
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31352e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e31352e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: AS5i7era3uLwdxsreaATmvQ7166+oMzbWtX17PMrRQM=
Subject key identifier: 9B:76:9A:09:8D:A5:45:5E:20:1E:5C:5B:60:6F:38:79:90:C5:91:51
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 3B9A74735790B40FC19B0072A3E61F348C1A2846
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31352e302f32342d3234203d3e203534303034.roa
Signing time: Fri 14 Nov 2025 18:29:45 +0000
ROA not before: Fri 14 Nov 2025 18:24:45 +0000
ROA not after: Fri 13 Nov 2026 18:29:45 +0000
asID: 54004
IP address blocks: 144.168.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9a:74:73:57:90:b4:0f:c1:9b:00:72:a3:e6:1f:34:8c:1a:28:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:45 2025 GMT
Not After : Nov 13 18:29:45 2026 GMT
Subject: CN=9B769A098DA5455E201E5C5B606F387990C59151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:07:b8:9e:4a:78:e9:5a:5c:46:b4:ee:f1:f2:
f0:a7:93:e7:7a:6c:29:3c:e6:72:43:ee:0d:38:63:
0c:ef:e6:63:d0:66:7d:91:a6:33:cb:ff:57:df:36:
41:33:c7:c0:8a:d2:90:2c:58:1e:1d:a3:56:b9:e7:
71:8a:75:52:79:d0:a5:e9:dd:29:e8:6c:3b:5a:8e:
67:82:d8:ed:c3:e0:db:58:5e:93:7e:2a:13:9e:70:
18:0c:3c:5f:04:0e:0b:72:ab:75:02:da:ec:58:98:
a8:b0:91:c5:aa:f9:0c:08:16:57:a3:a6:12:3e:52:
fd:cb:fe:c7:9f:8d:36:05:2c:07:b3:08:84:ae:7a:
40:08:7d:bf:19:30:b6:73:f6:cb:3a:89:0d:98:39:
0f:c3:64:41:cb:52:94:cf:49:1b:a6:86:0f:77:33:
1b:f3:28:6d:c7:09:c4:b5:59:c1:e5:40:0d:13:c1:
02:d7:31:47:9b:00:e9:05:22:d2:32:96:f2:3c:44:
ca:7d:44:33:94:e7:f3:25:d2:95:09:4d:f9:7c:18:
4c:af:79:cc:2a:37:35:03:47:71:a4:f1:01:e5:b2:
44:29:95:8a:08:b8:43:65:be:5b:ba:0c:03:cc:61:
da:0b:3b:1d:bb:02:86:e8:a8:a1:c1:a9:58:ae:da:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:9A:09:8D:A5:45:5E:20:1E:5C:5B:60:6F:38:79:90:C5:91:51
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31352e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4b:6a:76:bf:a3:b0:91:4c:7c:58:7e:14:79:c2:52:b2:19:
96:b4:5a:13:58:31:5c:98:ae:61:06:8e:6a:3e:22:6e:95:9d:
73:72:91:ec:67:3a:87:e9:44:7a:1d:4d:cf:6d:0d:19:72:2d:
0f:ab:03:72:72:97:b3:25:bd:e0:e9:ac:25:a7:c9:34:c5:2f:
e1:0d:9b:77:d0:67:16:29:73:37:0d:99:88:f6:54:12:ca:99:
e7:18:3b:0f:c2:06:64:01:0b:8a:9f:76:46:20:57:7c:51:dd:
9f:b1:ea:07:0c:21:47:b2:3d:24:ae:23:48:bc:4a:17:5d:3b:
02:ef:78:6a:99:2a:6f:09:0a:3c:f9:b8:c7:36:1e:1f:87:1f:
af:f4:27:9a:86:f7:1f:65:85:75:b2:14:3c:0c:55:24:a6:fc:
81:c5:bb:f6:ac:e9:99:cc:b0:bc:47:f6:0c:9b:94:24:a8:fd:
99:47:1e:41:db:4a:78:e8:a7:91:bb:a7:6c:90:90:18:1d:3e:
91:25:83:00:d4:dc:30:cb:1b:ec:e2:2a:a8:21:b0:78:12:cd:
25:08:df:c0:dc:d5:8c:1f:ca:11:56:05:c7:6a:de:bb:62:2d:
b4:b4:bd:73:5e:cc:38:02:fb:79:fa:ee:48:9d:0b:33:c3:19:
79:70:a7:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:36 2025 by rpki-client