
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3231362e302f32312d3234203d3e20383334.roa
File: 3139382e31352e3231362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier: qCahl3hShoAA5XsqbQAnKH8QrDsF8IK07dG+jBE/5ik=
Subject key identifier: 11:FD:69:48:30:1F:61:95:1C:11:5E:12:25:E6:84:12:5C:F0:52:B5
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 7E9D46269CFDD082A62AFCF4B1DA66744C959514
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3231362e302f32312d3234203d3e20383334.roa
Signing time: Fri 20 Mar 2026 06:35:54 +0000
ROA not before: Fri 20 Mar 2026 06:30:54 +0000
ROA not after: Fri 19 Mar 2027 06:35:54 +0000
asID: 834
IP address blocks: 198.15.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Mar 2026 15:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:9d:46:26:9c:fd:d0:82:a6:2a:fc:f4:b1:da:66:74:4c:95:95:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Mar 20 06:30:54 2026 GMT
Not After : Mar 19 06:35:54 2027 GMT
Subject: CN=11FD6948301F61951C115E1225E684125CF052B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:44:24:50:c8:87:d3:07:62:1d:17:38:0a:bd:
2f:46:0f:cb:17:04:3b:0d:b1:c9:98:03:f0:68:48:
98:55:a2:b5:3a:e3:ea:aa:cb:b6:cb:fd:3f:46:be:
6c:71:a6:b2:b5:31:b8:e8:87:a7:89:b3:5e:39:c1:
39:13:df:f5:12:9e:90:50:fd:46:a0:07:55:71:2c:
93:cc:d5:7f:74:85:3b:82:d6:c2:60:d8:07:f1:f6:
85:18:e1:4b:8f:2b:53:e0:df:ac:32:e1:3d:10:9f:
27:1b:d6:ca:9d:55:a2:82:c5:1a:e1:8c:3c:c3:24:
c0:e7:ae:51:f1:d8:41:90:f7:75:46:e1:7e:99:81:
77:83:38:2f:1c:e1:dc:3d:28:fa:45:9e:cb:33:91:
36:8b:51:f1:84:82:98:d0:88:3b:7d:1c:7b:f2:82:
a6:8b:c4:d0:a4:89:91:04:b6:b0:4f:b9:95:b1:ce:
d7:2c:ac:bd:88:57:51:6a:1e:ad:f0:b5:76:8b:12:
eb:84:fe:54:bb:ac:25:b6:10:57:40:d9:b0:de:3f:
dd:db:57:f5:a9:63:57:79:b3:bd:ee:db:c9:ca:fd:
60:d7:0f:80:1c:0a:69:b9:05:21:c9:83:00:8d:c2:
19:3c:44:be:45:c8:38:8f:8b:a4:8c:2e:a8:71:fb:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FD:69:48:30:1F:61:95:1C:11:5E:12:25:E6:84:12:5C:F0:52:B5
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3231362e302f32312d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.15.216.0/21
Signature Algorithm: sha256WithRSAEncryption
a7:a2:ea:4f:35:af:88:a1:02:99:b8:b2:10:98:0d:54:a1:0c:
c7:36:16:2e:fa:5d:34:df:4e:70:1b:d2:32:a6:ef:b5:cb:a7:
e9:df:9c:65:b9:da:6d:7a:f9:55:99:ea:f0:1a:9b:94:8d:c5:
16:64:74:f3:7e:85:54:5b:c1:e3:b2:e6:9c:cd:5c:7f:3e:d9:
ac:3a:8c:4c:0b:bd:f9:71:e6:8e:e9:0d:4e:3e:45:e8:5d:f9:
60:bd:aa:8b:d8:36:24:63:25:db:10:db:02:86:f3:2a:38:52:
c3:8e:e8:7f:e7:9b:72:06:c5:32:b1:a6:55:5f:0b:8a:b1:67:
05:3d:7f:36:e2:78:99:0f:40:11:72:8c:91:da:bb:e4:fa:26:
dc:5a:d6:1d:76:af:ba:7e:8b:17:03:d3:4d:d7:9c:73:54:f9:
6d:93:cb:94:07:c1:51:5e:e5:41:5d:73:ef:c2:74:5f:45:4d:
63:a8:bc:16:0b:f3:ed:ab:84:7b:46:9c:56:1b:f5:4c:d8:fc:
47:2c:29:76:83:a7:b1:6c:5f:db:ff:42:29:0c:58:0e:28:15:
a7:3a:07:f4:1a:ce:46:22:58:f8:4c:3b:2f:ec:6f:d5:b6:f0:
a2:23:a0:ee:d1:f6:a0:7a:81:5d:9c:d6:78:31:08:f0:34:52:
30:6b:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:48:26 2026 by rpki-client