
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/3139382e38342e302e302f32322d3234203d3e20343030393531.roa
File: 3139382e38342e302e302f32322d3234203d3e20343030393531.roa (raw, json)
Hash identifier: ML4Un+iGTjZXmzbhS3Asq9Z28z0XbU2m5UuOIKb4gjU=
Subject key identifier: 4F:ED:79:E9:9F:20:5D:A0:19:63:11:11:0A:E6:08:BA:25:50:A5:6D
Certificate issuer: /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial: 5D43F678AA0626125F1DC45CCDB14CBA857F4E00
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/3139382e38342e302e302f32322d3234203d3e20343030393531.roa
Signing time: Tue 03 Nov 2026 09:15:20 +0000
ROA not before: Tue 03 Nov 2026 09:10:20 +0000
ROA not after: Tue 02 Nov 2027 09:15:20 +0000
asID: 400951
IP address blocks: 198.84.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 15 Nov 2026 21:48:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:43:f6:78:aa:06:26:12:5f:1d:c4:5c:cd:b1:4c:ba:85:7f:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Validity
Not Before: Nov 3 09:10:20 2026 GMT
Not After : Nov 2 09:15:20 2027 GMT
Subject: CN=4FED79E99F205DA0196311110AE608BA2550A56D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6c:5d:92:c2:92:81:f3:88:82:b6:aa:15:a0:
98:a9:89:6a:7c:0c:4d:5b:62:da:47:20:14:3d:cd:
b1:1b:db:e0:d6:ca:38:fe:fd:e1:7c:c0:9b:5b:53:
d0:1f:fa:33:d0:97:24:2b:b0:0e:75:38:6b:48:47:
ed:30:77:69:c9:0f:c4:b0:8d:80:79:ae:e3:ef:93:
9d:40:1a:bc:cf:ad:91:bd:df:3f:d7:5b:f3:8f:8a:
a7:b5:c2:11:12:7c:e1:3d:f5:9f:98:34:f7:32:77:
fa:4d:99:9d:7e:e9:3e:29:cc:57:7a:20:9c:2b:6b:
7b:c6:12:e5:32:57:18:4e:ee:97:78:ea:5f:05:19:
1d:36:bb:0c:ee:ee:db:80:02:da:c2:74:52:ed:13:
92:29:ab:0d:66:33:48:7d:ee:6c:c7:21:f0:a4:89:
67:89:3b:ac:e0:5e:c2:b2:57:4f:e3:43:70:c0:a8:
5a:82:4b:2b:25:6c:3d:30:1a:84:b6:aa:ab:0f:9c:
f9:81:75:49:8d:8c:6c:55:6d:a2:21:89:b5:fd:ee:
cd:68:e3:1f:2e:16:9e:83:51:7b:b2:08:35:e9:3c:
50:1f:98:78:5a:e1:7e:4c:ba:32:af:13:f0:74:43:
6a:f1:df:bb:9d:fa:1a:4d:a1:6c:89:88:b3:61:ee:
26:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:ED:79:E9:9F:20:5D:A0:19:63:11:11:0A:E6:08:BA:25:50:A5:6D
X509v3 Authority Key Identifier:
keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/3139382e38342e302e302f32322d3234203d3e20343030393531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.84.0.0/22
Signature Algorithm: sha256WithRSAEncryption
05:ac:7e:cf:88:7f:af:ef:f6:35:15:b4:46:76:8a:cf:c7:7c:
6f:e6:34:79:3a:1f:b4:ad:05:03:cf:81:da:d6:69:38:65:94:
37:94:d1:cc:c5:35:90:84:f7:85:bf:a2:7b:e8:bd:98:61:a3:
45:c9:42:af:b9:63:3c:7d:05:b7:c4:c6:f9:5c:f8:26:75:d8:
f6:4d:dc:3c:fd:70:c5:f8:a1:18:66:e5:21:82:b5:8c:8f:12:
42:cf:97:26:b1:c8:00:1d:ea:94:2e:18:c6:ae:1b:8c:f8:81:
62:d3:16:dc:97:87:79:ae:ac:36:5a:60:14:3c:0b:04:c8:cf:
79:ec:c6:5e:b4:ab:9c:62:55:69:29:31:9b:9c:41:19:fa:5b:
f1:c2:86:5b:30:85:bc:4b:d2:7e:cc:05:61:a7:bf:32:d0:9c:
4c:6a:51:2d:05:2a:ce:36:43:c1:fa:73:f0:e1:5f:5f:a9:f4:
65:d3:e3:e5:19:0c:ce:e5:d6:97:f2:6e:99:7d:d2:a7:5d:8b:
80:85:16:85:e4:35:70:32:1b:11:2f:1b:44:29:35:5a:e3:cb:
87:3b:da:28:5e:66:66:67:ee:cf:6c:1e:e2:74:a3:35:17:30:
8f:b8:47:4e:ad:8b:62:01:e7:70:5d:22:a1:e5:ba:76:2d:1e:
be:a9:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:14 2026 by rpki-client