
$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa
File: 3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: Cp/xWHIvIXn/9nT8nphIcbt8PH5CNr3ibN+cLGxSywA=
Subject key identifier: A3:43:C8:23:F7:39:37:8E:8F:44:2C:6A:D2:38:0A:17:1E:B2:3A:EB
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 6E43D81AA28CD8449CC6EFC4EB99A9BDF4519756
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa
Signing time: Fri 16 Oct 2026 18:36:21 +0000
ROA not before: Fri 16 Oct 2026 18:31:21 +0000
ROA not after: Fri 15 Oct 2027 18:36:21 +0000
asID: 40676
IP address blocks: 104.219.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 08:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:43:d8:1a:a2:8c:d8:44:9c:c6:ef:c4:eb:99:a9:bd:f4:51:97:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Oct 16 18:31:21 2026 GMT
Not After : Oct 15 18:36:21 2027 GMT
Subject: CN=A343C823F739378E8F442C6AD2380A171EB23AEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ab:5b:29:39:18:9b:fc:5e:8d:a7:84:b1:60:
b4:28:e5:cd:39:45:6a:b9:ec:88:1e:ee:66:7c:d4:
5c:f6:f6:99:0d:7c:0c:29:f6:4f:ab:82:56:45:93:
c7:49:c4:f1:c1:85:89:f0:81:bd:1d:d7:a8:79:fe:
fa:b7:33:20:d8:dc:0b:72:ce:b3:c4:a9:40:04:cd:
a1:5b:d3:b7:41:88:e4:ba:3d:02:f9:9e:20:c7:ce:
0e:d4:0b:16:22:06:77:47:b8:e7:cd:e2:63:62:73:
fc:f1:52:e8:db:e1:5e:28:6c:ae:fc:80:0f:dd:97:
50:cc:cd:41:47:8d:81:b2:a8:35:36:39:84:01:f4:
22:2d:6f:f8:1f:aa:c1:2d:73:df:5c:d5:6c:c7:38:
78:d5:96:b5:bf:66:85:6f:a6:f5:40:37:b2:c4:e0:
b5:9f:56:df:9e:fb:46:84:56:80:db:0e:f8:f1:f5:
9a:4f:29:50:26:ee:02:4a:48:ee:f2:59:2d:09:66:
e1:cd:67:c2:0e:e7:22:71:33:03:a5:52:4b:2f:3e:
5c:ee:88:05:13:13:f5:6e:55:1a:f4:25:0b:bf:c7:
0d:d7:e1:b9:6c:49:7f:f4:78:16:f7:e8:8b:80:ed:
75:04:7e:2a:8c:6b:5d:45:1d:1f:ff:af:b0:89:4b:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:43:C8:23:F7:39:37:8E:8F:44:2C:6A:D2:38:0A:17:1E:B2:3A:EB
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.219.169.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e0:82:27:17:97:22:08:e3:fa:b4:a4:78:95:b4:0e:2a:9a:
9c:66:1a:04:ce:7e:2b:94:d1:3e:fe:d0:87:d9:60:61:21:44:
28:f2:42:2d:93:36:7f:f8:1d:66:6e:27:01:a5:b9:80:da:58:
63:0d:9f:49:71:ba:74:34:d1:54:60:6b:75:a2:65:16:8f:61:
96:48:b7:f7:fa:10:9f:aa:07:f5:b4:9f:8d:35:a6:52:7f:0f:
f6:9e:c4:ff:1e:ac:5f:9f:9a:a5:1a:77:1b:8d:9f:34:70:58:
68:11:2f:c7:ac:19:2a:03:c8:c7:be:8b:28:c5:8e:b4:24:a2:
06:a3:10:14:7e:17:de:db:3a:d1:a3:2e:3c:8f:c4:b7:83:6b:
14:08:7c:f2:13:96:b2:fc:30:95:8f:b9:49:34:3d:ae:8a:52:
35:f8:5e:19:70:7e:4a:da:6e:d2:f9:6e:c4:6c:a2:a9:b5:51:
81:31:d9:1c:dc:1b:b0:95:d8:23:a5:9e:56:ac:4d:50:cc:99:
ca:41:81:99:24:90:25:4f:c1:b1:bf:2d:b4:55:2c:7c:d9:a8:
ea:65:b3:fe:07:2b:ec:e8:ba:90:95:49:50:23:d7:e5:22:65:
f6:02:c6:38:73:4e:7a:83:f1:5a:bf:7a:a8:c8:6f:c7:88:4e:
aa:90:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 23:09:07 2026 by rpki-client