
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e332e302f32342d3234203d3e20343031333632.roa
File: 3139392e3233352e332e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier: gCkHIExcfMe8wggp8CUD5DI6SLXJe+JkXGvP7WUOLzs=
Subject key identifier: C0:CB:8F:60:11:97:B7:7B:C8:3C:FA:21:1A:FB:34:38:94:0A:47:BE
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 3D5C9A6C9F046236042AAEFDEF34DEA9C16B0BD5
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e332e302f32342d3234203d3e20343031333632.roa
Signing time: Wed 23 Sep 2026 07:25:24 +0000
ROA not before: Wed 23 Sep 2026 07:20:24 +0000
ROA not after: Wed 22 Sep 2027 07:25:24 +0000
asID: 401362
IP address blocks: 199.235.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 09:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5c:9a:6c:9f:04:62:36:04:2a:ae:fd:ef:34:de:a9:c1:6b:0b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Sep 23 07:20:24 2026 GMT
Not After : Sep 22 07:25:24 2027 GMT
Subject: CN=C0CB8F601197B77BC83CFA211AFB3438940A47BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:7d:01:16:78:aa:bd:e4:4c:35:03:f4:c3:
0e:5e:4e:fa:e3:9d:64:d5:f5:5e:ba:67:62:cc:a4:
cb:2e:80:1d:b8:26:bf:3f:94:b8:fd:ec:b9:bf:5f:
10:c5:a2:05:7f:66:a3:6b:00:18:55:48:87:d2:ff:
58:27:33:54:a1:88:87:7c:eb:96:fa:4d:a6:55:11:
3d:ac:3b:cf:25:d2:5d:a7:28:98:46:2d:60:30:c3:
26:9f:08:0e:1c:78:05:01:47:5c:14:e3:95:31:29:
bc:e3:f1:44:b7:b2:b9:8a:fd:ae:b5:b1:b2:22:95:
ca:17:c0:68:ea:50:e9:cf:a5:82:15:c6:1f:33:b8:
46:72:18:9f:f4:82:58:86:5f:bc:dd:85:9f:c2:f2:
64:54:fa:f4:24:c5:f8:59:bb:e4:65:29:49:87:62:
84:2a:d7:d1:ba:c9:fc:7f:56:c4:ea:73:4d:a7:e2:
2f:b7:a6:4d:a1:25:72:c0:dc:d1:17:87:b8:69:41:
bb:bb:7c:3a:65:83:05:d7:93:6c:bb:66:28:e3:9c:
0d:65:d2:33:8b:e7:20:6e:ef:a1:32:b0:5a:62:da:
56:bb:95:a7:61:bb:cc:1a:48:78:3c:82:9f:6b:cd:
cf:62:a9:ba:67:86:a9:8a:34:0b:e2:fe:31:b5:30:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CB:8F:60:11:97:B7:7B:C8:3C:FA:21:1A:FB:34:38:94:0A:47:BE
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/3139392e3233352e332e302f32342d3234203d3e20343031333632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.3.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f4:4a:90:21:9d:03:11:d5:1e:40:2b:36:73:d0:53:47:b9:
97:29:dc:c8:dd:6c:ee:79:b2:ba:2c:5a:59:0b:29:0f:e8:91:
72:e3:58:8f:89:dd:db:45:10:2f:1e:e9:33:97:36:58:9e:69:
8b:aa:e5:74:ba:58:e9:fd:64:0f:17:43:a5:89:7c:b8:d4:fe:
16:e3:92:ce:2b:92:10:83:a4:f4:69:76:4e:1e:d4:ba:25:07:
05:f7:38:50:38:b4:be:4d:34:a8:4a:ff:67:bf:44:11:7b:8d:
6d:84:a4:6f:72:2f:20:31:ba:78:8a:62:df:71:cd:2e:04:02:
5d:8e:6c:49:2d:7e:10:b7:f3:0b:4c:48:c2:f8:77:63:ac:48:
7c:46:ff:46:2e:5a:9e:f1:fd:c2:71:d3:09:db:3e:69:7d:45:
8e:d6:3f:f1:be:5f:36:00:0a:61:7c:f6:87:15:c4:99:98:d6:
91:48:08:71:3b:9f:72:d5:3a:44:22:6c:0a:27:ea:0d:58:9c:
98:d1:82:f9:da:45:fb:dd:2d:56:4e:7a:ad:34:a4:5f:a9:6b:
79:63:4c:c3:d0:c8:4b:6e:01:c0:c4:4d:d9:7b:50:0b:61:93:
45:ca:24:7b:20:3b:e6:ff:7d:97:ac:68:88:2e:5c:1f:70:ca:
08:92:71:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:44:57 2026 by rpki-client