
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38302e302f32342d3234203d3e20333935383339.roa
File: 3139392e3131352e38302e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier: yOkGjdtbXtFSCG3BGkz63dfUr3o1+H2QhsNTNUDKrag=
Subject key identifier: CD:46:63:0D:60:3E:D2:29:2F:2E:45:02:0A:A0:D3:27:E6:DC:C8:67
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 6C3AC4FC13B0766E77A5179AB68880544AE358B9
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38302e302f32342d3234203d3e20333935383339.roa
Signing time: Wed 11 Nov 2026 21:22:31 +0000
ROA not before: Wed 11 Nov 2026 21:17:31 +0000
ROA not after: Wed 10 Nov 2027 21:22:31 +0000
asID: 395839
IP address blocks: 199.115.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 19:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:3a:c4:fc:13:b0:76:6e:77:a5:17:9a:b6:88:80:54:4a:e3:58:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Nov 11 21:17:31 2026 GMT
Not After : Nov 10 21:22:31 2027 GMT
Subject: CN=CD46630D603ED2292F2E45020AA0D327E6DCC867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:de:09:23:6b:2c:0d:5f:22:e1:01:89:a7:e6:
aa:29:25:d1:1a:2e:48:bf:d9:fa:6e:5d:b0:f7:19:
66:9a:23:63:bf:fa:3a:4c:a6:26:cf:6d:2b:2e:1f:
05:04:67:31:7c:ae:90:44:f2:36:d5:dc:76:48:dc:
a6:18:12:ca:40:8e:14:70:67:b2:d5:31:d2:bc:a3:
36:af:9b:d3:ac:9b:9f:9e:db:3f:d9:36:86:eb:65:
ea:c9:93:14:91:e2:89:ce:01:8f:f3:c2:1a:61:41:
fb:0e:5b:12:8e:99:21:44:8d:23:76:a6:2e:f2:e5:
ea:d5:29:df:be:e5:2c:26:bf:56:2c:aa:27:10:24:
78:a7:a2:28:e6:44:73:a4:78:cb:2f:08:ee:ca:18:
d6:40:42:c0:fc:e8:d1:3a:60:aa:8d:db:7f:70:77:
04:7a:44:a7:15:e8:2d:c4:23:af:32:74:80:8f:df:
84:65:ed:a6:6a:44:36:64:91:34:05:90:0e:f3:23:
27:ad:84:d3:16:49:2a:46:89:82:f3:a2:14:39:e3:
e4:b4:e9:be:7e:13:00:1d:0c:60:4e:c4:bc:0d:bd:
fe:f2:62:85:01:62:a0:d7:a5:d5:0b:90:9b:72:c9:
b2:07:af:46:6a:a3:12:cc:c4:e0:d2:4a:6e:b8:62:
d2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:63:0D:60:3E:D2:29:2F:2E:45:02:0A:A0:D3:27:E6:DC:C8:67
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38302e302f32342d3234203d3e20333935383339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.115.80.0/24
Signature Algorithm: sha256WithRSAEncryption
81:a0:25:d3:42:ea:d2:a9:6f:08:a5:20:3a:e9:aa:d5:f4:5e:
ca:d7:34:c6:a0:17:0c:c8:16:96:64:12:b1:f3:42:3f:87:5d:
c6:36:c3:3d:f7:d6:56:f9:ff:e4:e0:c2:06:ab:4d:bc:f1:c6:
78:fe:6c:f0:e5:a8:1b:de:84:22:a1:76:b7:d9:b8:2c:3a:1b:
f4:2f:5d:f2:6d:fd:2c:67:d2:50:11:6e:fb:79:f9:63:5d:76:
44:df:e5:3b:8e:5d:32:64:cb:e1:f1:63:cb:8f:c8:8d:c5:29:
0f:d1:db:83:d4:8b:2c:ed:01:17:5d:ea:85:8e:6a:96:17:ab:
1a:10:77:03:c5:05:fa:9c:2a:3e:d9:ef:4e:66:b6:be:bc:22:
10:09:7e:e5:62:79:fc:a0:79:77:8d:16:0d:5a:a6:3d:80:24:
c4:c8:77:b4:53:db:bf:0c:1b:05:42:13:ff:ff:d9:08:ac:fa:
f7:c7:8a:c2:2c:a5:fe:c0:49:3d:db:d4:48:82:35:ba:a2:85:
d1:78:be:5f:ec:fe:b8:d0:e4:79:45:d0:a9:5c:a5:c8:28:28:
f8:4d:64:eb:70:16:75:b7:8c:5b:7d:ed:21:08:b8:2d:b8:cd:
a9:65:a4:10:bd:e6:d4:71:96:8a:89:e7:5a:15:32:4a:bd:a3:
49:6d:14:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:43:24 2026 by rpki-client