
$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa
File: 3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa (raw, json)
Hash identifier: IlFkI/Jbcx4HYvevPo+kbrV+SnVOgSMUvdMpLKPEXLQ=
Subject key identifier: 86:DF:AC:40:13:B9:94:28:19:09:5C:C1:19:70:D9:6E:6D:7E:D2:32
Certificate issuer: /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial: 205EE4FF129E3D44F93D8ED9E4EE1CF4EB960139
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa
Signing time: Thu 16 Jul 2026 16:39:37 +0000
ROA not before: Thu 16 Jul 2026 16:34:37 +0000
ROA not after: Thu 15 Jul 2027 16:39:37 +0000
asID: 398991
IP address blocks: 199.245.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5e:e4:ff:12:9e:3d:44:f9:3d:8e:d9:e4:ee:1c:f4:eb:96:01:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Validity
Not Before: Jul 16 16:34:37 2026 GMT
Not After : Jul 15 16:39:37 2027 GMT
Subject: CN=86DFAC4013B9942819095CC11970D96E6D7ED232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:77:32:34:62:3f:de:06:76:9f:d2:a8:47:
eb:82:e3:c9:1d:a6:4d:b7:68:b8:91:de:d8:18:6c:
7a:0c:cf:a9:e3:16:0f:b5:1e:04:5a:64:fe:21:81:
e3:15:eb:4e:37:19:94:b8:62:13:25:4f:25:ba:bb:
2c:33:e4:e0:e8:9c:e2:c1:51:93:87:47:74:a9:cd:
e7:1a:d0:72:98:12:ac:56:15:28:fe:17:51:9b:34:
12:c5:65:0f:f3:00:57:3e:c0:0b:92:ed:2d:fd:39:
a6:2d:88:9d:94:eb:d9:d7:a3:34:16:60:bc:68:ee:
4c:65:8d:2a:7c:de:ff:25:94:7a:b0:8d:0f:bc:13:
41:a7:6c:f8:c3:72:d9:27:f3:d2:77:bb:d8:48:e8:
61:11:6a:5e:62:a9:cf:f6:7f:91:47:ce:76:03:00:
dd:79:2b:58:48:ed:e5:b6:42:27:ff:42:18:7a:56:
56:7b:97:8c:7c:75:51:7e:1c:9a:44:d7:4b:18:84:
96:66:4f:29:6e:99:94:e1:25:37:31:a5:06:4c:d7:
a2:de:8e:9f:10:84:e2:99:83:28:b2:77:f5:e3:77:
76:be:fc:7f:32:20:45:18:dc:d5:1a:33:dc:45:72:
3b:94:d8:7a:64:a7:96:33:b3:30:ef:07:d1:da:21:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:DF:AC:40:13:B9:94:28:19:09:5C:C1:19:70:D9:6E:6D:7E:D2:32
X509v3 Authority Key Identifier:
keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.245.234.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e6:56:51:68:29:d6:ab:18:78:a0:cc:9a:72:dd:8f:2b:e9:
1a:03:88:ce:ff:f2:37:1c:99:1c:dc:c8:08:47:97:04:b4:5f:
c7:16:eb:a2:d9:6c:90:a4:d2:df:d3:f6:73:54:4c:71:41:fb:
19:4f:4e:02:e7:97:ab:6c:36:cd:61:70:08:8a:83:b3:78:08:
1a:34:ef:0b:9c:74:5d:94:3d:a1:76:e0:ed:9d:29:20:c5:4c:
f8:95:e4:9d:d6:a9:e7:9d:f5:08:b4:2c:f9:0f:06:45:4d:98:
39:a5:fb:0d:62:b5:29:23:57:ea:0a:84:9e:2c:50:e4:76:b5:
16:0c:87:13:c0:d9:79:cf:7e:df:0b:c1:36:3a:e9:6e:64:ac:
57:e3:33:39:78:c3:f0:71:11:7f:b5:a4:00:54:30:79:dd:4c:
4b:41:3e:c2:4e:dd:90:00:0d:e9:b5:ca:1a:27:49:87:76:c1:
56:de:3a:da:cf:60:49:1a:56:5a:4f:b6:12:af:0c:85:a2:5f:
1b:dc:cd:fe:16:45:73:85:8d:88:5d:6c:42:66:a7:21:15:ed:
bc:53:5e:de:5e:7d:a1:3c:42:6f:1c:5e:d9:be:b5:6a:f6:1c:
5b:b1:08:a7:a5:bd:a2:b8:2f:b7:fb:23:21:34:18:21:57:7d:
d8:91:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:39 2026 by rpki-client