
$ rpki-client -vvf rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa
File: 3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa (raw, json)
Hash identifier: LEjTWe6fpK8sHggE9hBQ7iuKgwnA3HoC/5f5zkwhZbE=
Subject key identifier: 7F:22:4D:3E:9B:33:21:5F:4D:1A:25:7B:F3:B1:68:08:76:A3:96:9B
Certificate issuer: /CN=A91301EE0000/serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Certificate serial: 6269B61ABB2E83093EC4B7DE913AC309BEFACC3E
Authority key identifier: 3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject info access: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa
Signing time: Sat 25 Apr 2026 19:13:00 +0000
ROA not before: Sat 25 Apr 2026 19:08:00 +0000
ROA not after: Sat 24 Apr 2027 19:13:00 +0000
asID: 401682
IP address blocks: 165.99.124.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:20:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:69:b6:1a:bb:2e:83:09:3e:c4:b7:de:91:3a:c3:09:be:fa:cc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91301EE0000, serialNumber=3F67057F77B86603B6C216FF577CB3146053E4E5
Validity
Not Before: Apr 25 19:08:00 2026 GMT
Not After : Apr 24 19:13:00 2027 GMT
Subject: CN=7F224D3E9B33215F4D1A257BF3B1680876A3969B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:05:f8:85:bb:97:eb:1d:95:78:68:02:b2:f0:
b6:1a:fc:7c:36:3e:62:4c:5d:3f:eb:28:38:6a:40:
6c:32:86:f6:21:1e:fc:5d:0e:98:b6:93:b4:1b:6b:
91:d9:3a:8b:7a:de:56:36:61:ae:a4:20:fd:91:93:
5b:d6:05:09:b9:10:c6:dc:60:2c:0e:78:a5:66:e0:
8d:c0:6c:79:22:22:03:44:53:7d:74:18:99:a1:6f:
bc:ca:8d:3e:76:06:72:e9:55:49:b5:5f:d4:20:49:
0d:76:9c:1f:30:a2:b7:9e:e2:fd:4d:12:69:7c:68:
0d:e2:2e:77:e3:d4:f0:c2:da:82:23:b8:62:09:3c:
32:1e:52:82:23:ea:cf:65:88:4e:00:c5:03:ea:d1:
86:3f:c5:f8:ec:dd:d5:3a:3b:22:7e:6b:b8:dd:b3:
ff:0f:df:6d:ee:05:44:d4:57:fc:69:08:eb:68:e9:
24:b4:f2:74:92:a7:93:88:e3:74:83:a9:e2:cb:4e:
e3:fa:8d:5b:5b:d9:7b:95:f9:e1:f3:8e:46:8a:df:
b2:a2:3f:6b:c6:86:75:3f:c5:7d:4f:50:83:84:01:
93:c3:00:3f:fd:fb:bb:98:88:d5:a1:89:7b:9f:27:
92:02:79:0e:d0:61:80:44:b3:f6:66:12:79:28:f2:
e4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:22:4D:3E:9B:33:21:5F:4D:1A:25:7B:F3:B1:68:08:76:A3:96:9B
X509v3 Authority Key Identifier:
keyid:3F:67:05:7F:77:B8:66:03:B6:C2:16:FF:57:7C:B3:14:60:53:E4:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3F67057F77B86603B6C216FF577CB3146053E4E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P2cFf3e4ZgO2whb_V3yzFGBT5OU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/c5da413e44384d7b87e0a74b42ca1867/0/3136352e39392e3132342e302f32332d3234203d3e20343031363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.99.124.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:6c:2a:77:34:b7:2e:c3:a1:3a:76:10:42:99:fc:a5:64:dc:
fc:71:02:d9:d2:fd:c2:53:35:d5:c3:1e:24:c7:1c:44:33:63:
42:90:20:57:61:70:f2:5c:da:ef:04:69:e5:44:c9:41:4d:10:
a9:9d:dc:06:f7:cb:14:86:2f:fb:21:55:f3:9f:4a:64:c2:3f:
17:bc:b6:20:60:36:90:22:71:2d:a8:29:b4:33:09:74:15:c2:
0b:56:fb:4f:c3:27:6c:1f:98:4c:cf:31:a1:a7:f7:7b:4e:a9:
b3:c4:01:ad:46:c3:b5:bf:c6:99:fe:80:47:a0:da:7f:53:d5:
1c:ba:51:4d:55:85:65:7b:aa:9c:d8:e4:39:76:b8:65:08:71:
b3:4b:2a:f9:1d:ea:28:d5:c4:db:0a:cc:02:57:5e:40:4a:e1:
bc:d9:da:d3:3b:98:c3:43:9b:64:9c:8a:a2:b3:d5:73:3f:91:
d9:15:13:c3:e8:1c:fe:90:2e:2d:fd:d3:a6:6f:25:e2:65:5a:
3d:f3:e4:0b:8c:58:28:bf:cc:ea:da:32:2f:5b:31:8a:d6:9a:
33:f7:67:d1:53:8c:5a:d9:44:c8:3f:98:4e:a2:e2:c3:78:c0:
31:85:61:7b:21:2b:3f:7a:57:9e:5a:42:a3:76:f5:1b:bf:23:
f1:f1:ee:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:19 2026 by rpki-client