
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20323035383836.roa
File: 3139392e36382e3231382e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier: VovOdNBe7lXdFl2oYuQFYGo2z79fbvdW25x+kFf7M/w=
Subject key identifier: 05:8B:C9:DE:F7:F5:EB:6C:2A:46:02:1E:E4:46:B6:D9:ED:60:72:A1
Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial: 38FDA7BB05B7A6651A1E4B417B0B6227845A5106
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20323035383836.roa
Signing time: Thu 30 Oct 2025 08:23:54 +0000
ROA not before: Thu 30 Oct 2025 08:18:54 +0000
ROA not after: Thu 29 Oct 2026 08:23:54 +0000
asID: 205886
IP address blocks: 199.68.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Nov 2025 21:18:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fd:a7:bb:05:b7:a6:65:1a:1e:4b:41:7b:0b:62:27:84:5a:51:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Validity
Not Before: Oct 30 08:18:54 2025 GMT
Not After : Oct 29 08:23:54 2026 GMT
Subject: CN=058BC9DEF7F5EB6C2A46021EE446B6D9ED6072A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:58:53:35:90:7f:8a:be:ea:ea:2b:e9:4b:79:
b0:3e:b0:66:c4:e5:39:6c:0b:9d:6e:04:40:c7:6e:
18:6d:9b:2b:e0:cb:3d:b7:67:a0:c2:25:e2:38:60:
9d:48:ce:b9:d9:ea:3b:8d:39:90:bf:79:b6:03:66:
16:e8:cb:02:e6:15:ca:c9:6e:38:30:77:36:f5:45:
29:a8:98:68:05:f8:9a:e0:48:1f:59:68:82:5e:1c:
20:46:99:79:8f:f8:2b:cc:e9:c0:d6:ff:bb:f2:b0:
0e:75:43:37:e5:0e:99:12:0c:a4:f6:1d:31:d7:88:
09:14:f6:32:b3:6c:1e:b5:7e:66:b0:b1:ee:f4:7a:
d8:92:f4:bf:57:06:00:36:32:cf:8c:3d:f4:01:cc:
3f:26:59:90:df:27:e2:89:24:c6:0f:33:7e:a0:6d:
0c:ae:be:57:b6:f0:5c:3e:4b:eb:c0:5d:57:62:2a:
e0:20:f1:d4:55:b8:a8:ec:06:84:12:99:08:91:3b:
2f:fb:ac:8e:f8:57:5f:f4:ef:74:27:13:db:c8:5b:
b8:f8:d2:68:bc:c1:49:69:91:4a:b0:54:30:8f:92:
b0:2d:b3:78:e8:14:d6:91:72:75:32:bb:0a:41:ba:
cf:c9:f7:65:7a:74:ef:7f:d4:85:22:d7:69:07:27:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8B:C9:DE:F7:F5:EB:6C:2A:46:02:1E:E4:46:B6:D9:ED:60:72:A1
X509v3 Authority Key Identifier:
keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20323035383836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.68.218.0/24
Signature Algorithm: sha256WithRSAEncryption
30:a0:a3:58:b8:b0:98:de:e7:e7:93:d7:74:10:25:c9:38:5b:
fb:e3:e2:af:dc:7a:83:2b:7f:ed:89:d5:b9:33:b9:36:fe:4f:
9b:fe:b9:d7:44:6c:77:7d:72:98:63:90:99:60:97:2d:7d:01:
ec:2a:44:dc:98:bb:40:ea:48:c6:7b:f9:36:ce:df:dd:f9:e9:
51:ed:33:5c:6d:ce:da:6a:74:10:3f:24:e0:2f:df:96:ba:22:
4c:5a:26:c1:2d:cb:79:d1:da:61:fa:f0:28:72:d9:6a:b2:6d:
fd:55:1a:6b:c7:07:0f:0e:e7:cc:33:3c:21:22:2a:a6:b6:87:
74:03:1b:f2:db:d5:2f:28:95:a8:83:a0:74:d4:1a:89:05:91:
5d:0e:3f:82:8e:1c:6f:90:53:47:ee:c4:06:61:cc:c0:57:61:
44:16:70:e4:49:e3:3b:0e:d1:8f:9d:ea:aa:53:45:bb:6f:c9:
03:c8:40:cb:0c:ac:f2:24:14:1c:0b:9e:42:be:fd:43:ef:58:
6a:09:4b:f0:ee:64:48:3a:de:9f:b3:0b:34:61:83:8f:40:7a:
de:0e:f9:b6:41:f9:e5:55:9c:01:2d:30:0a:7d:ae:bb:72:69:
f2:55:2f:e8:4a:a1:70:01:23:e6:b0:39:e9:ed:d0:98:8f:14:
d3:f1:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:30:51 2025 by rpki-client