
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS399359.roa
File: AS399359.roa (raw, json)
Hash identifier: YTqvAM13UsGkaF9EKXVjkU8qM/CoyHmx1LlxjU/t/nk=
Subject key identifier: CE:B8:89:9A:26:7C:FE:AF:A3:25:53:05:72:60:6C:A7:1A:71:35:21
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 2962E1FBA489634879261928434CC30D13D4FB3F
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS399359.roa
Signing time: Thu 29 Oct 2026 17:12:33 +0000
ROA not before: Thu 29 Oct 2026 17:07:33 +0000
ROA not after: Thu 28 Oct 2027 17:12:33 +0000
asID: 399359
IP address blocks: 199.235.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 15 Nov 2026 21:36:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:62:e1:fb:a4:89:63:48:79:26:19:28:43:4c:c3:0d:13:d4:fb:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Oct 29 17:07:33 2026 GMT
Not After : Oct 28 17:12:33 2027 GMT
Subject: CN=CEB8899A267CFEAFA325530572606CA71A713521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:49:4e:8b:b0:87:1d:80:0e:42:c2:c2:03:
4d:20:ff:d2:85:a6:a9:ec:f6:63:cf:ef:13:24:ae:
08:ef:19:b5:60:cc:09:79:cc:4c:f8:1e:9a:4f:75:
1a:49:46:ec:c0:b1:c5:db:b3:18:b8:d6:a7:3f:38:
79:17:5b:2a:77:2e:bf:9b:88:23:d4:fc:50:2a:53:
cb:08:69:4e:be:75:03:9f:0b:99:24:85:eb:76:ca:
3d:9c:46:2f:0c:36:b5:ad:67:40:20:2e:97:6e:8c:
95:cb:bd:02:25:99:24:b1:6c:53:01:c9:9d:28:3d:
b4:51:20:d2:93:90:b9:52:70:97:86:6b:86:19:9c:
fb:cf:c4:14:77:b9:71:98:a3:bd:41:9c:8b:02:7c:
1c:2f:2a:b2:93:93:26:c5:b7:db:08:01:4e:c1:c9:
32:4c:f6:c7:bf:04:aa:1a:bc:72:0b:ca:1a:4d:af:
e6:be:d4:13:88:81:16:0f:51:49:22:90:59:81:9d:
3e:f8:a9:db:a6:74:7b:b5:94:23:92:74:9e:1f:3c:
95:cb:6d:aa:61:8d:4a:27:1c:28:fe:df:81:ca:39:
4f:96:6b:af:93:6c:49:52:03:bd:4b:18:1f:26:7b:
74:6c:12:05:00:2a:41:c8:50:c1:9b:13:82:79:b5:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B8:89:9A:26:7C:FE:AF:A3:25:53:05:72:60:6C:A7:1A:71:35:21
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS399359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.119.0/24
Signature Algorithm: sha256WithRSAEncryption
56:46:c7:1a:98:98:39:f4:ce:8f:90:44:f6:22:54:2c:5d:ab:
3c:a7:1f:25:39:f1:2e:e7:84:39:0e:3b:9e:82:9c:2f:1c:5f:
ce:06:ad:56:6e:f7:c0:3e:aa:c3:24:7b:a7:e7:d8:a9:b8:87:
9e:55:c2:ca:a5:9a:1e:36:6f:78:9b:3e:73:cc:ff:09:99:af:
62:3c:6e:52:65:17:82:86:a5:f3:be:29:a9:90:ce:b8:10:b1:
b3:93:d1:d2:94:64:44:ae:dd:66:24:81:82:ad:54:80:98:4b:
83:69:90:5b:2b:1c:f3:ab:70:79:03:66:6d:e6:6a:6a:fa:32:
4a:03:c6:a0:36:64:38:2d:c7:19:3f:2d:8d:6d:c5:b3:cd:8e:
9f:54:56:cf:ab:be:0b:d0:39:6b:61:15:f9:83:b4:cf:18:a5:
c5:d7:cf:2a:ef:c1:24:24:6b:c3:f5:95:dd:d8:fc:58:70:59:
8f:aa:46:ff:53:69:69:b2:dd:1b:46:9c:59:2b:cf:86:38:cb:
8e:04:1d:aa:a7:56:ab:11:4f:6c:15:cc:49:6d:ae:3b:89:8f:
fa:84:4b:c1:05:a3:7e:24:e4:9b:2b:99:2a:ea:35:11:b5:f7:
7d:63:de:5d:c3:90:1c:6a:66:9e:d1:67:e7:0d:d2:27:5c:ce:
a0:ea:85:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:47:25 2026 by rpki-client