
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa
File: 3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa (raw, json)
Hash identifier: UgNN7RVptJK2Vi4Uv7rSxJRFLN1aWjJGSR1a3o22BeM=
Subject key identifier: A8:F4:00:F8:A2:D7:B5:DA:FB:3A:84:33:4F:64:07:81:42:AF:B1:D4
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 22783A7B4CC6F085D09172022127658081FCDC60
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa
Signing time: Wed 23 Sep 2026 07:38:54 +0000
ROA not before: Wed 23 Sep 2026 07:33:54 +0000
ROA not after: Wed 22 Sep 2027 07:38:54 +0000
asID: 33105
IP address blocks: 199.235.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 02:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:78:3a:7b:4c:c6:f0:85:d0:91:72:02:21:27:65:80:81:fc:dc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Sep 23 07:33:54 2026 GMT
Not After : Sep 22 07:38:54 2027 GMT
Subject: CN=A8F400F8A2D7B5DAFB3A84334F64078142AFB1D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:a2:3b:36:07:9c:bf:8c:8a:2b:6d:d1:5a:77:
4c:18:c3:f3:31:61:91:33:a8:63:e4:19:e0:3b:78:
4a:9b:04:a9:73:1b:3a:55:97:62:2f:e9:77:bb:07:
d8:ea:5e:db:d1:a3:4b:a1:7a:42:9e:09:e7:0c:d2:
1f:70:4e:9b:23:81:c8:c7:08:dc:5d:80:79:f0:ef:
c8:b9:ee:0f:65:75:32:4f:79:e3:e6:20:4c:e4:40:
d5:77:c2:f4:50:c2:20:3e:e6:46:3a:5b:10:3a:37:
c6:2e:24:29:d9:0e:d4:50:cc:0d:9d:46:2a:bf:97:
06:ea:1b:f3:0c:71:45:de:51:34:65:b5:42:96:ad:
b4:cf:ff:21:ee:72:76:be:44:df:d7:af:05:96:67:
37:9b:c1:ff:6f:b5:05:6b:06:73:12:e3:df:38:98:
d0:51:b7:e2:4b:63:a0:d8:70:30:00:d6:e5:c0:4b:
d4:fe:60:aa:1d:c0:d9:19:5e:03:a5:24:7f:2f:b9:
6c:2f:98:ca:33:c2:d8:1c:4a:9d:40:73:7e:e5:32:
ec:cd:cb:b7:9e:4a:9b:fe:1b:1a:7a:53:17:41:76:
dc:b6:67:77:fe:05:88:11:1a:90:7c:89:bf:a3:25:
38:e3:49:c7:54:47:eb:05:2a:63:56:0d:29:2d:75:
ee:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:00:F8:A2:D7:B5:DA:FB:3A:84:33:4F:64:07:81:42:AF:B1:D4
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3132302e302f32342d3234203d3e203333313035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.120.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2e:e3:24:fe:86:15:35:82:6d:5d:e6:3b:73:d1:a4:45:2d:
fa:7f:58:15:dd:b5:56:3e:f6:30:c5:10:91:05:03:28:34:ee:
26:0a:4f:04:1e:c4:c9:33:eb:61:c9:75:09:39:f4:b7:3f:b3:
b3:43:f5:67:73:de:0e:a5:74:e5:ea:36:25:86:db:45:fb:fb:
45:29:09:fe:2f:93:04:9d:85:e0:2a:13:b0:50:26:ac:76:f3:
8a:1c:59:4a:8a:8c:a5:e2:cd:56:8e:6c:8b:c6:1c:09:45:aa:
4c:d3:1a:4f:76:cb:e4:0e:2e:6c:81:be:ba:83:ce:bc:d1:5b:
88:9b:a9:c7:4f:31:a9:a7:4b:3b:ae:6e:02:0a:7a:57:b5:de:
9c:70:61:5a:b2:ea:73:5a:cd:f5:f6:52:b5:94:81:56:9b:63:
67:51:b2:71:20:69:66:02:31:d8:6b:df:1c:1a:0f:81:50:aa:
99:6e:90:2b:77:5c:f8:8a:1c:80:f6:14:08:6c:8a:ac:f1:a0:
1e:7f:a4:29:79:f9:b0:a0:13:63:6a:28:2f:0d:7f:9a:be:89:
f3:54:ec:96:5f:b2:a6:fc:43:27:a1:d7:58:ff:6c:56:99:9a:
b4:72:c1:1c:90:05:50:24:db:08:97:f9:f3:e0:7c:ad:a1:a9:
35:d0:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:09:59 2026 by rpki-client