
$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31362e302f32312d3231203d3e203430323634.roa
File: 3134342e3136382e31362e302f32312d3231203d3e203430323634.roa (raw, json)
Hash identifier: R5xyZTEPJ1iuxDTY2kLU/54ljneIX0g6aO/8jsR0hpg=
Subject key identifier: 87:0E:41:FD:E0:FF:34:F4:E5:72:04:AF:29:97:5D:22:A3:E2:A6:2C
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 33E57A6AE342E502F228F7E98B81E5DC2659AB78
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31362e302f32312d3231203d3e203430323634.roa
Signing time: Fri 16 Oct 2026 18:36:20 +0000
ROA not before: Fri 16 Oct 2026 18:31:20 +0000
ROA not after: Fri 15 Oct 2027 18:36:20 +0000
asID: 40264
IP address blocks: 144.168.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 23 Oct 2026 02:55:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:e5:7a:6a:e3:42:e5:02:f2:28:f7:e9:8b:81:e5:dc:26:59:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Oct 16 18:31:20 2026 GMT
Not After : Oct 15 18:36:20 2027 GMT
Subject: CN=870E41FDE0FF34F4E57204AF29975D22A3E2A62C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:ef:c3:5b:05:71:09:48:07:c8:63:88:8b:
3b:9c:82:6e:66:65:a4:c0:fd:c2:77:96:d9:8a:d1:
b7:cb:62:5e:e4:32:31:67:b5:37:58:2c:af:b7:c8:
ef:cf:80:ec:d4:35:9d:ca:b5:8e:1b:5a:d5:37:5d:
c4:85:2f:34:c6:90:a1:5e:70:af:8d:08:9c:c3:1f:
41:0f:b4:f6:24:f1:88:c9:fc:63:e6:4c:c3:de:7b:
c0:82:c7:4e:cd:5a:e0:a9:6b:6a:d9:a3:89:31:ac:
08:48:63:c3:70:8c:7c:38:a5:b2:85:e7:9b:46:b3:
96:34:d4:eb:d7:39:75:d3:72:45:db:fb:2f:c3:c9:
27:e2:c7:18:a6:24:f4:c9:d1:98:44:16:b0:fb:0e:
55:6e:ec:0b:4d:e4:1b:84:d7:81:6d:24:4d:b6:00:
eb:1d:ab:b7:4e:40:40:df:f9:27:cd:09:61:ad:b9:
43:27:ff:c5:e7:36:2b:f7:e5:39:eb:3b:d1:ee:71:
17:2f:8b:60:ea:31:89:41:e9:31:12:a9:53:32:df:
ef:9b:23:18:e5:bd:70:73:46:fb:b5:e2:68:64:d8:
13:69:8f:59:c0:b5:6a:e3:53:6f:1f:8c:ab:ee:76:
d0:0c:1e:eb:fa:a6:16:d8:e3:97:27:fd:1e:4a:1e:
6f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:41:FD:E0:FF:34:F4:E5:72:04:AF:29:97:5D:22:A3:E2:A6:2C
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31362e302f32312d3231203d3e203430323634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.16.0/21
Signature Algorithm: sha256WithRSAEncryption
31:af:6a:05:52:87:dd:08:05:40:51:88:79:0b:69:4e:6e:9c:
94:6d:39:ef:83:fa:a7:75:03:23:b4:e1:4b:a6:a7:b7:07:bc:
71:cb:21:2c:a6:5d:c5:13:33:33:9c:e3:77:b1:d9:08:b9:6d:
3e:b5:4f:f3:aa:d8:bc:f4:91:4d:42:92:98:48:9a:f9:cf:44:
a7:3d:86:9f:f6:37:2d:17:b3:d0:23:40:65:8f:39:43:68:f5:
96:f4:6e:3e:b7:e7:9f:fe:38:85:26:e7:65:8f:33:86:56:28:
57:b5:39:85:a5:89:02:4b:4c:7f:55:6e:f5:fe:70:7d:21:63:
ea:e9:cf:77:ba:5e:28:1c:c2:57:b6:3d:5c:12:e2:d2:6c:6f:
fb:07:d4:cc:e0:37:5d:1e:38:79:a9:4c:d6:bb:c1:7d:36:bc:
5a:55:88:83:fa:e9:ab:ed:94:55:0e:ba:75:44:68:1b:21:6b:
85:8e:e3:2d:c9:30:99:97:91:9a:6b:c8:97:a0:4a:4a:ad:5e:
a3:d8:5e:42:45:f8:54:bc:f3:6a:26:a3:60:47:fa:69:60:9c:
8b:8d:ec:3d:a8:38:3e:08:7e:1e:39:40:04:69:3e:95:f0:e1:
4f:2e:d8:b7:6b:8d:6a:00:1c:09:16:dd:7b:c4:d6:e7:e0:84:
e2:92:36:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:56:24 2026 by rpki-client