
$ rpki-client -vvvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32302e302f32342d3234203d3e20323132363138.roa
File: 3134322e3234382e32302e302f32342d3234203d3e20323132363138.roa (raw, json)
Hash identifier: 8aM/kvzSFOC1zwtscsQq2SGzHYH91tAgEUr1k3Bui5A=
Subject key identifier: 9F:B9:2A:FC:83:0B:B6:76:71:02:DB:53:FE:2D:D1:2C:4C:12:58:BE
Certificate issuer: /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial: 202B42E77A3BE6DEFB2EA58A12D6C3C7FFA00946
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32302e302f32342d3234203d3e20323132363138.roa
Signing time: Wed 16 Sep 2026 22:49:46 +0000
ROA not before: Wed 16 Sep 2026 22:44:46 +0000
ROA not after: Wed 15 Sep 2027 22:49:46 +0000
asID: 212618
IP address blocks: 142.248.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 04:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:2b:42:e7:7a:3b:e6:de:fb:2e:a5:8a:12:d6:c3:c7:ff:a0:09:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Validity
Not Before: Sep 16 22:44:46 2026 GMT
Not After : Sep 15 22:49:46 2027 GMT
Subject: CN=9FB92AFC830BB6767102DB53FE2DD12C4C1258BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:be:24:81:70:cc:e3:b4:35:2c:1e:33:a5:82:
be:e2:75:60:3d:d6:1d:a5:dc:58:e6:8d:76:3a:6e:
71:d9:ac:60:f1:4a:b8:a5:f2:86:e4:9b:1c:29:0d:
1f:f6:63:84:61:32:ac:fb:d0:e3:f6:1d:b7:50:2a:
71:01:d9:60:7b:4e:e2:5b:c0:67:5d:4b:66:08:a1:
fb:de:23:97:83:94:62:85:4c:06:c3:5e:07:25:ea:
aa:1a:f7:92:ba:7b:4a:05:90:9c:02:a6:65:06:5e:
5f:90:38:56:e8:e4:79:68:c0:13:e3:27:27:c6:15:
95:23:2b:41:24:cc:9c:75:73:35:ba:62:10:28:3f:
b9:12:2d:49:87:9a:a9:c0:f5:d4:98:67:4a:48:d7:
3a:d9:d2:01:78:5e:33:a6:c9:50:cb:ce:08:c3:de:
a4:67:fd:c9:39:94:46:fb:0d:c7:86:8d:93:f4:22:
57:87:de:e7:c0:5b:91:73:4f:72:9f:d5:6e:a6:ec:
77:75:6b:dd:93:4b:bd:d8:0a:c5:0c:46:4c:68:00:
b9:16:f0:e5:d6:64:48:58:91:1a:45:d8:ea:35:5b:
3c:f7:63:ff:8e:f0:db:a7:3d:9d:62:76:93:11:4a:
ad:0c:20:db:8e:8d:a9:e0:3c:03:46:3c:56:8f:c8:
f5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B9:2A:FC:83:0B:B6:76:71:02:DB:53:FE:2D:D1:2C:4C:12:58:BE
X509v3 Authority Key Identifier:
keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32302e302f32342d3234203d3e20323132363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.248.20.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5a:7f:d6:f4:17:f3:82:4d:71:77:0a:31:5d:6b:06:2a:5d:
89:bf:20:a7:92:61:b8:c9:5f:8b:43:8c:87:20:11:11:79:ae:
c7:66:ef:16:c4:ab:20:bf:1c:5a:a9:77:1d:10:85:db:3d:18:
82:54:88:83:ec:28:81:81:e8:c3:c7:01:2b:66:da:c8:6d:2d:
60:0a:06:9e:f2:fd:fa:b9:02:d4:d8:0a:c5:ca:af:40:36:c6:
b2:a8:7e:57:4f:ef:cb:a9:e8:3d:7e:4c:b3:56:ef:9d:71:03:
47:27:74:14:44:c1:82:4b:c3:f4:92:7b:f0:ee:bf:ef:30:50:
fe:fe:0e:01:23:d3:6e:bb:e1:9c:8a:a7:ae:8b:8c:ce:37:91:
78:4f:a1:bb:de:b0:09:e5:71:83:2e:55:13:d8:59:93:88:9e:
73:f7:fb:72:05:5a:46:cd:2c:be:cd:72:2d:6f:10:93:ff:cf:
f7:ae:df:c3:c8:7d:d0:6a:3c:4e:07:6a:36:9e:30:c8:91:4f:
68:4b:6f:f7:29:98:d9:32:ef:97:7f:39:40:17:35:6e:1d:e2:
67:56:4f:66:76:83:f5:bf:18:0f:9c:df:b9:1c:66:4b:61:dd:
03:2c:1e:7b:73:ac:cd:46:cf:45:32:d8:d0:f6:2e:59:fb:bb:
ef:87:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 06:38:12 2026 by rpki-client