
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e2039303039.roa
File: 3139342e33342e3133392e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier: B7D06ok4mbjpsqvN270tsb2IPFx/ssM2AA3P/GW8d40=
Subject key identifier: 20:E8:9F:2A:92:EC:CD:F2:23:AA:03:A1:11:61:B2:94:D6:52:EF:5B
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 6920A9CBE3394ACC53601BDFCC73254B936C787C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e2039303039.roa
Signing time: Thu 30 Apr 2026 13:16:46 +0000
ROA not before: Thu 30 Apr 2026 13:11:46 +0000
ROA not after: Thu 29 Apr 2027 13:16:46 +0000
asID: 9009
IP address blocks: 194.34.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 07:57:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:20:a9:cb:e3:39:4a:cc:53:60:1b:df:cc:73:25:4b:93:6c:78:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Apr 30 13:11:46 2026 GMT
Not After : Apr 29 13:16:46 2027 GMT
Subject: CN=20E89F2A92ECCDF223AA03A11161B294D652EF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:50:67:e5:4f:3a:af:3a:12:71:ea:71:3f:fa:
69:37:37:d7:26:17:60:8a:6f:04:e6:0c:a9:8a:db:
e8:87:4d:02:b8:c3:29:86:85:51:46:cd:5c:1b:7b:
92:1e:e1:60:dd:31:89:94:ad:95:cb:2a:20:a6:18:
96:01:56:ce:dc:ca:42:0b:79:d8:1d:56:8b:49:10:
b6:0f:f1:ac:70:68:f9:cc:67:c2:01:c3:9e:41:16:
ce:c1:4e:4c:11:b2:da:78:56:ce:8b:99:a1:19:1e:
3c:27:21:bf:42:fc:74:a0:fe:56:62:57:15:2f:cb:
83:d5:00:9a:c0:31:a8:c2:9e:1a:7a:f6:1e:fa:d6:
bc:38:4c:13:cb:a7:9a:9f:d3:aa:12:63:83:01:03:
0e:5a:1b:ed:7a:1c:3b:21:2d:5d:c6:81:70:10:be:
c2:6c:25:ba:5f:6c:ec:d1:34:bc:af:f3:a4:b7:c5:
59:f6:3f:39:ae:ee:11:8b:97:a9:d2:12:3f:97:26:
a3:1b:bf:60:41:07:53:7a:03:ec:67:dc:34:be:fe:
da:cb:d8:db:55:e6:40:f8:f1:5d:fe:fb:e5:4c:3e:
6c:cb:1c:78:8f:a4:29:49:a8:f7:f1:f5:d6:5e:fc:
ac:74:cb:e8:ae:19:9a:4b:57:40:90:e3:14:20:25:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E8:9F:2A:92:EC:CD:F2:23:AA:03:A1:11:61:B2:94:D6:52:EF:5B
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.139.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:07:d4:54:7b:b6:09:d7:5b:b8:09:07:9f:a1:a2:31:2e:fb:
c7:58:d3:0e:e8:da:9e:4c:06:ab:ce:c7:fd:c3:53:fa:34:5d:
a5:26:80:bb:94:f6:7f:a0:e6:e6:ad:0e:56:cb:c5:73:f2:5c:
68:76:72:bd:e8:be:8d:bd:f2:4a:19:6f:84:53:fb:b7:82:6d:
d0:94:d8:f3:43:7d:26:af:ac:17:9e:7b:83:13:b8:b3:8a:68:
aa:04:df:53:0a:30:d4:bd:4b:63:91:58:1b:f3:b3:9c:e7:e4:
84:ce:e1:84:41:6a:1a:88:3a:a2:34:7d:84:b8:34:56:c4:5e:
43:1f:fd:d9:c8:d2:70:cf:ce:98:43:44:ae:92:b5:f0:80:51:
89:06:e7:ce:76:eb:59:7c:95:63:58:96:33:bf:ec:f8:65:69:
b9:c3:3c:bf:66:a9:76:54:73:1d:20:c1:44:3d:8d:84:8d:4b:
96:f1:66:ba:4b:23:2a:9a:a8:44:9d:a0:5a:36:a6:93:e7:9d:
a2:cc:e0:25:8c:cf:f1:b2:d4:6e:76:47:79:77:6a:02:43:d7:
3a:66:49:f8:8d:e0:94:8d:25:7f:3c:83:45:a7:59:e1:0f:fd:
52:68:dd:de:40:19:e3:45:e4:68:ee:ae:35:fe:f7:50:34:76:
fc:04:42:41
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUaSCpy+M5SsxTYBvfzHMlS5NseHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNDMwMTMxMTQ2WhcNMjcwNDI5MTMxNjQ2
WjAzMTEwLwYDVQQDEygyMEU4OUYyQTkyRUNDREYyMjNBQTAzQTExMTYxQjI5NEQ2
NTJFRjVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VBn5U86rzoS
cepxP/ppNzfXJhdgim8E5gypitvoh00CuMMphoVRRs1cG3uSHuFg3TGJlK2Vyyog
phiWAVbO3MpCC3nYHVaLSRC2D/GscGj5zGfCAcOeQRbOwU5MEbLaeFbOi5mhGR48
JyG/Qvx0oP5WYlcVL8uD1QCawDGowp4aevYe+ta8OEwTy6ean9OqEmODAQMOWhvt
ehw7IS1dxoFwEL7CbCW6X2zs0TS8r/Okt8VZ9j85ru4Ri5ep0hI/lyajG79gQQdT
egPsZ9w0vv7ay9jbVeZA+PFd/vvlTD5syxx4j6QpSaj38fXWXvysdMvorhmaS1dA
kOMUICWk4QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCDonyqS7M3yI6oDoRFhspTW
Uu9bMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzNDJlMzMzNDJlMzEzMzM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzkzMDMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCIoswDQYJKoZIhvcNAQELBQAD
ggEBALUH1FR7tgnXW7gJB5+hojEu+8dY0w7o2p5MBqvOx/3DU/o0XaUmgLuU9n+g
5uatDlbLxXPyXGh2cr3ovo298koZb4RT+7eCbdCU2PNDfSavrBeee4MTuLOKaKoE
31MKMNS9S2ORWBvzs5zn5ITO4YRBahqIOqI0fYS4NFbEXkMf/dnI0nDPzphDRK6S
tfCAUYkG585261l8lWNYljO/7PhlabnDPL9mqXZUcx0gwUQ9jYSNS5bxZrpLIyqa
qESdoFo2ppPnnaLM4CWMz/Gy1G52R3l3agJD1zpmSfiN4JSNJX88g0WnWeEP/VJo
3d5AGeNF5GjurjX+91A0dvwEQkE=
-----END CERTIFICATE-----
Generated at Tue May 12 22:32:03 2026 by rpki-client