
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130342e302f32342d3234203d3e20323037333433.roa
File: 3139392e3233352e3130342e302f32342d3234203d3e20323037333433.roa (raw, json)
Hash identifier: y37CVlxC9BicdaGSPsmPtFkOHOa5pLIUVrNoQ0AWAF4=
Subject key identifier: D9:20:A6:FA:91:50:7A:E2:EE:AE:4D:C7:34:AB:F7:B8:E0:5E:E3:3F
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 17D345A5DE22B1F4B060CF10F81D57ED94C29329
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130342e302f32342d3234203d3e20323037333433.roa
Signing time: Wed 23 Sep 2026 07:33:43 +0000
ROA not before: Wed 23 Sep 2026 07:28:43 +0000
ROA not after: Wed 22 Sep 2027 07:33:43 +0000
asID: 207343
IP address blocks: 199.235.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 09:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:d3:45:a5:de:22:b1:f4:b0:60:cf:10:f8:1d:57:ed:94:c2:93:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Sep 23 07:28:43 2026 GMT
Not After : Sep 22 07:33:43 2027 GMT
Subject: CN=D920A6FA91507AE2EEAE4DC734ABF7B8E05EE33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:8f:fb:ae:fb:0a:fa:6a:aa:9e:5c:19:af:
22:5f:7e:f9:36:e6:13:d1:7b:3e:ff:bb:aa:cd:d3:
cd:65:61:46:fc:a2:84:a9:f5:c2:ba:6c:20:02:af:
45:4b:bf:dd:51:dd:d4:7e:a1:3e:1e:a1:c4:fb:59:
f3:4b:23:e3:b5:6e:c0:1b:76:65:50:45:c2:fd:d0:
84:ad:6a:2c:da:4f:ff:40:23:b0:60:8c:da:87:06:
27:b3:ff:7c:11:8c:22:2b:ea:0a:56:47:f9:5f:3e:
95:0d:7e:e8:e0:cd:ea:de:26:6e:95:39:4b:99:a1:
af:64:b4:1e:2b:7f:a8:cf:b5:a7:c1:5f:0e:81:d4:
92:ef:9a:96:e6:d3:23:42:b6:4d:2d:83:17:fa:9e:
08:8e:05:50:70:f6:b0:88:fd:0f:99:37:08:c7:83:
b5:33:47:a1:f8:63:83:76:40:85:59:e6:c6:0c:ba:
e0:03:2d:b4:92:e6:2c:42:2a:f1:35:13:f9:ba:23:
c5:1e:9e:b3:0d:49:5e:5f:eb:b9:74:5b:8b:ee:c5:
28:60:8d:75:56:7e:4f:92:75:bc:fe:66:42:7a:81:
7a:21:19:c4:bc:79:01:92:cc:75:08:c6:47:12:82:
0b:30:53:16:df:95:4d:b2:bc:4e:9d:93:29:ca:4f:
16:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:20:A6:FA:91:50:7A:E2:EE:AE:4D:C7:34:AB:F7:B8:E0:5E:E3:3F
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3130342e302f32342d3234203d3e20323037333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.104.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:67:ce:5d:77:08:de:7a:6c:da:ea:6b:c5:96:1e:e4:a1:74:
48:13:f7:97:29:c3:94:5a:53:01:51:b9:f6:4d:73:6e:a2:9e:
0b:a1:14:56:91:0c:07:3f:ce:d6:fa:1d:f0:d8:56:e1:1b:02:
b3:2c:00:10:5c:53:1a:66:92:df:99:e5:69:e3:55:51:1f:22:
6c:49:6d:b4:3e:d3:f7:26:65:23:ae:be:86:b5:c5:2c:7f:25:
bd:81:a7:51:5d:61:01:c0:d4:55:b9:bf:2d:14:bd:65:50:1e:
ff:cf:ce:67:49:e1:ec:22:cf:92:ef:ab:8f:36:e5:3d:b8:e9:
07:9b:56:ab:e8:e8:b7:64:97:62:75:dd:1b:a3:47:31:b9:ac:
be:02:13:c8:45:1c:db:56:6e:b7:8f:6a:8d:aa:9d:62:b2:e6:
4f:9f:a0:eb:26:e7:d2:cc:d4:1b:9d:a3:27:5f:62:02:7c:73:
e4:cc:82:94:1c:83:94:a6:46:a8:97:7a:ab:ab:47:8c:64:ea:
1b:25:0c:f7:47:af:66:a4:33:b4:93:d4:84:8d:6b:24:e0:8e:
bf:cd:8c:62:67:0d:99:c4:d7:4a:d7:87:94:83:38:42:2d:49:
2b:1f:6d:56:59:b4:8c:51:8e:9d:8a:a3:8b:7a:14:25:6e:45:
37:a5:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:17:15 2026 by rpki-client