
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32342d3234203d3e203239383032.roa
File: 3139322e302e32302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: RlowJSx9GglAZBtOrysjpInbnELR+6Xvm7blK9GJ+do=
Subject key identifier: D0:27:73:54:EB:2F:F5:23:8A:1E:2B:44:EB:63:A9:7C:23:C1:66:A6
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 1F3D6B918EB6E3ACD373134725C9CC1041322E68
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32342d3234203d3e203239383032.roa
Signing time: Mon 12 Oct 2026 09:36:20 +0000
ROA not before: Mon 12 Oct 2026 09:31:20 +0000
ROA not after: Mon 11 Oct 2027 09:36:20 +0000
asID: 29802
IP address blocks: 192.0.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 15 Nov 2026 12:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3d:6b:91:8e:b6:e3:ac:d3:73:13:47:25:c9:cc:10:41:32:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Oct 12 09:31:20 2026 GMT
Not After : Oct 11 09:36:20 2027 GMT
Subject: CN=D0277354EB2FF5238A1E2B44EB63A97C23C166A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:a2:19:ad:1b:a1:99:2c:29:c8:fa:a4:59:
5d:dd:b6:4b:97:f6:da:d4:8a:a5:ec:04:ba:8a:74:
a1:76:94:f4:0b:d8:d3:42:e5:16:9e:a6:c1:00:05:
f6:c4:a3:81:e4:ce:ac:13:62:61:fe:5f:7d:c0:7a:
44:b2:e7:c2:54:f4:f1:8e:b6:a9:76:24:41:01:ff:
7c:7c:40:2d:dd:0e:4c:00:82:bc:18:52:a7:8a:08:
53:bc:29:e3:d5:67:cc:59:c0:2f:0c:05:fb:2b:88:
de:79:a4:ad:fc:4a:ad:eb:1b:cd:00:22:40:89:aa:
99:98:c0:18:c9:00:4c:b8:72:bb:bc:3d:b0:7c:df:
77:98:93:d3:4f:37:8a:65:12:3f:3d:de:35:3e:ba:
c1:97:7d:b6:b8:75:fe:c9:40:37:1d:8b:43:83:09:
ce:31:ed:1e:09:83:2d:3e:b1:e2:0d:1d:2d:ba:2f:
f6:f4:3d:56:e8:d4:8b:be:d4:0b:33:8b:28:3f:88:
d9:a4:65:5a:38:6f:36:80:0b:b0:5a:59:70:88:b2:
50:db:86:63:08:32:14:d2:df:19:b1:ca:8e:23:ee:
28:bb:a1:78:43:0e:05:9e:ef:9c:a1:c4:95:2c:c1:
22:de:ae:25:b6:a1:c6:dc:ac:a4:ce:83:91:7e:ba:
08:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:27:73:54:EB:2F:F5:23:8A:1E:2B:44:EB:63:A9:7C:23:C1:66:A6
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.20.0/24
Signature Algorithm: sha256WithRSAEncryption
19:3d:1b:ad:9d:a2:47:d9:c3:ca:17:4b:73:6d:3b:74:bc:5d:
09:6e:ca:8d:46:22:25:fe:af:e2:e7:42:45:19:d1:97:fc:10:
1a:e3:be:c1:82:f4:48:30:0f:09:50:f2:93:82:c7:ef:8a:e9:
5a:fe:e6:18:19:85:d6:8c:35:31:64:81:ba:82:2f:f0:0a:0d:
30:d3:46:be:0a:76:6d:32:5e:d6:17:33:37:99:dd:b9:5e:16:
c4:0e:fb:f7:46:bc:ca:8f:c7:4f:86:de:ce:0a:4d:29:21:f9:
3a:c7:b6:07:83:b8:29:fb:50:cd:07:b3:f9:1e:30:ee:a1:d2:
c3:29:5f:09:c2:b9:10:a1:2b:f2:a5:fe:91:bd:58:4c:df:2d:
6e:19:27:db:18:ad:ee:da:44:7b:09:e4:6e:b7:94:ed:aa:0b:
d8:4f:d8:ce:1c:52:f3:43:d5:c8:8a:f5:46:3f:ee:20:e6:0c:
cf:5f:7b:76:dc:41:fe:a4:b6:6a:bf:56:6d:dc:e2:b4:c2:5b:
4b:9a:98:72:b2:05:0b:ea:00:e7:47:6a:f0:5f:2d:ad:cf:d9:
de:cb:13:2f:3b:4b:cb:05:85:a7:77:2f:17:e1:50:00:67:3c:
4f:ef:20:6c:36:e4:7a:7a:08:11:b1:37:23:24:28:8c:47:b0:
8a:19:bd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:33:10 2026 by rpki-client