
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa
File: 3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: Er+vGxCctWbkIfT4f8rFn7NXCL2rLk09ssGfj7R1nDs=
Subject key identifier: A9:DF:33:45:2D:B8:07:F9:3B:AE:98:0A:5C:74:BD:C3:F4:26:81:FB
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 45717271287111A7B21B26F5B867F2912D16F2AB
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa
Signing time: Fri 14 Nov 2025 18:29:44 +0000
ROA not before: Fri 14 Nov 2025 18:24:44 +0000
ROA not after: Fri 13 Nov 2026 18:29:44 +0000
asID: 40676
IP address blocks: 104.219.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:71:72:71:28:71:11:a7:b2:1b:26:f5:b8:67:f2:91:2d:16:f2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:44 2025 GMT
Not After : Nov 13 18:29:44 2026 GMT
Subject: CN=A9DF33452DB807F93BAE980A5C74BDC3F42681FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:f8:f3:e8:c7:f4:81:60:6e:49:5d:8f:27:
5e:db:79:6c:76:cc:d3:7e:25:c3:55:11:fc:24:6c:
53:51:d8:a3:e7:1c:d7:a6:70:6a:a6:f3:88:86:c9:
d2:d3:06:5a:01:30:13:0e:a2:63:84:00:fe:58:86:
a9:6f:d1:82:55:84:f3:e0:04:a9:cb:a7:4e:6f:64:
76:47:ff:74:d1:c9:6b:19:b3:63:b2:ca:22:c1:25:
99:23:a0:f0:9e:87:63:5e:7b:43:67:d8:68:c9:2d:
49:04:74:5a:b1:07:f7:6e:c7:03:10:96:b9:9d:97:
ff:9f:5a:c3:72:1e:26:36:ce:6e:ab:d4:7c:32:f3:
29:51:45:99:c0:fd:65:08:42:57:cb:bc:ec:5a:8b:
74:9a:13:65:1e:93:82:08:e2:ed:f0:e0:49:f0:48:
b8:df:cc:94:5b:10:c4:49:5c:e1:2c:c5:4a:d4:f0:
f2:bc:46:85:71:01:9b:08:dc:2f:a6:ea:a6:2a:59:
4c:29:8e:c2:b1:35:5d:51:9b:e4:52:61:b7:4f:d6:
7e:b3:15:f8:15:fe:2f:68:49:40:8b:a3:e9:0f:b9:
2b:9f:6a:a1:a8:91:b7:f0:4e:01:7e:1b:fd:ce:93:
53:76:a8:0e:57:60:6a:35:f0:e4:bb:94:e7:bc:25:
42:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:33:45:2D:B8:07:F9:3B:AE:98:0A:5C:74:BD:C3:F4:26:81:FB
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.219.168.0/24
Signature Algorithm: sha256WithRSAEncryption
58:49:f9:ad:2c:d5:64:fd:4b:85:89:0d:86:ff:52:14:f7:67:
bc:57:65:79:38:a8:39:d9:7d:b4:1b:d7:a6:9c:8d:40:08:a9:
67:60:cb:72:0f:b1:c4:c1:aa:84:52:8f:a7:6e:e7:20:87:e8:
25:f0:4c:65:3e:b8:1d:c4:42:6e:7d:4e:18:d0:54:cd:63:89:
22:fc:42:e5:05:aa:c4:e6:c5:49:bd:ac:96:3d:a5:46:f4:dc:
b9:e7:71:32:aa:91:37:22:04:17:21:71:74:4c:ff:40:92:f4:
05:0d:e4:1a:a0:b7:b4:10:88:a2:18:59:34:42:ec:5f:0e:a1:
69:38:0d:a4:56:e9:06:81:ef:32:40:2e:5b:d2:7a:42:82:52:
d9:3e:3a:22:98:82:af:a3:55:60:47:e0:88:75:a3:1f:e4:91:
ba:24:3f:b3:7d:59:b6:fc:6d:44:47:11:4d:12:83:10:fd:85:
84:37:e6:be:af:83:e6:51:01:a6:1d:18:cf:c4:ba:c2:86:bd:
58:57:8f:d1:7f:1e:c6:1a:56:be:b6:b1:41:e0:db:df:a1:be:
c9:61:45:de:bc:ba:28:d8:86:ba:94:de:d9:af:c3:7c:17:a4:
22:08:7d:fa:1c:36:35:3b:df:33:94:93:d9:71:54:45:3d:f7:
87:22:04:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 18 08:36:44 2025 by rpki-client