
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313339333538.roa
File: 3139322e3230382e322e302f32342d3234203d3e20313339333538.roa (raw, json)
Hash identifier: TFv5X/hdglrv+/eTPEtFkkuU+TRxQsW+cHich6fEwuc=
Subject key identifier: E0:8F:91:4F:C9:09:25:61:DD:DD:FF:6C:BA:87:2F:AF:CA:26:82:CB
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 4AEE4A73D77B9A418BFB1C2D8AEBAE1E9CA598FA
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313339333538.roa
Signing time: Mon 20 Apr 2026 06:35:59 +0000
ROA not before: Mon 20 Apr 2026 06:30:59 +0000
ROA not after: Mon 19 Apr 2027 06:35:59 +0000
asID: 139358
IP address blocks: 192.208.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Apr 2026 12:12:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ee:4a:73:d7:7b:9a:41:8b:fb:1c:2d:8a:eb:ae:1e:9c:a5:98:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Apr 20 06:30:59 2026 GMT
Not After : Apr 19 06:35:59 2027 GMT
Subject: CN=E08F914FC9092561DDDDFF6CBA872FAFCA2682CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:33:76:b2:0a:d2:43:d5:87:42:58:2d:67:
ce:43:34:fc:ec:ee:fc:d0:b3:e4:fd:f6:f8:95:73:
47:47:57:85:14:68:61:bf:48:db:e0:1f:9b:ee:33:
24:de:b0:ec:00:e9:b1:cb:a1:33:1e:bf:4c:bf:51:
0b:68:20:86:f9:5a:f2:ca:7c:6c:3e:1d:79:9d:3a:
4c:30:0d:9e:0d:6d:8a:9c:3e:6e:ba:f8:c8:c4:4f:
f4:c0:d9:6b:f5:58:ae:79:3b:bf:95:47:62:51:80:
44:7b:1b:d2:13:c8:a3:ca:43:2d:87:3a:e3:8a:1f:
7b:54:50:dd:9a:4a:8e:85:1a:e0:d4:8d:b7:08:b3:
cc:0d:16:aa:e9:4e:7d:13:48:97:30:9d:5b:72:2c:
7d:c7:9b:8c:e7:77:6c:3a:cd:d0:27:20:13:1a:b5:
4c:66:60:ed:42:a1:a3:53:ce:ee:c5:4e:27:80:80:
8c:9e:9e:f6:65:0b:f6:ed:d5:0b:07:cb:fa:53:47:
bd:af:48:b4:2c:5f:fd:3f:20:13:40:8f:9f:30:61:
9a:34:c9:12:54:94:81:79:21:34:f4:e0:29:be:ca:
28:e2:e5:7c:31:13:ec:70:03:45:f6:18:d1:2a:ab:
25:d3:ca:80:7f:b0:df:ae:2a:43:c5:ef:54:fc:99:
20:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8F:91:4F:C9:09:25:61:DD:DD:FF:6C:BA:87:2F:AF:CA:26:82:CB
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313339333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.2.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:eb:6b:e7:c7:e8:f1:86:77:b6:01:1d:a1:db:c8:c9:2c:7b:
4d:dc:78:10:19:68:aa:3d:1b:d1:5a:b3:0e:8b:b8:ec:b4:b5:
89:90:e0:d6:9d:d9:7b:56:c4:19:63:4d:42:61:30:07:49:45:
36:1f:e9:e4:55:e3:31:ef:2a:4f:52:18:f8:d4:29:91:9a:42:
d0:38:f0:1b:c1:20:cd:cc:b4:ad:15:ab:a3:fd:a0:b8:fd:19:
61:2b:2e:d9:a1:e7:be:ec:8a:b4:3f:e0:e7:b9:ed:2e:22:2e:
5a:a4:b3:63:6d:d8:51:f9:a9:e5:b9:2b:dc:06:fc:39:a0:02:
b0:7c:de:be:db:3f:3a:fd:d0:bd:23:e1:ea:83:12:46:79:65:
c8:87:8c:9c:4e:a8:af:54:67:27:fa:e2:e7:23:2a:43:40:ed:
77:5e:ad:bf:4b:3d:e2:c6:2c:1e:e8:5d:45:eb:b1:85:29:cc:
90:af:04:4f:47:be:e1:38:33:03:0d:ce:73:b2:7b:ee:93:88:
44:b7:f3:cd:13:ce:15:5f:d7:b5:21:e6:c2:db:7f:26:5a:27:
08:ff:df:4d:7d:0f:4e:66:27:78:c8:84:43:45:97:f7:cf:ba:
14:fb:7d:fc:78:0a:7f:5e:0d:52:84:23:ac:26:bd:1b:ca:e9:
f6:60:a3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 04:52:38 2026 by rpki-client