
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e203633313939.roa
File: 3139322e3230382e31342e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: Y7trNc2gZX+dLns2XcNNaNvFBlbf+5Brb8XmWrNxsrs=
Subject key identifier: 85:27:82:12:0E:59:A9:9D:56:9D:F5:88:B4:32:97:42:45:54:D9:65
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 2D73EA324CBFFCF29E623842E93DCAEDDCD3E179
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e203633313939.roa
Signing time: Mon 09 Mar 2026 06:29:05 +0000
ROA not before: Mon 09 Mar 2026 06:24:05 +0000
ROA not after: Mon 08 Mar 2027 06:29:05 +0000
asID: 63199
IP address blocks: 192.208.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 11:19:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:73:ea:32:4c:bf:fc:f2:9e:62:38:42:e9:3d:ca:ed:dc:d3:e1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Mar 9 06:24:05 2026 GMT
Not After : Mar 8 06:29:05 2027 GMT
Subject: CN=852782120E59A99D569DF588B43297424554D965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:1a:6d:f9:99:87:31:53:d9:07:e0:9f:62:
9d:26:38:09:f2:ed:3a:3b:1e:1b:cd:01:a3:38:ef:
f5:bf:c1:f6:3f:63:ba:6e:85:6c:c8:bb:d2:7d:7f:
ef:5a:fe:5d:93:06:ff:3b:39:da:6d:8c:36:4a:3d:
e7:af:54:75:b6:c4:07:bb:7a:72:9d:b2:2f:ce:e4:
09:f4:26:4b:cc:90:83:f7:98:a8:30:22:fd:39:17:
3a:d7:a9:c1:8a:79:43:47:b8:2e:96:ef:b4:48:49:
cb:81:3e:65:fc:e2:73:c5:ce:29:fc:8f:fe:93:b0:
3a:71:41:f8:92:8c:02:c4:4b:b3:72:07:de:4c:3a:
ea:08:af:ff:fd:32:64:60:4a:db:72:d3:bd:d3:13:
d7:27:a3:6b:e3:29:a6:2c:3d:29:96:d9:9c:dc:d3:
1e:72:cb:da:9f:33:bd:34:fe:ac:9e:b7:8d:38:25:
b0:c4:38:94:70:ec:b0:c3:78:27:4b:a5:30:9b:44:
c9:88:c4:ba:a7:ed:4b:95:e9:27:a3:b7:d0:3b:ba:
67:8d:ec:4b:40:23:86:5f:88:7e:b2:d0:6b:79:27:
94:7b:4c:02:59:74:49:11:3c:9b:ee:9f:5d:79:7a:
f1:90:9d:d2:e0:09:8e:cd:89:f7:fe:79:c3:af:25:
a5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:27:82:12:0E:59:A9:9D:56:9D:F5:88:B4:32:97:42:45:54:D9:65
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:f7:3a:7c:d5:f2:d1:ea:42:a9:bd:f6:b3:28:68:65:4d:4e:
da:5e:df:8c:ef:a9:b6:fc:33:8d:c6:d0:3c:99:91:a7:3a:f1:
26:7a:c2:80:9d:3f:65:21:c9:d8:fe:a7:1e:81:4b:d9:89:e4:
87:22:3d:7e:fd:9e:ee:5a:8d:93:af:3c:19:69:65:85:6f:96:
5c:92:47:cc:16:21:0b:8b:9f:ad:2d:0f:69:28:ce:7b:ac:b2:
c9:40:11:10:63:14:26:ba:f2:b4:29:69:2e:16:2e:f0:18:0d:
fd:81:0b:a4:03:12:89:be:db:e8:cd:22:66:f6:b9:80:e6:f0:
ad:4a:01:2a:5b:09:6b:d6:b1:9e:6a:55:66:5e:e0:20:1f:af:
86:3c:0e:67:d2:c4:a4:4f:f2:9b:22:78:c8:c6:fa:f6:a6:93:
90:ea:f7:ea:e6:fb:c8:55:a3:ec:9b:05:ff:4f:59:e9:c3:4d:
44:14:0e:6c:0a:4d:57:b6:d4:7f:9e:40:dc:24:8a:7b:91:b2:
43:06:7f:ce:2a:4a:b0:4d:ea:e6:96:14:14:e0:7c:64:a1:57:
21:10:bf:38:37:47:dc:55:c6:fc:79:40:1d:80:cb:d5:80:34:
d2:d8:6a:9c:98:9c:3d:75:01:a5:5f:86:98:f0:ee:92:ee:dc:
df:90:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:03:55 2026 by rpki-client