
$ rpki-client -vvvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e20343032323635.roa
File: 39312e3233392e3134392e302f32342d3234203d3e20343032323635.roa (raw, json)
Hash identifier: qvqNN0TqsrJFSKuuFBxhjFt7etxTyboBdEknvFK3l3k=
Subject key identifier: 68:23:99:13:F4:B0:A5:7D:33:20:C0:BC:9E:85:95:B5:4E:46:3F:10
Certificate issuer: /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial: 49FD23757ABED217D4E206B9A1B3D6D81CD0A99D
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e20343032323635.roa
Signing time: Wed 16 Sep 2026 14:10:39 +0000
ROA not before: Wed 16 Sep 2026 14:05:39 +0000
ROA not after: Wed 15 Sep 2027 14:10:39 +0000
asID: 402265
IP address blocks: 91.239.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 13:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:fd:23:75:7a:be:d2:17:d4:e2:06:b9:a1:b3:d6:d8:1c:d0:a9:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Validity
Not Before: Sep 16 14:05:39 2026 GMT
Not After : Sep 15 14:10:39 2027 GMT
Subject: CN=68239913F4B0A57D3320C0BC9E8595B54E463F10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:f5:a2:c8:03:eb:69:fc:74:20:9e:40:1f:
b9:d3:59:12:9e:62:19:1f:fe:e4:0b:2e:f3:6e:fc:
5b:a8:10:8b:b5:22:c9:81:11:6b:c9:48:db:6c:54:
bb:a4:23:e8:9d:05:d9:6b:1a:e3:0e:95:2d:c4:c1:
85:c9:ad:a7:11:a1:95:4a:35:92:5c:77:d1:88:3e:
09:85:4c:1d:0c:1a:de:54:7a:b6:52:b1:65:6d:a9:
b4:6a:93:07:82:a4:e1:49:aa:65:75:0d:67:e0:b3:
2e:4b:49:66:5c:2a:e6:f8:91:45:ea:c3:1e:34:c6:
ca:f4:c4:66:d9:d3:16:84:9c:9a:0f:c9:e7:32:bc:
f6:19:80:d6:41:ad:95:fe:88:ee:bb:f8:d0:43:3c:
da:38:1f:ac:35:87:d1:91:4a:df:63:f6:0c:e1:4d:
de:60:0d:c3:ad:4d:56:3e:97:02:84:da:02:b6:cf:
fb:ab:ec:9f:7e:49:d5:59:fd:47:65:38:22:fc:33:
9e:56:15:24:ad:3d:88:f8:6f:2d:d7:58:e0:da:71:
27:2c:8a:57:2c:fe:b2:e4:ce:5c:4f:90:00:4f:e6:
41:93:43:81:94:f1:53:16:23:7e:15:62:24:cf:63:
4c:9c:c6:eb:43:e5:35:72:7d:19:8e:9c:e8:ef:3b:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:99:13:F4:B0:A5:7D:33:20:C0:BC:9E:85:95:B5:4E:46:3F:10
X509v3 Authority Key Identifier:
keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/39312e3233392e3134392e302f32342d3234203d3e20343032323635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.149.0/24
Signature Algorithm: sha256WithRSAEncryption
49:9d:c3:47:6e:7f:e0:c4:2a:85:17:db:29:2b:e1:b3:75:03:
bc:4a:88:8f:da:df:75:10:7b:d4:06:c6:8c:66:e3:7d:3f:cf:
9a:44:70:ef:18:af:c2:db:dd:71:21:bc:7b:ac:27:c8:c4:53:
da:56:dd:63:72:9d:aa:ee:3e:5d:af:67:ea:cf:59:5f:b1:f2:
9b:a3:1a:6c:09:6f:47:15:22:70:2a:1a:7f:6f:63:cf:65:b8:
61:9f:ca:ed:18:2d:fb:6c:24:85:b5:92:a2:75:48:b0:23:d4:
8b:79:fa:56:9c:88:f7:d4:57:61:40:c8:d1:28:d5:3e:f6:22:
fb:1a:6e:47:da:68:11:a3:77:04:d1:3e:d1:41:7e:bb:68:7b:
f4:58:67:5a:df:ad:80:2b:93:79:55:3c:bd:40:d4:d7:3c:eb:
1b:f7:df:79:94:29:d0:a9:50:7f:f9:43:ee:54:e4:93:b7:c1:
f2:90:87:52:dc:6b:26:64:0f:a8:9e:b0:ce:51:d6:67:4f:f7:
6c:a1:70:90:26:2e:d0:2b:d8:92:7d:98:38:7c:c1:86:4a:18:
25:49:61:43:30:b9:93:bf:88:37:50:b5:60:a6:ed:49:9a:5f:
ac:2a:83:3f:aa:7e:d8:05:4f:e5:99:12:92:ab:6d:26:15:cb:
5c:1a:c5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:10:33 2026 by rpki-client