
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e362e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e362e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: 5rISlZT/GJcafVfPSPYBlp7z5VWSNPSLF3tamCSgcRk=
Subject key identifier: 68:7D:E9:78:5C:FB:6F:91:83:70:67:87:61:DF:C4:0E:51:B6:CA:01
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 0D51F522B0F1A99EA9FE33A5DAB0910968296983
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e362e302f32342d3234203d3e203534303034.roa
Signing time: Fri 14 Nov 2025 18:29:44 +0000
ROA not before: Fri 14 Nov 2025 18:24:44 +0000
ROA not after: Fri 13 Nov 2026 18:29:44 +0000
asID: 54004
IP address blocks: 144.168.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:51:f5:22:b0:f1:a9:9e:a9:fe:33:a5:da:b0:91:09:68:29:69:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:44 2025 GMT
Not After : Nov 13 18:29:44 2026 GMT
Subject: CN=687DE9785CFB6F918370678761DFC40E51B6CA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:22:c6:ce:df:4f:b5:d6:6e:61:85:70:94:
dd:3b:3a:72:ad:95:4c:d8:e0:24:58:85:af:dc:88:
b8:13:84:43:7a:0c:44:9d:a1:d3:56:4e:53:c7:e5:
5f:ce:49:27:8d:e8:8f:6b:76:5f:74:49:0a:bd:80:
df:40:16:93:43:ca:be:5b:e8:94:e9:b9:22:4c:11:
83:b0:ea:06:ff:c8:9d:3c:8c:dd:4c:5b:8e:72:81:
eb:b1:fc:58:7f:1a:28:c2:49:3b:d1:43:7b:10:81:
f6:8e:b9:d2:ee:72:01:13:90:b0:ff:af:13:06:31:
01:2f:cd:9c:28:23:84:79:d9:88:39:32:85:ad:f5:
c6:59:52:78:85:1d:1d:4a:13:0c:75:26:89:9c:4d:
f7:70:ab:9e:e1:0e:1d:be:10:87:d9:1d:df:e6:d2:
a2:85:65:01:7b:2e:f8:67:1a:6f:e8:8d:2e:f3:39:
c1:20:96:9f:af:24:70:48:aa:ae:4a:66:c8:93:c4:
18:22:66:ec:b1:71:ee:ab:ea:ae:5b:9d:04:09:08:
14:43:d2:6e:1c:ef:b3:41:56:ad:f1:05:dd:07:91:
cf:97:24:44:a7:16:e7:70:4b:58:64:58:b3:da:68:
23:81:82:c5:b7:97:3a:29:28:5e:75:69:9b:ce:77:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:7D:E9:78:5C:FB:6F:91:83:70:67:87:61:DF:C4:0E:51:B6:CA:01
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e362e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.6.0/24
Signature Algorithm: sha256WithRSAEncryption
48:13:93:1f:38:f6:08:f0:8a:82:33:2b:1a:cc:4a:f7:01:ac:
ee:5e:61:88:7a:d8:04:4b:0b:ad:0d:69:99:2a:1a:52:e4:e7:
ac:fd:63:60:71:a0:16:18:9e:3d:36:6c:ff:f7:79:d7:64:93:
4f:26:6a:22:b4:57:b9:c2:a1:76:b8:05:f2:de:18:50:70:4a:
29:55:71:6f:96:94:e0:a0:1b:02:b5:0b:0b:f3:22:2c:fa:08:
e8:09:d0:f7:d4:89:04:20:37:dd:dd:d9:a0:b9:3d:c9:af:a0:
8b:a5:d1:50:c2:be:b0:97:96:fa:66:6c:18:68:79:47:fd:2e:
9e:84:be:cf:7d:fb:3d:f7:de:40:94:0e:94:92:37:af:28:27:
4f:18:fc:2d:7a:67:89:3b:6d:9d:b7:d1:d8:e1:08:0a:97:d0:
0b:c0:db:c2:d0:92:0e:26:96:0e:49:1c:ac:f6:8e:35:db:99:
34:43:7c:20:77:99:71:85:25:d3:2e:98:d8:17:15:48:85:5f:
30:78:bb:dd:dd:90:3c:ee:4e:0f:0f:eb:28:01:e6:68:f6:de:
eb:4f:ab:8e:ad:61:fc:a9:b2:06:28:25:dc:72:50:57:7b:72:
e8:5d:ca:83:fb:89:03:49:d8:74:25:a9:6f:6d:44:fb:94:c6:
d1:42:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:58:27 2025 by rpki-client