
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e32342e302f32312d3231203d3e203131343237.roa
File: 3134342e3136382e32342e302f32312d3231203d3e203131343237.roa (raw, json)
Hash identifier: F5/CSRy7qRcpJrF2vxnc65UytMaySRSX1nvT7ARw7Z8=
Subject key identifier: 51:0F:55:6A:AF:3E:66:CE:69:5E:67:95:54:92:A6:23:59:80:C7:C7
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 3FC5FE50ACEC1CEA67561B5FE34AA19281DA2829
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e32342e302f32312d3231203d3e203131343237.roa
Signing time: Fri 14 Nov 2025 18:29:45 +0000
ROA not before: Fri 14 Nov 2025 18:24:45 +0000
ROA not after: Fri 13 Nov 2026 18:29:45 +0000
asID: 11427
IP address blocks: 144.168.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c5:fe:50:ac:ec:1c:ea:67:56:1b:5f:e3:4a:a1:92:81:da:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:45 2025 GMT
Not After : Nov 13 18:29:45 2026 GMT
Subject: CN=510F556AAF3E66CE695E67955492A6235980C7C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:85:6a:6a:7d:25:f7:42:63:2e:0c:2e:f3:
e0:8f:6c:d8:97:76:3e:d5:f7:28:1d:5d:54:b3:ba:
98:a4:d9:fe:7e:8e:1f:04:a3:83:da:47:fe:32:f9:
9c:61:82:c8:f7:d8:c2:6e:24:e9:b9:12:d4:a4:20:
ff:f5:1f:7c:3e:ea:f8:42:db:93:7f:8d:62:37:79:
4e:68:04:42:b8:7b:be:ea:01:32:34:9c:77:80:26:
54:42:62:1f:71:fd:d6:84:5e:ff:45:6f:a4:7e:b2:
3a:c1:5d:20:d3:bb:9d:4a:7d:72:8e:1c:6f:b7:2d:
15:fc:04:4a:dc:ea:ab:0c:82:ba:94:25:8a:08:45:
ea:48:52:a6:06:48:e9:e0:c1:19:19:35:66:a2:12:
2b:27:f7:fa:9f:26:87:e1:d3:f8:7b:74:e2:2b:1f:
d9:39:ea:d1:3a:06:7e:99:85:0c:de:78:3f:65:96:
87:af:6f:9b:66:6e:6e:84:4a:eb:1a:36:40:d0:9a:
4b:5e:71:32:14:4f:d7:f3:2c:57:a3:6f:29:a0:da:
b8:db:35:51:ec:ff:aa:7a:1f:01:6a:31:96:49:eb:
50:9b:b3:17:57:38:29:91:c2:46:7b:c8:77:35:74:
fb:1d:cb:48:f0:14:9e:b6:c7:36:1f:01:d8:9e:dc:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0F:55:6A:AF:3E:66:CE:69:5E:67:95:54:92:A6:23:59:80:C7:C7
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e32342e302f32312d3231203d3e203131343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.24.0/21
Signature Algorithm: sha256WithRSAEncryption
99:7c:1f:f4:06:65:bc:67:5a:a6:9a:da:b4:c9:6d:54:ab:ae:
14:47:88:02:f7:74:b3:41:1d:dd:c1:e1:59:45:c4:95:4c:5b:
70:0a:f2:f5:41:e2:e3:d1:39:9e:4c:3c:6a:e3:0b:26:bd:82:
d9:70:88:ab:fc:69:15:13:b5:17:48:22:d7:96:5a:eb:f8:2d:
88:6e:19:65:05:99:2f:1c:45:ac:40:67:56:aa:94:c6:ee:32:
16:da:ab:7f:ad:77:7b:01:69:9b:dd:eb:cc:78:13:ff:ed:a1:
52:e2:28:28:06:73:4b:41:64:8b:09:b9:00:df:e0:74:63:f0:
d9:04:ea:91:64:89:6d:67:d2:83:8a:8c:10:7b:74:c9:c0:dd:
62:32:f2:5d:d7:dd:19:33:ec:54:41:f2:a9:cb:53:01:3f:52:
ab:1b:a5:d9:c8:4a:f0:12:e4:8b:79:2b:29:19:5f:42:1e:f3:
62:eb:4b:9a:94:01:17:eb:28:1f:96:45:c1:c7:dd:9f:7f:b3:
f0:54:f0:da:20:75:25:5f:b5:23:24:50:95:4e:b8:5e:a4:d7:
c8:70:b1:e3:41:3f:7a:fc:66:33:12:30:33:52:dd:7f:fe:58:
b3:ba:f1:e0:95:cf:b7:a8:12:25:3e:29:f3:4f:c6:9a:16:a3:
3f:87:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:25 2025 by rpki-client