
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32332d3233203d3e20323039313039.roa
File: 3134322e3234392e3131342e302f32332d3233203d3e20323039313039.roa (raw, json)
Hash identifier: WBYqF4x9S+KA4oryNbNMGj4xZ3w4ejY8Ao0sbRxqExA=
Subject key identifier: 46:4B:11:BF:E6:9F:A7:83:C3:F3:EA:78:8B:CD:D2:C7:CD:5D:2F:5E
Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial: 5F0D3C9B47F5ADE906252D17FBB2D379EB207984
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32332d3233203d3e20323039313039.roa
Signing time: Wed 02 Sep 2026 12:13:51 +0000
ROA not before: Wed 02 Sep 2026 12:08:51 +0000
ROA not after: Wed 01 Sep 2027 12:13:51 +0000
asID: 209109
IP address blocks: 142.249.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 02:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:0d:3c:9b:47:f5:ad:e9:06:25:2d:17:fb:b2:d3:79:eb:20:79:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Validity
Not Before: Sep 2 12:08:51 2026 GMT
Not After : Sep 1 12:13:51 2027 GMT
Subject: CN=464B11BFE69FA783C3F3EA788BCDD2C7CD5D2F5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ac:42:3f:c0:02:28:7d:68:84:aa:d9:78:a3:
55:62:83:a1:3c:2c:31:66:53:73:dd:be:22:ac:7d:
99:b7:ed:d0:88:cd:ab:8d:07:b8:f3:eb:f0:03:3b:
c2:a1:f9:fd:3d:5e:8c:0a:b9:90:3b:38:8c:99:2e:
03:3b:58:d3:be:a9:5a:1b:ab:90:db:b8:b8:ae:09:
e9:fa:c0:47:8c:12:f2:25:44:a9:0c:e1:82:da:be:
8c:40:01:39:4c:29:64:e4:d2:fa:f7:59:e8:93:09:
7d:2e:3b:23:64:c7:52:56:7c:e8:6f:14:96:7c:53:
83:9a:d6:7a:d9:e9:27:84:33:45:eb:a9:b1:12:33:
04:f1:f9:15:c1:bb:5b:e5:e0:c9:02:ea:0c:97:98:
3d:ba:4e:78:7c:a1:28:dc:ec:fd:05:33:98:9f:3b:
3b:ec:50:fb:70:71:ca:56:c3:2c:45:1c:fc:ab:1d:
07:d2:4c:db:91:aa:d0:e9:56:0b:9d:bc:20:82:c9:
60:3f:00:76:7b:91:17:d8:43:e0:ae:fc:15:a7:76:
24:94:fc:14:12:8e:a4:0e:7e:fd:48:f9:c1:ef:6e:
1a:cf:b7:49:9e:86:57:c2:a0:9d:1c:9b:ef:61:c8:
76:a1:f2:6b:6a:48:44:54:b4:55:ac:67:57:5d:54:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4B:11:BF:E6:9F:A7:83:C3:F3:EA:78:8B:CD:D2:C7:CD:5D:2F:5E
X509v3 Authority Key Identifier:
keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32332d3233203d3e20323039313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.249.114.0/23
Signature Algorithm: sha256WithRSAEncryption
98:12:0b:80:d2:03:f1:b9:96:f6:48:0e:46:82:1f:16:5f:15:
f5:22:d9:58:3c:4c:2c:3f:fa:12:ed:51:e2:71:0b:60:25:34:
10:b2:5b:4c:7a:26:38:6e:32:71:7d:d3:a7:23:ac:dd:93:95:
a7:dc:83:a0:bf:62:62:a9:ce:7e:95:51:7c:95:9e:22:1c:0d:
f9:d9:cf:9a:a5:16:31:b1:ed:51:1b:b4:5c:08:37:31:1f:dc:
c4:11:52:dd:21:9b:64:5c:ac:94:96:ce:af:42:41:43:f6:c1:
d6:f4:cb:27:b1:0f:a5:ba:e2:33:c2:a3:81:92:e4:32:2f:61:
9a:70:2f:a8:52:c4:c8:d3:b3:c6:ac:c9:5a:24:89:9a:67:d5:
d6:9d:a4:aa:7f:16:4a:df:08:6e:e5:72:bf:f1:0b:1d:40:00:
51:64:81:8e:63:79:a0:34:fa:69:cc:c9:57:3c:1d:86:19:2a:
f4:bd:89:dc:c9:0e:41:2b:42:3d:d7:2f:5c:17:45:43:e6:9b:
5b:7c:d2:cc:a0:2f:96:36:11:85:e3:99:65:82:2c:1c:fc:29:
93:4e:2b:b0:0c:c4:91:5f:46:5a:f0:ec:eb:80:4b:a9:a1:f3:
3e:16:f7:f9:dc:35:e0:70:a1:ea:ab:74:4d:ac:ac:22:15:5d:
2c:cf:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:55:55 2026 by rpki-client