
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e31332e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: cf8NeM0e7Hvp/RsQY3tiKrzDoW55g/cmukPKcuYHktk=
Subject key identifier: 60:32:FC:BC:CC:1D:BC:D1:70:6B:5C:AA:25:0B:15:44:9F:81:60:79
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 2A2A13C64E7AEFA579F4D4C2A5DE3024C152991D
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
Signing time: Fri 14 Nov 2025 18:29:44 +0000
ROA not before: Fri 14 Nov 2025 18:24:44 +0000
ROA not after: Fri 13 Nov 2026 18:29:44 +0000
asID: 54004
IP address blocks: 144.168.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2a:13:c6:4e:7a:ef:a5:79:f4:d4:c2:a5:de:30:24:c1:52:99:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:44 2025 GMT
Not After : Nov 13 18:29:44 2026 GMT
Subject: CN=6032FCBCCC1DBCD1706B5CAA250B15449F816079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:f9:bf:3d:61:26:01:91:b9:0d:1f:10:0f:
ff:ce:1b:32:cf:60:c4:6a:e7:e3:ae:b8:3b:00:a0:
a9:56:c2:24:0c:a9:fa:a4:c4:4d:38:83:ad:81:db:
87:2a:42:53:98:ae:60:e2:d0:8d:86:bf:a2:89:16:
81:e1:9f:f3:4e:d7:e7:ed:57:29:bd:9c:e2:a2:3f:
15:54:7f:bd:4f:35:33:d3:fc:38:6f:02:0b:72:2d:
34:c1:fb:30:10:4d:29:6f:f3:1e:44:3e:e1:8a:2e:
8f:97:97:12:f4:03:e5:ca:05:d6:3f:a6:69:53:97:
ca:c7:19:49:f5:6d:c6:e2:a0:8d:b9:8a:6a:24:04:
15:9c:3a:25:54:a3:bd:8f:ac:dc:3f:e8:af:02:5e:
db:33:c6:21:8f:81:36:49:0e:a4:6a:96:d8:33:63:
5e:a7:fe:95:41:f6:ac:57:b2:49:af:1b:41:9d:d7:
9a:26:b8:36:b9:8b:e6:06:1a:b3:36:05:38:74:ce:
bf:6d:47:c5:62:fa:9d:3a:89:da:67:54:d5:18:d1:
3c:36:8f:a0:b2:b1:01:54:4c:76:63:c9:ae:f5:ea:
53:35:29:8c:a8:fa:22:0b:b2:02:84:ba:52:5b:06:
6b:c6:80:19:66:f7:58:67:fd:c4:20:1b:91:84:2c:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:32:FC:BC:CC:1D:BC:D1:70:6B:5C:AA:25:0B:15:44:9F:81:60:79
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.13.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ce:46:7f:f4:75:01:52:5a:ad:c1:41:93:54:95:53:0c:5a:
0a:30:11:d6:c2:e6:5e:c1:24:55:af:da:18:c1:dc:c8:45:0c:
99:e9:42:a3:51:f2:e2:b3:46:d1:e1:cc:3e:62:c7:72:f7:34:
0f:84:66:01:c8:e2:8e:0c:45:1f:0a:c2:e8:1c:0c:65:70:07:
cd:8b:36:c2:19:4a:c6:ec:0b:94:6f:ec:8e:90:a6:9e:5e:6e:
1d:da:9d:b4:cb:ff:18:26:0c:8a:c0:1a:31:12:3b:52:6a:87:
35:09:7f:b0:b8:3b:1a:3c:8e:46:12:54:89:ea:60:f3:bc:00:
25:dc:33:f4:ec:c7:aa:75:b6:12:57:db:9a:98:e3:a0:13:0b:
9e:67:80:b3:ca:c0:44:30:0f:39:96:7a:2d:f8:f9:7a:b4:83:
31:b6:4d:9b:4e:61:39:4c:8b:ac:92:d8:e4:d3:4c:62:fe:c9:
72:bc:d0:94:7b:f6:3b:40:5d:bf:02:7f:33:5b:61:7e:48:1a:
aa:44:f3:af:92:32:ce:27:42:94:77:f9:94:22:c2:55:08:21:
89:ee:83:eb:12:7d:b1:3f:1c:4b:36:f6:fe:43:fb:a4:b3:96:
c8:fa:de:0f:59:17:0f:fc:16:1a:df:f5:9a:ec:55:8e:a3:01:
1c:2a:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:27 2025 by rpki-client