
$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31322e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e31322e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: AUzSpL5hDRB0SM+MMqS7F7M8p7yryv2qoqVwL4nxTV0=
Subject key identifier: CB:20:9B:A5:5D:27:82:6D:8E:9A:43:15:8F:9D:91:B2:4B:16:34:49
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 60A97EB7E626EE9F3C58B655219CCC0F84EE885E
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31322e302f32342d3234203d3e203534303034.roa
Signing time: Fri 16 Oct 2026 18:36:21 +0000
ROA not before: Fri 16 Oct 2026 18:31:21 +0000
ROA not after: Fri 15 Oct 2027 18:36:21 +0000
asID: 54004
IP address blocks: 144.168.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 05:07:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a9:7e:b7:e6:26:ee:9f:3c:58:b6:55:21:9c:cc:0f:84:ee:88:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Oct 16 18:31:21 2026 GMT
Not After : Oct 15 18:36:21 2027 GMT
Subject: CN=CB209BA55D27826D8E9A43158F9D91B24B163449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:51:ad:1d:19:59:b1:bc:e1:2e:46:ce:9f:
c7:b1:a6:32:0b:18:b5:21:d8:e0:89:6e:b2:25:ff:
f7:10:33:5b:e0:f0:1d:ce:bc:bf:2e:fb:44:04:01:
d6:89:33:46:8d:1f:48:25:24:32:20:ee:24:96:b6:
08:4d:16:06:2b:55:62:95:0b:74:1c:4d:84:09:07:
40:55:0e:79:e8:77:40:55:be:fd:6f:fc:47:d4:ae:
99:3c:56:1f:96:cb:43:c0:9d:86:a9:31:24:58:1f:
d6:e2:4f:42:21:01:f0:01:d1:9e:52:52:7f:df:9a:
ad:c3:17:c3:19:a7:a0:31:8f:96:fa:ac:fe:95:18:
33:68:99:1e:33:b3:53:f4:74:5d:d7:93:f3:ed:06:
a6:ba:02:98:4f:31:c6:73:bd:19:56:29:c1:20:37:
0b:7c:eb:a1:f4:1f:fc:03:5f:c5:aa:87:a3:ca:4f:
12:bd:43:f3:e5:42:1a:73:70:89:4d:5f:5b:42:37:
99:12:8b:b4:e3:b1:23:48:7d:c3:12:f6:93:d4:89:
2c:76:e5:d0:6b:d1:77:d5:37:ea:26:89:b3:9f:7b:
2b:39:c6:fe:58:ba:e3:cd:a9:07:28:19:e6:05:ce:
cc:72:c9:60:8c:a1:a8:7d:a9:53:c3:9b:68:f7:7b:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:9B:A5:5D:27:82:6D:8E:9A:43:15:8F:9D:91:B2:4B:16:34:49
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31322e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.12.0/24
Signature Algorithm: sha256WithRSAEncryption
98:f5:af:00:d8:15:37:f6:87:ca:92:e4:b7:ee:fd:0e:36:3c:
ec:b2:09:9c:01:d1:28:ca:69:f7:9e:a9:fd:f6:bb:ba:ae:8f:
5e:4d:16:84:79:da:ee:47:b6:07:75:9f:b3:83:3d:ec:7c:60:
cf:1c:79:42:7d:98:c5:e1:fc:3e:e6:91:44:38:30:76:25:68:
34:34:87:ad:46:35:a6:e5:74:ba:f9:70:15:58:89:c6:22:8e:
39:5e:61:e1:d7:ad:ea:13:9b:11:67:e4:fe:52:57:e6:e9:fe:
82:58:82:1c:3a:d6:11:38:cc:45:9e:88:21:5d:d3:f9:97:56:
fc:90:2d:35:c2:91:70:fb:42:e1:03:7d:1c:22:33:e1:30:18:
bb:b5:c5:12:c4:38:2b:af:98:d5:11:24:59:d4:8b:60:0d:a8:
a5:e9:44:62:9b:9c:52:65:5c:6d:96:5d:ae:0e:58:25:8a:2b:
f6:dc:c2:23:58:73:8f:c3:ff:fc:28:45:f1:70:20:38:c4:b6:
aa:ea:eb:30:25:6b:e7:1b:16:58:1a:1f:8f:ea:2f:0a:9b:5c:
8e:93:f8:32:03:a6:3a:3c:cf:81:24:48:f3:20:92:90:cf:e2:
33:f5:30:af:b4:0c:ba:f2:10:8d:5c:55:a5:38:3f:44:e5:ad:
3f:3f:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:07:12 2026 by rpki-client