
$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203239383032.roa
File: 39312e3234342e3139382e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: 7T+KN5vz0/DIPiP4mZZZjqwOxnwoC21QLV1yjMeFjYQ=
Subject key identifier: CC:88:BD:52:74:B9:4A:52:AB:91:61:09:07:CB:97:41:F9:38:C9:F0
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 062EA19767CC74E2980915802395AF5699331AEE
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203239383032.roa
Signing time: Tue 10 Feb 2026 00:16:00 +0000
ROA not before: Tue 10 Feb 2026 00:11:00 +0000
ROA not after: Tue 09 Feb 2027 00:16:00 +0000
asID: 29802
IP address blocks: 91.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 19:19:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2e:a1:97:67:cc:74:e2:98:09:15:80:23:95:af:56:99:33:1a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Feb 10 00:11:00 2026 GMT
Not After : Feb 9 00:16:00 2027 GMT
Subject: CN=CC88BD5274B94A52AB91610907CB9741F938C9F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:f1:57:e4:b5:47:9f:d0:5f:3f:79:31:46:
7b:c4:ae:6e:46:9e:ab:a5:28:9b:00:f6:94:fb:51:
8d:d0:a0:da:87:0b:a4:58:56:31:c5:73:36:e2:48:
32:30:84:eb:6b:92:3a:bd:48:04:b8:d4:02:ab:19:
50:84:3d:00:2c:55:d8:f1:ec:52:99:87:a2:16:97:
ae:46:4f:09:69:f3:44:9d:03:c2:23:e1:c7:81:02:
74:46:7d:8b:9b:d0:41:5d:14:0e:70:e0:a2:0d:b4:
da:24:84:36:9a:28:72:1c:a9:5b:7b:10:5b:ad:d7:
f0:2b:40:57:a6:ed:c3:1b:27:65:b1:e8:3d:19:37:
aa:20:21:7f:70:3b:d8:5f:69:aa:84:09:dc:85:0e:
ee:57:65:0e:8f:94:cc:9e:28:9b:84:29:e5:38:b5:
76:70:9e:e4:02:ee:d8:8e:b2:79:9b:2c:60:94:73:
ed:72:dc:98:0e:e2:da:42:c4:0a:b0:e3:ee:4e:2f:
cf:ed:f0:c4:59:fe:11:44:eb:a8:a9:42:2b:99:98:
c2:f2:1c:aa:1e:82:89:08:d6:f9:fd:2e:b4:96:80:
00:b9:26:88:cd:2b:98:ea:60:19:5a:79:14:3b:53:
48:e4:38:9a:10:3b:0e:09:02:3f:1f:c2:82:30:3e:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:88:BD:52:74:B9:4A:52:AB:91:61:09:07:CB:97:41:F9:38:C9:F0
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3234342e3139382e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a8:f2:3f:ce:75:25:73:57:10:04:be:23:94:30:55:01:68:
01:c9:ae:83:e7:88:28:8b:8e:61:fe:b3:b5:0c:e0:52:ac:39:
11:68:46:59:ea:66:c2:6b:86:ab:bf:0f:8c:68:dd:a2:58:3c:
77:87:13:d7:ee:d0:10:c6:7c:d1:3d:c5:8e:a6:2a:ff:a2:e5:
61:a6:f9:8c:78:a1:81:55:b4:a4:85:c9:00:ad:11:bc:3f:32:
3d:8f:75:a7:25:dd:69:a2:63:e0:18:2a:62:b1:c7:ea:c5:40:
3e:32:fb:ac:00:a1:8e:2d:e8:1d:22:71:16:2e:00:14:f9:b4:
02:5a:c4:1b:d2:ce:60:75:6c:99:91:2d:4f:86:76:c9:a1:6f:
e4:e8:9a:79:13:a3:1b:17:66:86:ff:70:ca:36:2d:56:47:99:
e2:fa:56:96:6c:83:a2:e1:06:10:a5:13:af:b3:af:9e:db:7e:
40:a8:2f:36:64:45:e3:c0:59:7a:c2:c7:26:5b:8e:21:73:49:
35:c9:d3:ee:f6:a9:94:2f:af:8e:8b:ef:d0:8a:f8:9e:6d:5b:
64:04:c6:58:69:df:f8:db:ed:d6:e7:de:00:c9:4f:25:f0:6e:
b2:aa:ac:67:9d:73:6a:7f:56:0f:9b:d1:18:3b:ff:95:00:76:
df:66:33:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 03:49:40 2026 by rpki-client