
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa
File: 3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier: VBMQQ59qr9EBAO67pihG+HmwuT/riHrf85UA4RtzY1E=
Subject key identifier: CD:8E:D0:25:D1:79:C8:88:7A:93:E6:2A:6B:91:D4:01:EC:13:3D:C8
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 38B6758C465DCD72405C561C1A869C86576BC3D3
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa
Signing time: Wed 07 Oct 2026 16:41:13 +0000
ROA not before: Wed 07 Oct 2026 16:36:13 +0000
ROA not after: Wed 06 Oct 2027 16:41:13 +0000
asID: 152726
IP address blocks: 199.231.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:58:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b6:75:8c:46:5d:cd:72:40:5c:56:1c:1a:86:9c:86:57:6b:c3:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Oct 7 16:36:13 2026 GMT
Not After : Oct 6 16:41:13 2027 GMT
Subject: CN=CD8ED025D179C8887A93E62A6B91D401EC133DC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:cc:4c:05:b3:ff:a1:33:db:59:f3:df:9b:
0c:1f:d9:86:10:88:cf:50:1a:ea:81:7b:4d:f9:a9:
1c:14:7f:be:f0:c1:6a:84:e2:87:02:e3:95:3f:26:
85:6a:18:45:07:13:9c:8f:ca:b2:49:90:c6:df:f6:
49:f9:9f:fa:25:ff:a4:09:c4:c3:29:ee:d8:2b:2e:
82:5d:ea:b1:1b:9c:b1:09:e6:da:72:19:c3:5d:9f:
7a:6b:1d:5d:4d:39:aa:36:49:95:7d:5f:87:5c:71:
e2:ce:21:cb:d3:bc:bb:8f:e5:22:76:25:41:7a:76:
72:14:4d:a3:ba:8c:51:9c:77:1c:47:48:2d:85:e3:
ef:6b:bf:40:50:de:8a:5e:3e:34:c0:6b:20:21:39:
be:e0:28:18:0a:8e:6a:27:2d:72:d8:58:02:15:87:
59:a7:a9:41:d8:03:80:44:35:52:77:13:0a:8d:7a:
42:19:bb:93:77:5e:b9:01:ec:d7:5c:85:3c:b6:2e:
e8:0c:98:49:94:62:58:34:9e:23:bf:30:91:2a:dc:
47:3b:05:21:ed:d2:7d:a4:e8:bc:9f:dd:7c:90:0d:
3f:1b:59:27:a0:9e:a6:f0:04:ed:a1:9f:59:0e:a9:
88:cf:d8:0a:43:19:7a:7f:ae:e7:1c:7d:f9:03:30:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8E:D0:25:D1:79:C8:88:7A:93:E6:2A:6B:91:D4:01:EC:13:3D:C8
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a3:34:07:b4:ec:d1:e6:cf:3a:c1:4f:47:b6:85:23:c5:79:
a1:63:04:a4:b6:25:3a:9e:29:71:27:cb:da:70:bc:09:3c:5a:
57:bd:a6:47:5a:7d:b8:87:bc:22:78:46:8f:d2:f7:dd:ce:07:
cb:14:ed:3e:d0:9b:1f:fa:8d:28:b3:3b:02:b6:f9:98:09:a1:
26:c9:71:a7:a9:e9:87:7f:e7:a0:fc:66:93:1b:92:a2:6a:76:
9c:c1:06:ac:1f:6f:73:32:5c:d0:1c:a0:73:b8:1e:87:f6:ee:
f6:49:75:58:7a:77:9f:6f:90:7f:19:a8:f1:7e:0e:2e:5e:98:
26:cd:8d:f9:b2:da:68:54:f3:1d:00:1b:59:76:5a:b6:44:08:
14:78:8a:8e:c7:df:7a:cb:c0:51:53:d5:17:fb:fc:e2:34:17:
c5:5c:0b:02:5c:bd:4c:b4:c9:58:88:44:12:8d:72:71:1b:04:
0c:7c:f9:04:fc:ca:7d:61:24:df:98:57:aa:6d:2e:05:e1:36:
4b:83:19:23:34:69:76:5f:c3:fe:e4:89:d5:b9:37:1b:06:b8:
fe:f1:92:bd:fc:a2:2e:3a:f7:e6:e3:81:6b:fc:9d:13:16:fd:
40:b5:66:33:87:da:cc:76:93:6c:61:34:fa:fd:0f:6b:40:5a:
11:63:99:fb
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUOLZ1jEZdzXJAXFYcGoachldrw9MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYxMDA3MTYzNjEzWhcNMjcxMDA2MTY0MTEz
WjAzMTEwLwYDVQQDEyhDRDhFRDAyNUQxNzlDODg4N0E5M0U2MkE2QjkxRDQwMUVD
MTMzREM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYbMTAWz/6Ez
21nz35sMH9mGEIjPUBrqgXtN+akcFH++8MFqhOKHAuOVPyaFahhFBxOcj8qySZDG
3/ZJ+Z/6Jf+kCcTDKe7YKy6CXeqxG5yxCebachnDXZ96ax1dTTmqNkmVfV+HXHHi
ziHL07y7j+UidiVBenZyFE2juoxRnHccR0gthePva79AUN6KXj40wGsgITm+4CgY
Co5qJy1y2FgCFYdZp6lB2AOARDVSdxMKjXpCGbuTd165AezXXIU8ti7oDJhJlGJY
NJ4jvzCRKtxHOwUh7dJ9pOi8n918kA0/G1knoJ6m8ATtoZ9ZDqmIz9gKQxl6f67n
HH35AzAjOwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFM2O0CXReciIepPmKmuR1AHs
Ez3IMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNTMyMzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+dCMA0GCSqGSIb3DQEB
CwUAA4IBAQAKozQHtOzR5s86wU9HtoUjxXmhYwSktiU6nilxJ8vacLwJPFpXvaZH
Wn24h7wieEaP0vfdzgfLFO0+0Jsf+o0oszsCtvmYCaEmyXGnqemHf+eg/GaTG5Ki
anacwQasH29zMlzQHKBzuB6H9u72SXVYenefb5B/Gajxfg4uXpgmzY35stpoVPMd
ABtZdlq2RAgUeIqOx996y8BRU9UX+/ziNBfFXAsCXL1MtMlYiEQSjXJxGwQMfPkE
/Mp9YSTfmFeqbS4F4TZLgxkjNGl2X8P+5InVuTcbBrj+8ZK9/KIuOvfm44Fr/J0T
Fv1AtWYzh9rMdpNsYTT6/Q9rQFoRY5n7
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:27 2026 by rpki-client