
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203531373931.roa
File: 34352e34322e34322e302f32342d3234203d3e203531373931.roa (raw, json)
Hash identifier: M3x4MdC8diK80ipkcS7nMFoAMWHoa+h66RUxB8pSq7g=
Subject key identifier: DC:39:20:35:10:88:A6:1E:30:0E:F9:C8:58:B0:AD:85:A6:3C:40:B2
Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Certificate serial: 62153071515B8268443146704A7579C4795A30CC
Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203531373931.roa
Signing time: Thu 16 Oct 2025 16:43:21 +0000
ROA not before: Thu 16 Oct 2025 16:38:21 +0000
ROA not after: Thu 15 Oct 2026 16:43:21 +0000
asID: 51791
IP address blocks: 45.42.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Oct 2025 23:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:15:30:71:51:5b:82:68:44:31:46:70:4a:75:79:c4:79:5a:30:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc
Validity
Not Before: Oct 16 16:38:21 2025 GMT
Not After : Oct 15 16:43:21 2026 GMT
Subject: CN=DC3920351088A61E300EF9C858B0AD85A63C40B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:f4:24:a1:a0:c1:cf:bc:38:c1:f2:73:68:
47:19:85:d4:b5:29:43:2f:71:38:cc:30:cf:c7:3b:
b2:2d:95:c4:3a:1b:98:79:22:ed:fc:df:e8:bf:a5:
f7:f5:66:32:a1:17:66:52:2b:36:a4:36:4c:79:bb:
e5:ed:67:80:aa:ac:30:11:db:63:92:84:4d:05:64:
aa:68:e7:a6:b0:14:b2:52:16:09:58:99:6f:68:ef:
7b:3f:64:78:24:de:d1:28:ca:e8:e6:4a:22:42:2c:
09:8e:3b:0d:e2:16:1e:9e:72:57:d0:b9:78:27:f9:
12:f5:9c:ea:26:d8:9a:c0:9c:9b:09:32:42:1d:9a:
f9:67:09:6d:04:72:83:4a:09:b6:11:8e:96:7e:98:
4b:17:50:0e:37:36:7f:30:ed:5b:67:64:66:ae:0c:
54:ac:4e:78:31:93:e8:d3:37:ab:58:3e:98:f9:30:
18:2e:be:70:82:f6:68:c9:67:88:13:06:89:fa:9f:
66:59:37:4b:ab:e3:0f:27:26:d9:45:68:72:c5:32:
59:b3:e5:10:cb:a4:6f:43:07:05:b1:67:67:c9:0a:
9f:a8:26:05:94:02:e4:57:74:77:24:47:4d:2a:0a:
d5:85:fe:67:94:e2:1b:8e:5b:ee:63:5b:8d:a1:01:
74:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:20:35:10:88:A6:1E:30:0E:F9:C8:58:B0:AD:85:A6:3C:40:B2
X509v3 Authority Key Identifier:
keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34322e302f32342d3234203d3e203531373931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.42.42.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d6:41:4e:12:1f:3a:1b:92:9b:30:f3:1a:dd:ef:17:29:d4:
de:31:45:d2:67:ee:88:98:e9:45:51:25:24:3f:ad:dc:d4:e5:
65:81:e7:f9:3a:98:04:2a:6f:2f:87:27:00:8e:2e:6b:d8:3a:
f4:e9:ac:f0:80:bd:20:a3:ff:ec:00:cf:75:54:04:b9:73:4e:
82:45:5e:bb:98:34:84:e5:10:02:92:b1:d0:e9:9d:7e:be:ec:
aa:41:a9:9e:0e:ef:e6:a2:c3:50:2a:2d:e9:3d:d1:e1:d6:7d:
a9:65:21:04:0a:e4:28:20:6a:96:b3:6d:64:11:b0:9f:bc:71:
96:1d:61:8e:d1:b5:95:25:c1:a7:b0:74:15:5d:df:6f:91:09:
59:b8:a3:a2:91:1d:ac:18:1a:02:0a:fd:c5:58:b0:80:cd:75:
3f:21:f4:89:66:68:d9:8f:43:31:69:55:97:c5:39:56:d4:d2:
89:06:e4:ae:b0:de:6f:74:8a:0d:22:90:2a:da:c7:57:fd:50:
a7:a9:a7:a2:cc:06:8d:4e:41:66:13:8f:41:ac:5c:f6:9c:87:
80:6c:c4:25:68:a7:50:76:f2:28:56:56:52:33:46:8d:1a:d0:
ad:ef:d1:24:8b:d0:42:f8:b4:a9:24:76:4e:b7:7c:a5:d2:da:
4f:08:3f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:05:42 2025 by rpki-client