
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32312e302f32342d3234203d3e203239383032.roa
File: 3139322e302e32312e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier: fJRj4pyDoyd/6/9VrarOFN5Hib2homTjpjK506WvB/c=
Subject key identifier: BD:4F:FD:8B:1D:0D:04:A4:2B:38:20:7E:10:73:EA:37:07:CE:0C:FD
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 2FB31C03C3CE52BDF83AE032BE9FF8BBFA28A131
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32312e302f32342d3234203d3e203239383032.roa
Signing time: Mon 10 Nov 2025 08:59:42 +0000
ROA not before: Mon 10 Nov 2025 08:54:42 +0000
ROA not after: Mon 09 Nov 2026 08:59:42 +0000
asID: 29802
IP address blocks: 192.0.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 14:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b3:1c:03:c3:ce:52:bd:f8:3a:e0:32:be:9f:f8:bb:fa:28:a1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Nov 10 08:54:42 2025 GMT
Not After : Nov 9 08:59:42 2026 GMT
Subject: CN=BD4FFD8B1D0D04A42B38207E1073EA3707CE0CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:24:58:7e:76:93:1c:69:4f:e2:c8:75:c3:
48:40:bf:fc:40:cc:ee:78:df:5e:63:3f:68:37:99:
98:ff:a3:a2:c0:c6:a8:56:a7:fc:ca:66:e1:99:c7:
c0:0a:ce:dd:a2:13:9d:e9:fc:d1:e7:30:89:b1:d2:
e3:4e:a8:63:56:3e:af:9f:8c:b1:44:a4:7b:a5:bb:
98:ec:ec:9c:ec:93:21:b4:1a:8c:66:82:47:52:94:
85:cd:98:20:ce:4c:5e:e7:69:60:5f:fa:9d:4e:98:
e1:8d:d7:93:cf:dc:ad:69:a6:96:37:64:38:9c:71:
66:ab:ca:21:e0:6f:84:ee:f6:b2:00:17:95:23:1e:
59:a9:83:c7:08:15:93:90:f2:0c:3e:09:c8:c5:42:
d0:44:5d:0a:c4:d5:78:1e:c4:9c:a7:b2:08:3f:eb:
49:da:d6:02:86:c8:d5:9a:94:5d:de:47:9f:ab:b0:
31:f3:05:ee:92:5d:01:29:a4:a0:6c:4c:37:25:75:
9c:d6:cf:53:e6:50:a4:35:69:dc:64:ab:d4:77:24:
de:05:3a:da:09:7a:9a:9b:aa:da:d2:67:94:28:3b:
39:fe:92:e4:4d:82:c4:06:d4:0d:46:c2:a1:c2:26:
3f:f8:a4:01:fa:a6:ad:5d:11:46:96:ea:6c:1f:b7:
6e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:FD:8B:1D:0D:04:A4:2B:38:20:7E:10:73:EA:37:07:CE:0C:FD
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32312e302f32342d3234203d3e203239383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.21.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ed:1d:6c:de:0f:02:76:37:96:d5:a5:3e:9a:96:56:35:4d:
7c:cf:42:73:9c:e0:67:6b:49:1e:50:4a:d4:79:28:09:0b:b4:
72:e2:84:49:e1:b6:da:82:a0:19:6b:02:39:1e:fa:12:b2:7e:
05:99:ce:6e:ca:48:45:95:80:d4:73:da:64:19:8d:3e:c9:e0:
89:79:ad:4c:49:dd:e6:19:37:66:95:de:b6:54:c8:8e:ea:26:
ce:43:11:3c:e1:96:51:45:77:24:a7:b9:88:92:f2:8e:b4:07:
31:25:83:c0:dd:ef:c9:cb:35:c8:50:bb:53:0b:b8:bb:8d:d1:
61:f5:ef:5d:1b:e1:28:29:94:f9:9c:69:08:a2:5c:0f:a6:8a:
6d:c8:fe:3d:df:bf:9d:79:c4:7b:5e:67:ea:97:54:3d:2e:a1:
a6:f9:58:fe:af:fd:ab:ee:2e:25:72:c6:05:74:77:60:9f:85:
ed:4b:9d:97:c8:56:79:29:1f:58:7e:24:df:06:58:0b:cb:cc:
83:18:38:87:16:a9:ed:27:58:a1:cd:b5:11:a1:66:6b:cb:b7:
ae:61:59:e5:8b:f4:fb:a1:3e:b2:fe:5f:fe:eb:c2:a7:0b:2c:
e9:cd:b5:26:8c:80:2f:5e:98:25:c5:70:e1:6a:95:9e:cc:c8:
b6:ce:28:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 06:22:41 2025 by rpki-client