03:
c2:d2:db:73:d0:05:e4:f4:69:0f:4c:1d:fa:1e:a0:
8f:89:ef:b6:75:0c:c8:da:72:71:51:6f:2b:0a:ba:
e6:36:16:17:fb:ad:2e:00:c1:d1:24:25:cd:a3:1a:
75:0f:c2:40:71:6c:37:7b:3a:f9:95:64:a7:09:25:
7f:73:e8:2b:6a:3b:a7:49:04:84:da:27:65:a4:f7:
a5:b1:83:13:52:de:15:8e:8a:aa:f7:2f:77:84:00:
2e:17:a5:20:d9:3d:be:2b:79:0c:e0:8c:35:d5:9c:
3a:bf:95:d4:74:b9:81:e2:e4:03:56:87:84:a1:74:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:39:A9:9A:27:7D:D3:29:65:A6:5E:4A:EA:0F:6B:06:8F:7B:6A:88
X509v3 Authority Key Identifier:
keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3139392e372e3235322e302f32322d3234203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.7.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:c8:52:55:17:4d:5e:ca:9c:e9:b2:f4:91:fa:bf:11:89:11:
d2:74:f2:79:45:04:d6:9f:24:63:1c:81:1c:82:21:1e:01:e4:
0f:fe:e2:f2:b0:46:e1:18:9c:f3:06:4b:8b:8f:67:9a:25:1a:
89:0f:6c:22:ba:fb:41:5c:4c:13:68:62:9c:3a:4b:a5:79:4f:
40:a0:03:6c:e5:12:30:ff:75:c1:21:18:b1:3c:b9:c9:59:02:
c2:c4:93:ae:a2:3e:9e:fb:2a:5a:bb:f0:df:6b:51:93:0b:fd:
ea:12:95:9b:60:88:66:04:0e:fb:f7:65:78:6e:e8:40:e8:34:
17:17:2f:45:7f:ae:47:7c:cb:cc:99:e0:51:8f:1a:ee:b1:00:
f9:8a:b0:cd:6e:af:e5:62:65:87:9e:ed:b6:78:66:63:91:cb:
e5:62:d5:b4:22:d0:26:3a:6d:b3:43:9b:2d:d7:be:09:5e:16:
99:bd:b0:5d:6d:7c:e4:82:e0:38:9e:78:a4:5e:8f:2e:cd:53:
2e:8b:6d:4c:d0:4e:5b:47:e9:5f:ae:d3:a4:3f:71:bc:76:46:
d2:7d:d6:9b:dd:cc:f2:69:1d:b2:b4:86:c7:17:c6:3d:56:3b:
d6:3e:ee:89:6e:c0:4f:77:03:21:73:86:bc:60:1d:ba:a0:f3:
76:c0:77:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 07:14:12 2026 by rpki-client