
$ rpki-client -vvvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32332e302f32342d3234203d3e203530323234.roa
File: 3134322e3234382e32332e302f32342d3234203d3e203530323234.roa (raw, json)
Hash identifier: YFvhx3VN+6bYr1YFgftFfezXsBzPaXDFXFh+b3OMHrc=
Subject key identifier: 44:96:6B:AF:1B:FE:58:99:A0:DB:B0:83:DE:E8:76:49:31:0F:A6:71
Certificate issuer: /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Certificate serial: 296FC94795EB6F21480D49A8C44D9006C81B27CC
Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32332e302f32342d3234203d3e203530323234.roa
Signing time: Sat 24 Oct 2026 07:50:30 +0000
ROA not before: Sat 24 Oct 2026 07:45:30 +0000
ROA not after: Sat 23 Oct 2027 07:50:30 +0000
asID: 50224
IP address blocks: 142.248.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 00:14:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:6f:c9:47:95:eb:6f:21:48:0d:49:a8:c4:4d:90:06:c8:1b:27:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3
Validity
Not Before: Oct 24 07:45:30 2026 GMT
Not After : Oct 23 07:50:30 2027 GMT
Subject: CN=44966BAF1BFE5899A0DBB083DEE87649310FA671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:3c:70:ab:01:5c:6c:a9:0e:37:71:d3:0e:
35:cd:6a:b7:8d:e5:02:91:e2:73:bb:49:0f:91:2f:
75:96:21:19:28:b9:ae:92:9d:f3:0b:20:1c:5f:59:
e8:8b:bf:c8:69:66:da:9b:a0:3f:9c:d4:33:0b:d9:
2e:ff:a3:90:63:02:d2:b1:39:e3:f6:95:30:39:52:
a4:f4:28:36:50:f2:b5:6c:09:29:34:0b:db:9c:0a:
1d:d9:58:da:0f:35:92:bb:dc:49:b8:43:a6:74:f5:
d6:c3:4f:5b:8c:13:c5:1a:3f:d6:6a:f2:2c:7b:61:
cd:ed:17:0b:0f:3d:b5:e5:c7:b6:9f:f2:44:22:aa:
b4:f7:41:4b:bd:99:a0:83:99:98:cd:5f:3a:90:60:
4b:18:88:25:63:f8:1d:6a:c8:cc:27:0a:1e:52:cc:
15:7c:52:b4:a4:1a:7e:3e:b0:fb:6f:13:28:20:5e:
af:6b:1d:b4:9e:68:4a:1b:30:fc:57:31:fc:b3:5e:
90:b2:33:be:db:7d:60:6d:64:15:48:07:60:0b:8d:
00:e4:6e:7b:53:5c:9d:f6:46:26:6b:bc:51:42:78:
ff:c0:09:e5:2c:bc:d4:dd:e4:fd:b5:d1:46:13:6c:
48:86:72:c8:2f:7e:e5:09:39:b9:ea:5b:3b:c6:69:
8d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:96:6B:AF:1B:FE:58:99:A0:DB:B0:83:DE:E8:76:49:31:0F:A6:71
X509v3 Authority Key Identifier:
keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32332e302f32342d3234203d3e203530323234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.248.23.0/24
Signature Algorithm: sha256WithRSAEncryption
34:6c:f8:05:28:43:b1:53:a0:1f:9e:7d:1e:57:45:bf:49:be:
5c:db:81:38:72:78:b2:eb:37:82:bd:67:21:65:6c:98:83:eb:
12:88:41:b5:05:ce:ed:3d:a4:f5:56:7a:29:00:4c:8b:97:38:
95:c8:4b:9f:5e:3f:6e:32:2e:a8:cc:7d:8a:31:e6:92:2f:ab:
45:c8:63:29:88:b0:c9:a9:f0:43:b4:18:75:3d:02:05:2d:94:
b7:6d:40:13:ce:ef:17:23:40:be:89:d0:65:90:2a:bf:73:f5:
30:2f:ad:02:a2:b7:61:97:a8:a1:a5:b4:14:0a:53:9f:81:c3:
ba:28:90:74:47:56:b4:ec:49:70:18:be:df:31:b3:08:77:97:
21:f7:ec:0a:f1:51:dd:65:ab:05:dc:c2:f5:ad:02:c3:c9:bd:
29:75:73:a6:2c:65:5d:1e:77:b5:39:2f:88:2b:ed:da:66:5c:
ec:b3:e6:f2:45:54:c6:86:93:63:11:53:e1:26:ea:03:1e:50:
0a:6b:d7:8c:db:d3:f5:9b:74:73:7c:35:10:70:67:41:74:af:
81:c5:1a:eb:79:6c:35:64:c2:43:06:e0:b0:86:e9:f2:4b:e4:
01:c3:98:2e:5d:ca:3b:b0:f3:31:d8:bc:20:be:c7:aa:2f:e4:
4e:32:a7:40
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUKW/JR5XrbyFIDUmoxE2QBsgbJ8wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh
YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjYxMDI0MDc0NTMwWhcNMjcxMDIzMDc1MDMw
WjAzMTEwLwYDVQQDEyg0NDk2NkJBRjFCRkU1ODk5QTBEQkIwODNERUU4NzY0OTMx
MEZBNjcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5is8cKsBXGyp
Djdx0w41zWq3jeUCkeJzu0kPkS91liEZKLmukp3zCyAcX1noi7/IaWbam6A/nNQz
C9ku/6OQYwLSsTnj9pUwOVKk9Cg2UPK1bAkpNAvbnAod2VjaDzWSu9xJuEOmdPXW
w09bjBPFGj/WavIse2HN7RcLDz215ce2n/JEIqq090FLvZmgg5mYzV86kGBLGIgl
Y/gdasjMJwoeUswVfFK0pBp+PrD7bxMoIF6vax20nmhKGzD8VzH8s16QsjO+231g
bWQVSAdgC40A5G57U1yd9kYma7xRQnj/wAnlLLzU3eT9tdFGE2xIhnLIL37lCTm5
6ls7xmmN8QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFESWa68b/liZoNuwg97odkkx
D6ZxMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv
MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh
NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy
MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi
NzllYzA4YmFjYi8wLzMxMzQzMjJlMzIzNDM4MmUzMjMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAI74FzANBgkqhkiG9w0BAQsF
AAOCAQEANGz4BShDsVOgH559HldFv0m+XNuBOHJ4sus3gr1nIWVsmIPrEohBtQXO
7T2k9VZ6KQBMi5c4lchLn14/bjIuqMx9ijHmki+rRchjKYiwyanwQ7QYdT0CBS2U
t21AE87vFyNAvonQZZAqv3P1MC+tAqK3YZeooaW0FApTn4HDuiiQdEdWtOxJcBi+
3zGzCHeXIffsCvFR3WWrBdzC9a0Cw8m9KXVzpixlXR53tTkviCvt2mZc7LPm8kVU
xoaTYxFT4SbqAx5QCmvXjNvT9Zt0c3w1EHBnQXSvgcUa63lsNWTCQwbgsIbp8kvk
AcOYLl3KO7DzMdi8IL7Hqi/kTjKnQA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:59 2026 by rpki-client