
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31342e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e31342e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: UroJmB493g3jNh1U8k6SJ0k8mvfmHt46UmpU0DhSJ5E=
Subject key identifier: DB:24:99:A5:80:45:B0:D6:96:A2:B8:60:AA:B3:06:6D:20:94:13:F1
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 7EA26D0A979438A888492B4D31AB6371D0D7A4CF
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31342e302f32342d3234203d3e203534303034.roa
Signing time: Fri 14 Nov 2025 18:29:44 +0000
ROA not before: Fri 14 Nov 2025 18:24:44 +0000
ROA not after: Fri 13 Nov 2026 18:29:44 +0000
asID: 54004
IP address blocks: 144.168.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a2:6d:0a:97:94:38:a8:88:49:2b:4d:31:ab:63:71:d0:d7:a4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:44 2025 GMT
Not After : Nov 13 18:29:44 2026 GMT
Subject: CN=DB2499A58045B0D696A2B860AAB3066D209413F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ee:67:99:38:d5:73:b0:7f:41:6c:07:be:ec:
42:d0:ff:24:60:d7:0c:10:32:5d:b5:e5:7c:5b:b8:
1a:7e:1d:59:28:7c:d9:81:90:6f:ee:d9:75:b7:21:
d0:68:b5:41:f9:bc:9e:af:b1:d5:d7:13:95:5f:d4:
2b:70:04:cd:ca:37:9d:80:67:2d:78:c1:79:35:b6:
0f:38:55:19:22:3c:ba:42:b1:61:2e:36:c6:d6:32:
5a:ee:0a:82:a3:92:a9:e3:d7:41:91:67:03:92:a0:
a4:f9:26:39:ca:a2:62:c0:17:6e:5a:96:81:99:90:
84:c1:b6:f4:f8:17:ca:5e:32:41:44:8f:70:a1:e1:
ea:db:99:f1:1d:45:c1:a5:34:6a:58:ef:95:56:73:
de:bc:10:fa:a8:03:f7:ff:f7:cf:f5:c6:ba:44:08:
7f:88:c6:9c:59:d0:d8:74:1c:73:67:7c:c4:c7:49:
34:e8:27:0f:31:ce:86:d4:8c:55:b1:59:b7:0f:05:
f0:20:57:29:a3:be:f1:95:c2:fb:86:80:63:4b:9a:
a9:42:a7:66:c7:d7:fc:9b:3e:a9:52:8f:90:e8:e1:
b5:86:22:25:d6:37:90:69:cd:aa:fe:0a:0a:c3:86:
cb:f0:10:9b:61:17:b5:b2:c5:79:4e:72:e0:f9:53:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:24:99:A5:80:45:B0:D6:96:A2:B8:60:AA:B3:06:6D:20:94:13:F1
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31342e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.14.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:42:40:1a:27:06:ec:b3:07:fd:25:7e:47:bc:ea:f2:78:1d:
dc:c3:4c:4d:6f:84:d5:27:0d:45:ac:d9:dc:ae:55:69:df:e7:
b3:65:be:81:3f:40:51:3d:c6:99:42:7f:44:1d:15:0b:b9:aa:
8f:a7:cc:4a:1b:48:73:9a:84:1e:00:31:50:95:75:95:3d:07:
07:94:55:15:2e:47:11:3b:46:8a:9f:99:b3:2c:ba:38:5c:cd:
bd:bf:0a:41:ae:2d:04:5b:8d:2b:d3:11:8d:da:29:ea:00:74:
c3:61:45:fe:8e:d6:78:5f:19:4f:31:84:34:57:16:f9:76:36:
c6:e8:bf:ca:1a:37:2a:4e:33:ac:1c:66:50:8f:6c:23:42:0c:
59:51:40:ee:57:67:fe:66:02:1f:b2:fc:2a:5b:18:e0:c7:9b:
89:c5:0d:d2:67:e1:9c:62:6c:e3:71:30:5e:4f:90:d3:b3:91:
eb:b0:e3:a6:b0:c2:77:10:96:09:df:b5:55:69:a7:c1:3d:73:
54:27:9f:2c:e5:49:6a:a9:15:67:e0:1e:29:72:70:08:dd:4e:
a1:6c:c5:c9:dc:17:9e:1a:07:a8:53:b3:13:ec:4e:fe:14:8c:
3a:2c:c8:c2:59:38:37:bd:a1:2a:ef:10:96:bd:41:0b:34:d5:
51:76:35:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:25 2025 by rpki-client