
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130342e302f32312d3234203d3e20383334.roa
File: 3139392e3233352e3130342e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: n/aGf+cqdZDthA1SMIGvAAN9znRog9svEfqaB0wZdiM=
Subject key identifier: 09:9C:82:B5:29:2B:B4:9B:9F:CD:37:AC:2E:0E:59:F1:68:34:D8:FD
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 5E43897A78AB91143E5A02868FB999DF80FBF511
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130342e302f32312d3234203d3e20383334.roa
Signing time: Sun 27 Sep 2026 07:33:31 +0000
ROA not before: Sun 27 Sep 2026 07:28:31 +0000
ROA not after: Sun 26 Sep 2027 07:33:31 +0000
asID: 834
IP address blocks: 199.235.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 10:59:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:43:89:7a:78:ab:91:14:3e:5a:02:86:8f:b9:99:df:80:fb:f5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Sep 27 07:28:31 2026 GMT
Not After : Sep 26 07:33:31 2027 GMT
Subject: CN=099C82B5292BB49B9FCD37AC2E0E59F16834D8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:12:2e:a8:2d:01:69:9e:04:db:79:a5:fb:6c:
65:8d:4b:64:8e:09:86:3c:4b:96:56:39:90:bf:64:
71:50:07:b7:9a:27:dc:96:de:dd:0f:83:1a:9e:34:
eb:c8:90:da:4e:1d:1b:8c:2e:13:d5:78:cb:32:42:
b1:08:64:28:17:01:ae:45:f6:c9:5e:80:dc:7b:c6:
0f:dd:65:99:45:46:af:76:35:f7:58:a3:21:56:77:
11:3e:10:5b:f0:2e:04:2f:82:7b:6d:f2:4e:80:06:
64:4e:ea:2e:79:9f:2a:62:aa:01:c1:bf:dd:db:80:
8a:45:c0:17:aa:dc:d2:7c:53:13:36:fd:02:dd:0a:
aa:37:32:3e:32:b7:5a:64:63:ad:2b:c7:00:72:7c:
e8:d1:71:1c:c0:27:46:94:3a:3b:6e:3e:a5:c7:95:
df:85:01:7f:6f:2e:1e:80:39:a3:e9:5a:ff:b3:ff:
8c:e0:f2:3f:02:29:62:24:88:0e:2d:8e:a4:75:22:
87:6b:5d:fc:ec:bb:7b:6d:1a:56:f4:f2:a3:12:e6:
4b:e6:5a:ee:06:6b:00:84:c5:39:8d:ac:f0:bc:68:
c5:32:2c:55:87:34:2f:f5:a8:2c:86:e5:2f:f1:64:
73:98:d4:04:6b:75:ce:82:f2:9c:19:cb:04:3b:2c:
a6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9C:82:B5:29:2B:B4:9B:9F:CD:37:AC:2E:0E:59:F1:68:34:D8:FD
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130342e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.104.0/21
Signature Algorithm: sha256WithRSAEncryption
87:8a:3d:4f:7b:5e:ec:bd:dc:7a:2b:22:17:f5:56:00:c1:c5:
af:5a:02:56:71:23:c6:48:14:db:54:50:21:a6:4d:d2:8f:78:
83:3a:30:a3:e5:35:cf:40:7e:96:bf:c7:1b:23:a4:48:23:47:
a1:a9:4b:31:3d:32:1d:3a:6e:1c:2a:ca:4f:60:fb:b1:00:29:
df:91:72:07:a6:0f:32:f1:f7:2e:0f:25:2d:54:c5:4f:b7:54:
31:f7:c2:d6:c4:ef:d4:58:a7:24:07:6a:0d:76:bc:9c:40:21:
46:8d:f1:ff:0c:83:a5:42:13:75:7e:a1:75:f4:29:3d:24:d0:
9e:8d:03:e2:0a:79:4d:d0:1f:8c:3b:58:0b:6e:e2:97:51:5b:
1f:74:ce:e8:3b:54:f0:57:66:57:0a:83:28:cd:94:0f:fb:09:
a1:2b:10:82:49:8a:fd:d3:d8:b4:f5:70:df:22:b3:fc:2d:f5:
66:69:39:36:0d:4f:bb:07:c0:74:de:01:8a:3a:e7:05:93:a0:
70:50:ba:e8:4d:98:74:ff:83:bd:3c:a9:3e:52:26:a2:13:19:
7f:6d:60:13:07:98:9e:c8:cc:85:5d:33:3e:3a:40:ef:48:87:
4c:3e:12:d7:65:1c:eb:07:bf:91:ce:f7:f9:14:92:d7:a6:aa:
1c:5e:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:04:56 2026 by rpki-client