
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e352e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e352e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: BwSeEsJ4RYzhWr29/JZeWDWRcCcwiioZMKUSFtTtCRE=
Subject key identifier: 05:47:6C:1E:9E:33:87:3B:D2:EA:E5:03:93:13:E6:DC:6A:3A:C0:24
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 3009AD3BEAE305E21AA50BFD1BEFCEBBB25EE88F
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e352e302f32342d3234203d3e203534303034.roa
Signing time: Fri 14 Nov 2025 18:29:44 +0000
ROA not before: Fri 14 Nov 2025 18:24:44 +0000
ROA not after: Fri 13 Nov 2026 18:29:44 +0000
asID: 54004
IP address blocks: 144.168.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:09:ad:3b:ea:e3:05:e2:1a:a5:0b:fd:1b:ef:ce:bb:b2:5e:e8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:44 2025 GMT
Not After : Nov 13 18:29:44 2026 GMT
Subject: CN=05476C1E9E33873BD2EAE5039313E6DC6A3AC024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:54:71:b4:77:8a:1f:5e:b4:31:e5:eb:74:31:
ed:f4:12:a9:b3:6f:ba:d4:cb:bb:d2:b0:d8:42:5c:
00:40:7a:ea:48:c9:88:34:ff:07:a0:00:2b:bf:bc:
82:81:1b:61:e6:07:dd:f2:73:76:aa:0d:48:9c:76:
2a:09:04:d2:e3:1f:2f:d0:50:bc:13:a5:91:5e:44:
1c:34:32:2f:1c:c7:e3:e0:3e:0e:47:c8:4a:01:be:
6c:43:18:14:1e:a7:20:72:b7:7e:74:22:af:1f:91:
80:ba:02:db:53:b6:4f:6d:1e:f5:c8:fe:96:d9:2e:
1c:ba:44:9d:b6:fd:f7:b0:fd:dd:52:a4:4b:71:ab:
82:c0:25:33:fa:43:95:82:b8:3e:c0:08:3f:b4:14:
a1:d7:78:36:bc:3f:24:a4:22:30:bf:4d:78:03:14:
f3:da:e6:47:06:90:e2:24:28:3c:eb:79:82:f5:03:
cc:c8:32:19:03:5e:e4:06:19:d9:49:f9:a6:21:85:
b4:4f:73:70:4d:d9:ff:98:8d:ca:ef:c6:a9:e4:4b:
a0:7f:d6:d4:e5:3f:b9:2a:7c:a0:10:c5:be:f8:67:
32:06:6a:2a:0a:68:27:5a:30:f6:07:79:46:a1:a8:
3c:2c:dc:2e:5b:f1:8c:db:0e:2d:1e:9e:31:f6:8f:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:6C:1E:9E:33:87:3B:D2:EA:E5:03:93:13:E6:DC:6A:3A:C0:24
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e352e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c1:90:eb:3d:53:ce:04:39:92:85:d4:6c:10:51:a3:e0:65:
e6:f1:08:e4:fb:a0:cd:2a:5a:dd:8f:35:e2:df:a1:02:30:62:
6d:9d:0a:72:94:d7:48:50:a1:15:4b:b0:c9:0f:5b:e9:bb:f0:
6b:66:6d:08:ad:6b:ef:47:92:c4:87:af:5e:31:70:3a:ad:11:
e3:65:27:75:56:7c:4a:bf:cc:9a:e2:81:2a:d6:09:ea:0b:0b:
b3:a6:bf:98:88:4f:73:6d:19:10:56:e6:fe:f9:46:17:4b:84:
a3:9f:18:9b:45:db:a3:c1:e4:b7:4d:af:5d:99:83:8a:2c:d5:
9a:3f:7d:6b:b8:96:3e:7e:a7:c6:7d:8a:fe:5d:f7:f5:0e:59:
1c:38:95:d0:52:38:91:05:56:d3:ab:86:ed:b1:f2:88:6c:86:
29:4b:b6:fc:66:38:53:fc:4f:8a:bc:a7:ee:7d:9e:66:68:93:
f4:0b:d8:b0:43:d0:c9:2c:9d:6e:24:68:39:d1:60:8e:ab:6a:
df:6a:a8:7e:c5:c5:a2:32:45:cc:36:5b:a5:db:67:e2:f6:37:
4b:4a:10:18:38:15:09:1c:20:3f:b7:8f:99:00:be:87:47:ba:
01:f4:f6:b2:e1:81:cd:9e:00:d6:f3:ce:09:72:4c:c7:30:10:
b0:ce:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:26 2025 by rpki-client