
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131372e302f32342d3234203d3e2039303039.roa
File: 3139322e3130392e3131372e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: j8VtzdQwm9I06BF3qPHYkCGKGOMGw5XPiCKYiZXVUak=
Subject key identifier: C2:44:63:3C:16:19:41:CF:43:F8:12:CA:2D:46:4F:88:FE:F0:6B:8C
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 3E25CE152751E8A0443365D4A08EF59AD150FEC9
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131372e302f32342d3234203d3e2039303039.roa
Signing time: Tue 24 Mar 2026 08:35:54 +0000
ROA not before: Tue 24 Mar 2026 08:30:54 +0000
ROA not after: Tue 23 Mar 2027 08:35:54 +0000
asID: 9009
IP address blocks: 192.109.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 21:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:25:ce:15:27:51:e8:a0:44:33:65:d4:a0:8e:f5:9a:d1:50:fe:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Mar 24 08:30:54 2026 GMT
Not After : Mar 23 08:35:54 2027 GMT
Subject: CN=C244633C161941CF43F812CA2D464F88FEF06B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:98:39:ee:23:74:1d:42:1c:8e:ce:83:95:
4d:78:b3:9e:7b:6f:9b:4b:14:33:ca:88:92:ac:e4:
cd:72:f3:7f:3a:54:81:c3:c7:77:a1:52:b1:20:71:
74:78:6e:cc:16:84:3f:67:bd:9c:a0:97:67:ab:a2:
6c:ae:40:b0:23:f0:d0:bf:26:e3:c6:54:45:4a:99:
6b:1e:a6:c3:18:12:3a:de:15:89:13:77:6e:e7:2b:
96:d0:3d:7a:5e:69:3c:78:b1:a5:fd:6b:e5:f7:b9:
6c:7d:d8:d4:1c:2a:f9:01:b5:8e:cc:de:d5:53:d5:
87:17:cd:3e:a1:b2:a1:e3:26:eb:60:d2:a3:89:55:
25:13:7a:87:2a:a1:03:81:b1:68:ed:9f:7f:50:72:
07:46:51:3d:87:fb:cf:8f:24:4d:cf:0d:3b:8f:b1:
ef:f8:1c:80:7a:75:64:e9:db:db:6b:58:5e:ce:dc:
11:15:b0:84:3d:cd:25:cd:bf:c7:90:88:3e:36:50:
cd:96:8a:ff:5b:12:9f:42:6d:6d:0b:1f:c3:c5:50:
78:4e:53:c2:6f:46:11:fb:08:01:07:eb:da:22:ca:
fd:3b:a9:f2:25:00:91:e3:11:74:a8:5d:29:98:40:
47:82:15:ae:56:2e:11:6f:1c:d9:9a:51:31:96:26:
61:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:44:63:3C:16:19:41:CF:43:F8:12:CA:2D:46:4F:88:FE:F0:6B:8C
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131372e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.117.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:b7:72:71:a6:d5:27:08:2c:66:9a:02:e9:bf:50:1a:9f:5e:
06:aa:4e:ca:73:37:24:61:71:95:13:59:50:5f:1d:77:09:ce:
19:76:ed:11:50:8a:92:c0:39:30:00:7d:e5:83:2b:1f:53:39:
5e:84:12:35:c3:30:d9:19:31:08:32:31:2b:6e:7d:ce:85:8e:
7b:be:0c:e1:16:8e:03:2c:85:87:53:dc:24:32:ee:7b:01:65:
6c:38:08:96:c4:ee:bc:b4:57:38:1d:27:5a:69:9f:56:20:6f:
19:f3:45:eb:9d:6b:87:1a:06:2e:13:b1:40:db:a1:3d:91:ff:
6a:6b:13:b1:03:52:93:bc:4c:8d:0d:58:00:69:75:bf:29:09:
92:86:a0:71:3d:4d:28:ed:17:32:37:27:91:68:ca:15:5e:9b:
bc:1a:70:42:fd:72:2f:3d:8d:10:f0:f0:af:8b:1a:d4:f3:a0:
a6:7c:58:ad:dd:2c:f6:f6:55:7d:26:10:34:2d:60:fa:9b:01:
36:8a:e0:0e:ff:cc:26:b5:cf:33:b9:db:b9:8b:34:43:45:19:
36:91:fb:19:f8:ee:49:54:01:de:ea:e6:0e:74:59:4b:3c:63:
c2:b3:4c:d0:5c:94:48:6f:cb:d1:09:d6:1f:a4:37:6a:ec:dd:
fe:b4:b5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:36 2026 by rpki-client