
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134352e302f32342d3234203d3e20383132.roa
File: 3139392e3233352e3134352e302f32342d3234203d3e20383132.roa (raw, json)
Hash identifier: bLkkkmxIIgzYw0lhGWC06y690smEN/ANw1Cum40/yzI=
Subject key identifier: 96:04:67:FE:3B:7A:32:3B:98:8C:20:30:86:F0:30:9A:39:CB:15:D2
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 6A9FEC5515E3D87C2B192CA9D4F04D09A82BBA39
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134352e302f32342d3234203d3e20383132.roa
Signing time: Wed 23 Sep 2026 07:25:24 +0000
ROA not before: Wed 23 Sep 2026 07:20:24 +0000
ROA not after: Wed 22 Sep 2027 07:25:24 +0000
asID: 812
IP address blocks: 199.235.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 09:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:9f:ec:55:15:e3:d8:7c:2b:19:2c:a9:d4:f0:4d:09:a8:2b:ba:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Sep 23 07:20:24 2026 GMT
Not After : Sep 22 07:25:24 2027 GMT
Subject: CN=960467FE3B7A323B988C203086F0309A39CB15D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:1e:00:38:a0:ac:a8:b0:73:e2:06:33:25:
78:81:66:fa:84:3b:0a:27:72:b4:6f:8c:b7:9c:7a:
30:85:33:0a:2c:4e:b9:a2:ad:73:b0:53:2d:ef:7f:
43:be:de:10:95:0f:09:e4:fb:09:d6:64:45:22:2f:
18:b1:ed:2b:ee:07:67:77:d9:a6:6c:56:91:ac:ca:
48:4d:99:f3:36:b4:6e:37:77:ad:90:37:26:8d:bb:
fc:65:8f:cd:bb:d7:dc:06:63:03:b9:fe:80:a2:7c:
a7:a0:02:c0:4f:a7:e7:d0:a8:9f:5f:c0:b6:c6:1c:
12:b6:95:da:e7:46:99:2b:77:45:b4:de:28:92:01:
fb:1d:45:74:e2:56:8f:72:49:df:5d:e6:9a:7f:45:
40:06:28:ec:17:d8:9c:c3:e4:c0:e2:53:a5:ae:0b:
30:b0:b6:ea:c8:6e:86:29:5c:69:e0:20:33:94:18:
2b:ba:07:95:3b:ca:65:d3:4e:f3:9c:fa:e2:c7:94:
97:82:b5:fa:1c:a2:ac:93:87:4b:8f:bf:39:61:58:
9f:a5:58:1d:a2:74:17:bd:1a:18:df:96:7a:a1:aa:
3b:8d:a1:17:0a:bc:b6:d4:64:86:47:df:76:9b:73:
19:e7:eb:6b:1c:95:ef:65:0a:8e:9c:e9:6a:fb:7b:
6f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:04:67:FE:3B:7A:32:3B:98:8C:20:30:86:F0:30:9A:39:CB:15:D2
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e3134352e302f32342d3234203d3e20383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.145.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:d9:95:d3:03:ab:45:2b:6d:54:52:05:1a:80:54:77:f5:31:
68:10:09:78:eb:c4:32:0c:35:72:e1:00:d0:86:69:d6:92:3f:
df:3a:45:0b:3e:6d:0d:06:b0:3f:96:70:27:cd:00:aa:16:c7:
57:d2:a2:7f:a1:c8:98:d3:55:08:3a:2e:f8:a3:4b:21:85:31:
