
$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa
File: 3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: +pHftur3wIqIT8AXBtw0WG0AiSCE82KZR/Wgl5+RX4Q=
Subject key identifier: 03:3A:EE:E5:F1:80:A7:AE:19:37:C1:A1:52:16:FB:00:B6:09:EC:3B
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 2007E632596304481F25C5E490170179C53DABFC
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa
Signing time: Fri 16 Oct 2026 18:36:20 +0000
ROA not before: Fri 16 Oct 2026 18:31:20 +0000
ROA not after: Fri 15 Oct 2027 18:36:20 +0000
asID: 40676
IP address blocks: 104.219.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 08:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:07:e6:32:59:63:04:48:1f:25:c5:e4:90:17:01:79:c5:3d:ab:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Oct 16 18:31:20 2026 GMT
Not After : Oct 15 18:36:20 2027 GMT
Subject: CN=033AEEE5F180A7AE1937C1A15216FB00B609EC3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:f4:c2:fd:a3:fc:57:a3:8f:54:eb:5f:7e:
e0:47:de:9e:de:6d:02:e8:72:19:5c:9f:38:15:df:
75:db:26:8c:ce:15:d0:73:3b:68:3d:e1:f7:75:88:
d2:03:34:0b:dc:45:5e:14:e8:8a:1a:e5:9d:a2:6f:
61:e3:32:20:67:32:3a:9b:ee:42:5f:bb:18:05:0b:
93:ef:33:6d:01:cf:ce:7d:ea:59:b6:13:e5:db:fe:
52:b3:5f:bc:59:c1:c5:c7:81:77:6e:50:cb:5d:f4:
9f:a7:00:93:50:1a:3a:b0:86:3f:d1:14:71:27:7e:
fa:c8:c1:46:1b:e5:84:0d:38:39:e0:e8:87:14:dc:
9a:d7:c1:7d:57:85:7e:ce:ed:5f:56:3e:9e:1f:e2:
b7:41:3c:df:86:e2:33:61:ef:f4:59:ef:d5:75:d2:
81:9e:c5:f0:3c:5a:71:fe:20:2c:2d:41:90:31:fe:
3c:27:af:57:2d:3a:2c:73:1c:64:ee:d0:98:69:4e:
60:84:a4:9d:f2:c0:88:a1:57:20:de:a9:62:41:0e:
45:70:15:dd:fb:ac:7d:5d:1b:0a:e4:cc:ec:f0:c5:
a3:e4:de:67:e5:43:cf:3c:0f:c4:5f:3a:76:50:aa:
69:0f:f8:5f:a6:26:e6:7e:d4:27:48:2d:82:4e:54:
8e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3A:EE:E5:F1:80:A7:AE:19:37:C1:A1:52:16:FB:00:B6:09:EC:3B
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136382e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.219.168.0/24
Signature Algorithm: sha256WithRSAEncryption
95:ce:33:c4:b6:2a:6f:38:19:f4:1d:ee:e3:5f:73:e6:13:49:
90:e8:29:c1:b9:be:af:c3:f0:5e:66:84:cb:36:2d:a4:3b:b3:
ec:14:35:f6:71:01:52:11:36:ab:f1:04:be:5d:05:c0:88:fd:
15:c0:3d:55:fa:e4:30:be:8d:c2:19:ee:37:ee:e0:f8:f7:87:
93:0d:05:3a:3b:07:83:19:96:21:4e:33:4a:a9:0c:02:d3:41:
0e:c8:3e:c6:66:d5:de:1a:cd:63:0c:7b:1b:8b:6f:6c:92:7b:
5a:9b:9a:75:e0:be:85:73:30:fe:da:e3:d6:c8:f4:26:d5:ef:
65:bf:81:97:99:9e:54:90:33:69:7a:e3:4b:95:a9:36:a9:c4:
02:2c:6a:2c:d9:96:13:f4:dc:60:c3:6b:cf:42:ad:be:be:46:
27:a9:10:28:93:3b:89:4b:24:3a:9b:27:64:9a:c9:82:ee:cb:
be:38:ad:72:30:a6:c1:f0:06:17:3e:ca:79:ed:14:03:f8:ba:
f6:81:26:3c:86:27:bc:51:ae:7d:45:02:82:90:0f:e4:76:7a:
17:05:de:13:e7:10:d0:f3:c2:63:d8:d2:7d:67:38:4b:90:34:
ec:0b:34:77:41:94:38:ed:4a:8a:4e:b4:b8:37:82:02:17:99:
8a:cf:b1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 23:08:33 2026 by rpki-client