
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa
File: 32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa (raw, json)
Hash identifier: AoE5SI1d851mZX+EZYZ4mhS4XBSEd6yhpQL1SgxMaPU=
Subject key identifier: 9A:36:B5:81:F3:6A:19:BF:73:E3:3C:36:E0:4B:C9:7F:7B:61:D6:9F
Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Certificate serial: 604A00C3DF6E90BA3B6828933F4FF5ECFFE5C154
Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa
Signing time: Sat 19 Jul 2025 18:05:10 +0000
ROA not before: Sat 19 Jul 2025 18:00:10 +0000
ROA not after: Sat 18 Jul 2026 18:05:10 +0000
asID: 142046
IP address blocks: 23.147.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Oct 2025 11:31:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:4a:00:c3:df:6e:90:ba:3b:68:28:93:3f:4f:f5:ec:ff:e5:c1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44
Validity
Not Before: Jul 19 18:00:10 2025 GMT
Not After : Jul 18 18:05:10 2026 GMT
Subject: CN=9A36B581F36A19BF73E33C36E04BC97F7B61D69F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:ae:a7:45:87:2d:61:48:fb:90:dc:3a:f0:
5a:45:f9:19:94:8d:b1:69:d8:14:86:18:3c:7a:50:
f3:73:e9:e9:8f:f2:2e:4e:14:44:2d:29:e5:4e:19:
13:58:cf:fe:1b:f8:76:c7:1a:6b:c4:78:29:ee:a3:
0f:e8:67:06:f8:00:24:63:54:3e:d7:ac:0f:3e:dc:
9c:67:52:a6:5e:67:1c:79:14:c3:37:0e:53:4d:fa:
e6:d5:1f:1f:a6:7f:4c:4d:80:1b:9f:37:7d:b7:a2:
6d:01:69:ba:de:70:6b:24:5d:69:ca:4f:b4:79:2f:
77:94:e6:f2:3f:b9:76:b3:d0:90:e8:f2:83:bb:f1:
71:63:df:34:76:e4:9c:35:f5:64:1c:32:81:f7:7d:
55:58:c6:4b:83:e2:da:a1:e6:89:5c:84:54:95:40:
73:d1:4a:b3:65:11:64:17:1d:c9:c6:fc:1f:84:d4:
5e:90:46:90:c6:1f:3c:ff:fc:0d:c0:01:00:0a:0c:
dc:02:32:e1:e2:40:4b:37:9c:7f:8d:a5:9b:0c:02:
2e:85:eb:7d:bc:47:d8:b5:76:55:7c:44:84:fb:11:
f4:b8:b6:1d:16:b7:c7:18:ec:82:b4:c7:5e:4c:07:
94:1c:b4:02:d9:e5:0e:d9:e4:6e:d6:41:9f:5b:f3:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:B5:81:F3:6A:19:BF:73:E3:3C:36:E0:4B:C9:7F:7B:61:D6:9F
X509v3 Authority Key Identifier:
keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.147.120.0/24
Signature Algorithm: sha256WithRSAEncryption
81:62:65:99:01:ad:00:0b:86:1f:30:83:7c:33:4a:d5:8a:3f:
04:90:0c:c5:61:f6:0c:e4:a3:b7:9f:26:44:71:24:9f:03:a5:
f5:99:d3:f6:f3:23:fa:21:f9:0e:e7:f2:d9:78:78:19:86:e2:
c7:6e:a5:6d:ab:93:20:af:91:fb:05:5f:4c:0d:8d:dd:85:92:
12:5e:3f:3b:29:69:46:0c:7c:cf:38:db:67:71:82:21:90:ec:
c2:a5:ec:68:8b:d9:3c:7a:fd:74:4d:de:b6:29:8e:28:95:16:
37:d3:8b:b1:00:08:3b:94:9b:64:15:d7:94:7e:74:db:8a:05:
c9:62:f2:65:ad:93:dc:32:76:1b:75:f7:e1:f3:84:80:d1:b8:
80:c6:07:33:98:01:0c:5c:e4:95:01:04:d5:11:11:de:df:e1:
4f:60:6c:a3:13:53:f9:ed:49:fa:63:c9:c1:c0:88:36:6a:e9:
59:67:d3:34:45:0d:3e:3b:32:8d:4b:9a:e0:e3:02:bd:75:f0:
a9:af:c8:49:1e:b6:93:f5:0a:9c:75:76:78:a5:04:11:29:1d:
4f:37:5d:f0:79:2a:b2:ee:77:7d:d6:9b:0c:71:47:ef:7a:7f:
9b:69:f6:a3:ea:64:86:99:05:06:ce:3d:81:76:5b:07:72:69:
25:b1:3f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:19:38 2025 by rpki-client