
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323132323338.roa
File: 3139322e3230382e31342e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier: GcQwLfgQuJj1feh/juDP26p2J0IE8LqeyiNeONJ1Zv8=
Subject key identifier: 34:17:61:2A:6B:E7:26:B3:E1:F0:39:0E:3F:C8:42:DB:CB:CF:D2:C0
Certificate issuer: /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial: 67EE03A6399DD35A27B2947A6CF4163B88FBBFE3
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323132323338.roa
Signing time: Tue 23 Jun 2026 15:11:21 +0000
ROA not before: Tue 23 Jun 2026 15:06:21 +0000
ROA not after: Tue 22 Jun 2027 15:11:21 +0000
asID: 212238
IP address blocks: 192.208.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 14:29:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ee:03:a6:39:9d:d3:5a:27:b2:94:7a:6c:f4:16:3b:88:fb:bf:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Validity
Not Before: Jun 23 15:06:21 2026 GMT
Not After : Jun 22 15:11:21 2027 GMT
Subject: CN=3417612A6BE726B3E1F0390E3FC842DBCBCFD2C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:18:f8:fd:15:2d:c8:d6:8e:13:af:43:7e:
c5:4e:6e:23:c6:3c:17:04:a8:7d:bd:04:19:ea:ac:
4c:62:df:4e:ef:8f:e2:3f:4f:6f:50:a4:cd:8d:73:
b4:ef:63:7a:58:4b:2d:d3:05:4f:24:14:0a:ea:69:
a2:da:0d:d7:41:96:d5:18:98:cb:41:8b:9c:a6:24:
5b:7b:2e:f3:6a:6a:f7:66:f7:6b:ac:97:01:a7:51:
c8:53:33:69:d0:63:2f:89:d6:6d:d0:c2:04:cb:5c:
9f:33:75:e5:d0:db:b6:7d:e5:ad:8b:50:bc:77:2e:
1e:f4:55:86:c3:48:e4:53:3c:78:75:4b:e3:26:b8:
83:57:75:b4:86:ff:7f:5f:53:f0:37:57:7e:1b:b0:
b7:be:ac:3c:c9:f7:1b:06:f3:ea:41:3f:d5:85:c5:
6c:d6:f9:21:87:d4:4a:83:cc:9a:cd:0a:d1:78:ee:
ed:c1:9d:02:bf:69:16:57:2d:a5:a3:ec:10:db:3c:
61:06:51:d0:5e:81:30:1d:fc:b2:d1:90:a9:4e:fd:
2a:97:70:46:97:5b:05:9e:2a:72:80:31:ec:0f:a1:
a0:f4:e6:59:35:82:90:b0:2f:f9:41:d3:88:36:0e:
5a:f1:29:7a:95:fe:ce:80:7d:94:d0:54:d3:b7:d9:
1b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:61:2A:6B:E7:26:B3:E1:F0:39:0E:3F:C8:42:DB:CB:CF:D2:C0
X509v3 Authority Key Identifier:
keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31342e302f32342d3234203d3e20323132323338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.208.14.0/24
Signature Algorithm: sha256WithRSAEncryption
97:20:95:34:0f:ba:2f:90:df:9b:66:39:3d:56:99:2a:f1:27:
0f:0f:c9:3b:7e:83:af:a3:ed:bc:9c:86:79:27:7e:bb:cf:0c:
26:62:af:c6:0c:67:f5:2b:90:f7:4c:6c:fb:1d:48:77:9b:09:
6c:76:a8:3c:82:0c:f2:c3:f0:93:e2:33:f8:b6:b8:7c:f1:6f:
41:69:ca:5b:37:8b:cc:59:92:34:97:36:28:cb:04:f1:67:4f:
9d:38:ec:95:6f:1b:1b:c4:3a:0d:c7:4c:fe:fc:57:ac:f6:ed:
67:f2:f0:83:cb:f5:d9:f2:25:00:f7:5e:75:04:fa:de:00:e3:
cd:a2:59:03:db:2d:0e:54:da:10:ac:dc:51:0b:2a:67:51:cd:
75:11:29:66:03:0e:40:db:f7:b9:44:0c:41:d2:03:94:b4:df:
cd:c8:c7:79:c1:9b:2b:bc:38:f7:d0:7e:98:24:25:69:02:44:
2a:fd:df:53:9e:87:4e:f5:8b:f9:cf:4e:1a:1a:65:32:b8:5a:
59:5d:e1:b9:07:97:eb:07:96:2f:c7:4f:80:dc:8a:29:01:37:
84:54:f2:06:e7:86:7c:23:30:9a:c6:b0:3d:98:55:f1:f4:cc:
93:02:06:53:60:d7:4c:fb:36:bb:da:06:46:e2:f0:77:f1:12:
b3:45:0c:7f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZ+4Dpjmd01onspR6bPQWO4j7v+MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjYwNjIzMTUwNjIxWhcNMjcwNjIyMTUxMTIx
WjAzMTEwLwYDVQQDEygzNDE3NjEyQTZCRTcyNkIzRTFGMDM5MEUzRkM4NDJEQkNC
Q0ZEMkMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm94Y+P0VLcjW
jhOvQ37FTm4jxjwXBKh9vQQZ6qxMYt9O74/iP09vUKTNjXO072N6WEst0wVPJBQK
6mmi2g3XQZbVGJjLQYucpiRbey7zamr3ZvdrrJcBp1HIUzNp0GMvidZt0MIEy1yf
M3Xl0Nu2feWti1C8dy4e9FWGw0jkUzx4dUvjJriDV3W0hv9/X1PwN1d+G7C3vqw8
yfcbBvPqQT/VhcVs1vkhh9RKg8yazQrReO7twZ0Cv2kWVy2lo+wQ2zxhBlHQXoEw
Hfyy0ZCpTv0ql3BGl1sFnipygDHsD6Gg9OZZNYKQsC/5QdOINg5a8Sl6lf7OgH2U
0FTTt9kbRwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDQXYSpr5yaz4fA5Dj/IQtvL
z9LAMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTM0MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzIzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNAOMA0GCSqGSIb3DQEB
CwUAA4IBAQCXIJU0D7ovkN+bZjk9Vpkq8ScPD8k7foOvo+28nIZ5J367zwwmYq/G
DGf1K5D3TGz7HUh3mwlsdqg8ggzyw/CT4jP4trh88W9BacpbN4vMWZI0lzYoywTx
Z0+dOOyVbxsbxDoNx0z+/Fes9u1n8vCDy/XZ8iUA9151BPreAOPNolkD2y0OVNoQ
rNxRCypnUc11ESlmAw5A2/e5RAxB0gOUtN/NyMd5wZsrvDj30H6YJCVpAkQq/d9T
nodO9Yv5z04aGmUyuFpZXeG5B5frB5Yvx0+A3IopATeEVPIG54Z8IzCaxrA9mFXx
9MyTAgZTYNdM+za72gZG4vB38RKzRQx/
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:15 2026 by rpki-client