
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
File: 3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: nPULBsdLNyUyyh2BBgG+N3Wjo64kl4nXOy/ZV5eDxH4=
Subject key identifier: 17:C1:C6:92:31:FA:EB:FA:42:5E:1E:0E:E9:EA:AC:FD:58:10:BD:78
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 512F64A1509B638E0D43C7F4D5F46A7AD90D334A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
Signing time: Tue 24 Mar 2026 08:35:54 +0000
ROA not before: Tue 24 Mar 2026 08:30:54 +0000
ROA not after: Tue 23 Mar 2027 08:35:54 +0000
asID: 9009
IP address blocks: 192.109.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 21:20:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2f:64:a1:50:9b:63:8e:0d:43:c7:f4:d5:f4:6a:7a:d9:0d:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Mar 24 08:30:54 2026 GMT
Not After : Mar 23 08:35:54 2027 GMT
Subject: CN=17C1C69231FAEBFA425E1E0EE9EAACFD5810BD78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:fe:b8:2a:04:ac:09:2a:f0:42:fb:31:dd:
85:c3:29:85:bd:2b:23:1a:e2:1c:f2:9a:2d:11:1d:
0f:08:43:95:46:04:23:fa:31:2f:e9:65:c9:67:bc:
d9:0f:9e:a1:d7:5e:77:f3:25:cb:44:91:ab:ca:59:
23:18:7c:8c:0d:ae:eb:bf:0b:0f:f9:05:3d:e9:a2:
4c:3d:c8:39:ad:3f:41:93:ab:db:6f:2f:e6:e0:d3:
fc:2b:ec:ba:80:36:b9:9f:a9:72:15:ce:0e:64:57:
74:01:f1:2a:9e:69:e8:d9:59:1c:6f:af:09:c3:8a:
85:1c:7b:12:87:54:39:c2:80:d2:9b:5a:9b:18:65:
23:9e:a1:d2:62:8c:0d:91:64:b6:3c:1b:7c:b7:d1:
55:f9:50:02:39:da:14:9b:49:52:84:7d:70:a7:7c:
f9:b7:47:93:f1:de:8e:c8:e3:dc:45:5e:58:9d:0c:
1d:61:b3:5b:c5:3f:d0:2d:4a:b5:3a:7a:d9:51:67:
2a:31:c2:83:32:f0:f1:fe:43:d7:f9:a5:e4:57:2c:
32:10:57:7c:13:12:ab:aa:1e:4b:83:a6:1a:eb:7d:
d3:63:30:c3:c9:d5:fc:a1:ff:25:83:6b:45:da:74:
5f:86:c7:03:41:d4:05:0d:ab:a4:83:0f:28:f7:c3:
d2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C1:C6:92:31:FA:EB:FA:42:5E:1E:0E:E9:EA:AC:FD:58:10:BD:78
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.123.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:3e:e0:89:bd:b9:85:a7:84:53:ff:6f:e2:00:97:c9:3e:13:
f6:fd:b7:37:29:36:ab:3c:e6:12:b4:12:4e:7c:40:55:a1:49:
28:6b:ef:5a:65:d5:08:53:58:4b:60:46:5c:8c:86:68:7d:fc:
f0:41:28:42:26:f9:b4:dc:bd:c2:4e:bb:48:9e:b1:7e:2c:f5:
c4:c4:6d:69:8b:58:9b:51:40:6a:66:0e:1e:4b:19:8d:a4:16:
e2:cc:d4:eb:8d:bc:7a:36:99:1c:5c:db:f3:fb:a6:39:44:90:
06:93:ad:62:48:9d:39:fe:cd:ff:fd:42:f4:03:07:47:7d:cb:
0b:34:38:ea:61:fd:8d:5f:3c:39:72:a2:0a:64:80:d6:2a:cc:
90:47:78:e2:ff:7a:80:0c:f4:42:14:e1:7d:b6:3f:8c:2c:1a:
86:cb:a2:7f:be:d6:1f:9a:40:c3:ac:4b:fc:c6:72:ba:09:eb:
a2:6f:bb:cd:73:7d:78:e6:15:89:66:0a:c7:83:43:44:87:d2:
9a:7a:01:ff:0b:15:ef:a6:ae:02:36:18:33:67:a4:9d:d9:85:
0c:6a:76:bb:46:84:44:54:fb:85:2b:91:62:78:fb:c4:c0:a7:
24:c2:7f:7d:d6:7b:23:b8:60:97:e7:3e:10:26:d7:94:8b:58:
70:9f:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:33 2026 by rpki-client