
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa
File: 3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier: Va3+j5mV3riy3B9jh30gzQ4a7pX+HLqKO0Y/y4w5lh4=
Subject key identifier: 18:B8:94:F6:18:A3:DD:58:0A:BC:65:17:CB:A7:61:0A:1A:08:AC:C7
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 6630B91B13E5DC6ADE17505DE1D4F5EE718FD321
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa
Signing time: Fri 14 Nov 2025 18:29:44 +0000
ROA not before: Fri 14 Nov 2025 18:24:44 +0000
ROA not after: Fri 13 Nov 2026 18:29:44 +0000
asID: 40676
IP address blocks: 104.219.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Nov 2025 17:13:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:30:b9:1b:13:e5:dc:6a:de:17:50:5d:e1:d4:f5:ee:71:8f:d3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Nov 14 18:24:44 2025 GMT
Not After : Nov 13 18:29:44 2026 GMT
Subject: CN=18B894F618A3DD580ABC6517CBA7610A1A08ACC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:e7:6a:ba:d5:c5:e5:62:a5:fa:2a:b0:2f:
06:32:5e:2e:f2:10:61:d7:09:e4:ea:b9:4c:cb:fa:
d5:0c:76:72:7b:53:37:33:1f:e0:08:0b:1f:47:36:
19:e3:3b:3d:fc:36:9f:c6:17:63:55:82:84:01:86:
40:ab:99:fc:bf:b5:1a:2f:3f:05:ca:19:6f:1b:11:
fc:1e:ff:1f:d0:9a:9f:a8:76:bd:04:a0:51:2b:4c:
13:36:03:b3:11:8b:c1:39:e9:4c:49:c4:72:b8:b7:
33:d7:1f:ea:87:58:d8:38:d9:ee:04:24:9d:c3:8b:
24:e2:ad:0b:2a:4f:e6:fc:fb:20:60:cb:04:0c:b8:
84:21:70:6b:92:b3:01:c2:c9:99:db:3b:79:85:8e:
d3:89:c0:83:5c:d6:12:15:a9:e3:84:76:10:60:77:
33:f8:71:a5:f7:30:1e:34:96:ae:6d:a9:36:76:e8:
57:1a:45:92:9c:01:b6:c4:c6:ac:35:03:7c:39:36:
b1:bb:c2:5e:51:07:b0:4b:db:bb:c7:ff:27:c3:1e:
81:03:76:fc:80:35:73:cb:94:45:3d:d1:e5:cb:e9:
39:5f:f6:38:db:cf:a7:9f:c4:db:12:8d:06:62:55:
a1:66:33:da:5d:be:32:60:82:db:51:12:3e:06:39:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B8:94:F6:18:A3:DD:58:0A:BC:65:17:CB:A7:61:0A:1A:08:AC:C7
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3136392e302f32342d3234203d3e203430363736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.219.169.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a4:99:37:b7:0e:bc:f5:de:6b:aa:f4:26:5f:8b:e0:e2:11:
48:de:f3:6b:cd:5e:f2:79:c1:8c:42:c9:c8:6f:26:b4:8b:9d:
a9:c2:aa:9e:7d:8c:05:80:49:6f:58:01:91:1b:10:8b:8e:57:
95:07:d5:21:d2:75:ce:b7:e6:4c:aa:09:7e:7f:81:d2:d3:6f:
06:b9:54:e7:91:6d:27:4d:ec:6a:2e:37:40:f2:de:1f:26:6d:
e9:8f:66:7a:6c:4a:d3:1d:fc:7b:44:52:d6:8c:a1:bc:32:be:
4f:a4:e1:e1:77:d6:12:b0:6f:ef:e9:a2:36:60:82:4b:30:89:
94:8d:00:d6:6d:ae:e4:a1:eb:73:75:24:75:8f:40:ea:2c:90:
19:00:21:49:35:f2:7e:96:4e:06:69:cf:99:c6:ec:71:f3:f7:
9a:d4:e7:41:f7:67:17:b2:71:5f:e3:10:72:3f:1b:1f:6d:b2:
75:b2:10:01:76:7c:f6:f7:70:fb:6c:47:e4:d4:d8:5b:15:92:
ae:11:0c:52:e5:49:04:f8:8e:fc:e8:14:03:d3:d2:ce:79:b7:
00:54:76:99:57:70:45:db:ed:15:97:9c:17:ec:cb:34:7f:be:
9b:eb:d7:4d:3f:c9:63:52:d4:f1:3b:71:f4:8f:6c:57:e9:60:
77:3d:8d:74
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUZjC5GxPl3GreF1Bd4dT17nGP0yEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk
MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0
WjAzMTEwLwYDVQQDEygxOEI4OTRGNjE4QTNERDU4MEFCQzY1MTdDQkE3NjEwQTFB
MDhBQ0M3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4LnarrVxeVi
pfoqsC8GMl4u8hBh1wnk6rlMy/rVDHZye1M3Mx/gCAsfRzYZ4zs9/DafxhdjVYKE
AYZAq5n8v7UaLz8FyhlvGxH8Hv8f0JqfqHa9BKBRK0wTNgOzEYvBOelMScRyuLcz
1x/qh1jYONnuBCSdw4sk4q0LKk/m/PsgYMsEDLiEIXBrkrMBwsmZ2zt5hY7TicCD
XNYSFanjhHYQYHcz+HGl9zAeNJaubak2duhXGkWSnAG2xMasNQN8OTaxu8JeUQew
S9u7x/8nwx6BA3b8gDVzy5RFPdHly+k5X/Y428+nn8TbEo0GYlWhZjPaXb4yYILb
URI+Bjl+CQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBi4lPYYo91YCrxlF8unYQoa
CKzHMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv
RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx
MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4
MTc1NGY0ZTY0OS8wLzMxMzAzNDJlMzIzMTM5MmUzMTM2MzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzYzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaNupMA0GCSqGSIb3DQEB
CwUAA4IBAQAopJk3tw689d5rqvQmX4vg4hFI3vNrzV7yecGMQsnIbya0i52pwqqe
fYwFgElvWAGRGxCLjleVB9Uh0nXOt+ZMqgl+f4HS028GuVTnkW0nTexqLjdA8t4f
Jm3pj2Z6bErTHfx7RFLWjKG8Mr5PpOHhd9YSsG/v6aI2YIJLMImUjQDWba7koetz
dSR1j0DqLJAZACFJNfJ+lk4Gac+Zxuxx8/ea1OdB92cXsnFf4xByPxsfbbJ1shAB
dnz293D7bEfk1NhbFZKuEQxS5UkE+I786BQD09LOebcAVHaZV3BF2+0Vl5wX7Ms0
f76b69dNP8ljUtTxO3H0j2xX6WB3PY10
-----END CERTIFICATE-----
Generated at Tue Nov 18 08:36:43 2025 by rpki-client