
$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
File: 3134342e3136382e31332e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: +v0vGPnnb23PynuE+EMI0svqQ27Dp85euHV1XA+r5EU=
Subject key identifier: 70:42:E9:3B:A1:B4:A3:C2:88:72:F9:5D:1F:FA:90:84:29:05:50:EE
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 365BCE8C8F211A45FCF343B5B68911C8F22386CC
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
Signing time: Fri 16 Oct 2026 18:36:20 +0000
ROA not before: Fri 16 Oct 2026 18:31:20 +0000
ROA not after: Fri 15 Oct 2027 18:36:20 +0000
asID: 54004
IP address blocks: 144.168.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 08:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:ce:8c:8f:21:1a:45:fc:f3:43:b5:b6:89:11:c8:f2:23:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Oct 16 18:31:20 2026 GMT
Not After : Oct 15 18:36:20 2027 GMT
Subject: CN=7042E93BA1B4A3C28872F95D1FFA9084290550EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d3:d7:29:c6:25:dd:71:ff:f1:1f:ab:61:e4:
c9:2f:f9:b4:c2:a7:9f:eb:83:bd:01:b8:a9:d4:02:
53:f4:b8:d1:f6:a5:b4:65:d5:5d:5b:a6:fb:b3:0d:
3d:3a:fc:73:6c:68:86:76:b8:4c:c0:f1:39:3b:a9:
38:83:ee:74:0f:68:b0:f5:54:1f:60:df:ab:c3:14:
c0:d3:ab:57:4c:bf:d2:3a:b3:f9:ad:84:80:9e:66:
ca:f1:76:33:2a:c4:81:43:c4:68:0c:14:c0:b2:07:
fe:56:de:17:a6:15:c0:59:63:07:24:13:fc:18:73:
ac:e1:9d:40:7d:b8:a3:84:bc:ee:ac:cb:ec:30:52:
99:b8:d0:77:e6:f6:87:b2:20:92:93:e6:21:3b:47:
35:40:73:09:35:cb:cf:87:bd:05:f1:20:38:e1:6a:
e8:30:01:3e:be:20:ad:84:c8:15:1e:30:91:a3:7a:
e2:e2:e4:4d:7c:46:c7:5e:76:87:37:42:88:ba:43:
b1:41:4c:30:61:e6:34:3c:63:a4:32:17:8a:33:31:
13:68:ea:1f:7b:ab:b1:51:ca:7f:63:af:ee:5c:84:
da:44:a2:e8:c9:a7:ae:61:83:fc:38:cc:d4:82:c2:
9f:da:ab:36:5c:97:bc:4c:cf:d6:67:53:5e:c7:03:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:42:E9:3B:A1:B4:A3:C2:88:72:F9:5D:1F:FA:90:84:29:05:50:EE
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31332e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.13.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e3:9d:66:d3:06:f3:75:fd:a0:a0:df:df:69:c1:fd:ec:4f:
5a:7e:03:bc:c3:b1:ce:64:6a:28:40:0a:e7:22:72:d1:bb:68:
24:8c:9a:a6:06:01:d7:cc:98:b6:b4:37:e8:25:d3:bc:6d:9a:
57:16:b3:b8:d7:65:96:9f:af:eb:a9:25:41:7e:79:77:9b:e4:
53:a2:f0:bc:a6:cd:3f:36:52:90:f4:55:38:fe:a1:3f:22:ea:
a6:70:b1:6f:10:3a:10:76:79:6c:9c:ee:2d:da:69:f2:35:d7:
e9:95:21:44:68:b7:50:c5:90:19:0e:a6:2b:e1:25:42:41:ea:
05:b6:bb:09:17:db:6f:f8:7f:75:f0:55:ec:2e:a8:8b:9a:f8:
88:2e:90:f7:d9:8a:2f:d9:c2:2f:4b:df:c8:cc:8b:04:59:af:
80:3e:da:9b:90:88:c1:af:89:d9:25:44:04:93:c5:cb:b0:28:
53:59:65:4a:ea:28:27:f1:e7:72:7d:64:6d:25:dc:1d:71:24:
7f:25:b1:d6:f7:f2:f2:a4:fb:36:cb:66:ae:35:6f:88:61:ea:
49:5e:3a:7d:5d:2f:c8:4b:78:56:1d:af:69:c2:e5:5c:e8:ad:
2e:fc:a4:8b:7d:03:28:57:98:a2:54:20:9c:cb:c1:68:4a:5b:
a5:33:09:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:20:03 2026 by rpki-client