1e:11:b6:77:d9:fe:9f:76:41:f2:eb:0d:f5:a3:b3:47:7b:8b:
ec:f3:f6:e3:76:49:8b:a4:6f:77:31:82:11:c7:72:5a:59:88:
dd:c5:f5:29:c0:3d:43:e1:90:9f:73:25:ac:45:85:9b:31:46:
70:19:e5:87:25:ab:16:2f:16:f4:30:d7:7e:e9:92:c3:45:a8:
8a:6e:d1:23:17:7c:5c:30:ca:26:a4:8f:29:34:b4:75:e1:24:
85:a3:c4:6f:27:bb:20:86:30:74:53:48:8d:9e:19:08:e2:9c:
37:ac:b9:ff:fa:84:b8:7a:81:ff:0f:bd:78:2a:00:7e:45:71:
a8:ae:d8:b1:02:c4:98:eb:f9:9b:bf:19:b9:0e:d8:32:cd:4e:
2d:5d:ac:e6:98:36:76:ed:1f:77:41:b7:dd:47:b9:2f:7c:a3:
95:13:1c:69:54:7e:82:76:23:f3:c4:65:e2:5d:4a:ac:9d:15:
28:0a:56:eb
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUap/sVRXj2HwrGSyp1PBNCagrujkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDI3YjNkMTc5YzQzYmRmYWIwMGM4ZjNkMjAyZWZjOGFm
ZDBhMWE2NzNkMmRmMzMzNGUwHhcNMjYwOTIzMDcyMDI0WhcNMjcwOTIyMDcyNTI0
WjAzMTEwLwYDVQQDEyg5NjA0NjdGRTNCN0EzMjNCOTg4QzIwMzA4NkYwMzA5QTM5
Q0IxNUQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEweADigrKiw
c+IGMyV4gWb6hDsKJ3K0b4y3nHowhTMKLE65oq1zsFMt739Dvt4QlQ8J5PsJ1mRF
Ii8Yse0r7gdnd9mmbFaRrMpITZnzNrRuN3etkDcmjbv8ZY/Nu9fcBmMDuf6Aonyn
oALAT6fn0KifX8C2xhwStpXa50aZK3dFtN4okgH7HUV04laPcknfXeaaf0VABijs
F9icw+TA4lOlrgswsLbqyG6GKVxp4CAzlBgrugeVO8pl007znPrix5SXgrX6HKKs
k4dLj785YVifpVgdonQXvRoY35Z6oao7jaEXCry21GSGR992m3MZ5+trHJXvZQqO
nOlq+3tvqQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJYEZ/47ejI7mIwgMIbwMJo5
yxXSMB8GA1UdIwQYMBaAFE4JxObRSEDoTxZM+jTYS1hwUbzqMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2JhYjVkNTkyODJiYjRiMmViZmVkOWE3YTMwMjMxOTU1LzAv
NEUwOUM0RTZEMTQ4NDBFODRGMTY0Q0ZBMzREODRCNTg3MDUxQkNFQS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzZlZDRjYzU0LWY3ZjYtNDhlMS05ZTQ4LWY3MTQ0OWU0OWRjOC9kMjdi
M2QxNzljNDNiZGZhYjAwYzhmM2QyMDJlZmM4YWZkMGExYTY3M2QyZGYzMzM0ZS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9iYWI1ZDU5MjgyYmI0YjJlYmZlZDlh
N2EzMDIzMTk1NS8wLzMxMzkzOTJlMzIzMzM1MmUzMTM0MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH65EwDQYJKoZIhvcNAQELBQAD
ggEBAOHZldMDq0UrbVRSBRqAVHf1MWgQCXjrxDIMNXLhANCGadaSP986RQs+bQ0G
sD+WcCfNAKoWx1fSon+hyJjTVQg6LvijSyGFMR4RtnfZ/p92QfLrDfWjs0d7i+zz
9uN2SYukb3cxghHHclpZiN3F9SnAPUPhkJ9zJaxFhZsxRnAZ5YclqxYvFvQw137p
ksNFqIpu0SMXfFwwyiakjyk0tHXhJIWjxG8nuyCGMHRTSI2eGQjinDesuf/6hLh6
gf8PvXgqAH5Fcaiu2LECxJjr+Zu/GbkO2DLNTi1drOaYNnbtH3dBt91HuS98o5UT
HGlUfoJ2I/PEZeJdSqydFSgKVus=
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:40 2026 by rpki-client