
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa
File: 3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier: 9Vg0QanpxMfTmJRS9InzUTL/EXWEsLzH1rAsTFx+ZxA=
Subject key identifier: EB:83:58:0F:8B:54:4F:D9:AF:A3:7A:85:B5:5B:3D:1A:57:DD:15:0C
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 7EC40E75410DC2AFD5EE8777911D26A0D62D6A7C
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa
Signing time: Wed 30 Sep 2026 09:14:48 +0000
ROA not before: Wed 30 Sep 2026 09:09:48 +0000
ROA not after: Wed 29 Sep 2027 09:14:48 +0000
asID: 7018
IP address blocks: 199.189.150.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c4:0e:75:41:0d:c2:af:d5:ee:87:77:91:1d:26:a0:d6:2d:6a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:48 2026 GMT
Not After : Sep 29 09:14:48 2027 GMT
Subject: CN=EB83580F8B544FD9AFA37A85B55B3D1A57DD150C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9b:8e:f1:15:ee:69:1d:c2:a5:60:25:7d:49:
7d:f7:0f:1f:a0:05:54:d2:2b:58:2c:f4:13:e8:07:
00:e3:7d:84:97:cd:13:9a:c9:bd:b3:4a:d8:60:21:
45:4b:91:8c:6d:0f:3c:7c:ce:fb:f8:55:3c:ac:01:
cd:25:bc:c6:d1:d6:e3:55:b0:e7:3c:20:3f:a1:96:
c0:51:f9:6c:fe:43:16:c8:75:77:7f:81:09:93:cf:
d7:38:ab:e9:de:b0:46:b7:00:30:47:ce:81:f9:9b:
b5:cf:80:83:d6:3b:f8:a9:e1:53:55:54:b3:64:03:
19:34:37:01:f9:1a:79:f1:18:9d:a4:a1:6e:52:67:
2e:17:3a:26:d4:be:04:91:13:f0:a8:a7:67:fe:99:
9d:b0:51:a5:d4:b5:3e:83:71:72:38:54:07:6c:f8:
fb:0f:4f:1b:a7:aa:b9:24:55:ee:22:99:44:e9:2c:
9f:2c:41:a3:de:5a:24:44:c4:88:10:51:77:51:6d:
73:a7:71:d3:9b:cc:2f:53:51:2b:77:33:02:8a:f4:
d7:ba:0b:b5:80:e2:76:0c:47:02:9a:ec:91:ef:5d:
ce:2c:53:5c:bd:a5:f6:64:c2:cb:1b:da:50:24:4d:
05:c2:e4:6a:6c:17:77:7f:0b:04:39:88:75:fd:d0:
f7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:83:58:0F:8B:54:4F:D9:AF:A3:7A:85:B5:5B:3D:1A:57:DD:15:0C
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.189.150.0/23
Signature Algorithm: sha256WithRSAEncryption
73:3a:89:f1:82:8d:1c:a8:c7:14:55:d6:1f:8c:74:0f:62:bc:
4a:a4:49:e9:4a:c9:f8:61:bd:2f:ab:ff:b9:f3:01:09:cf:13:
cf:f6:4a:20:62:5f:9e:bf:72:d8:e3:8e:87:de:b7:ad:82:b6:
43:02:45:e7:13:29:4f:36:34:27:58:d1:3f:a4:00:cd:a0:65:
66:c1:d8:e7:91:0a:a3:05:d6:ec:50:7a:25:24:16:44:07:d2:
93:c4:1b:21:d6:21:1c:eb:fe:37:8f:e4:ff:25:ef:73:a5:f3:
e6:ad:c4:fa:87:43:1a:03:29:a5:db:42:d5:a5:66:80:44:98:
5c:1f:50:a3:58:85:d4:67:94:22:b3:3c:c5:ec:d1:fa:3a:c6:
90:24:7e:9e:5f:76:37:f4:9a:30:76:c5:d9:23:47:d9:9f:77:
de:8a:10:fe:9a:31:29:b7:dd:98:51:1b:a7:2a:0d:f1:ec:df:
4c:e5:b9:7b:79:d7:8c:9c:3b:81:71:74:47:8a:a8:bb:16:59:
51:e8:03:1c:1c:60:d7:f9:37:6b:32:16:23:eb:8d:35:8f:8f:
15:75:5a:6d:ce:24:e7:9b:5d:b0:ac:9c:4b:63:44:d9:63:c5:
76:44:bb:3d:b7:89:7c:07:dd:e7:72:f9:3a:82:e3:4b:a8:21:
3f:54:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:31 2026 by rpki-client