
$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e382e302f32322d3232203d3e203131343236.roa
File: 3134342e3136382e382e302f32322d3232203d3e203131343236.roa (raw, json)
Hash identifier: j+lHkESQswdcsTKguXb5E7CZni9NaMOQVU0rgUpGFYQ=
Subject key identifier: 51:83:4C:70:D3:4F:D0:16:D9:60:3A:D2:93:50:F1:73:B8:1D:01:AE
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 40E0367ABF57C90674997315E02345DABCBDB9B9
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e382e302f32322d3232203d3e203131343236.roa
Signing time: Fri 16 Oct 2026 18:36:20 +0000
ROA not before: Fri 16 Oct 2026 18:31:20 +0000
ROA not after: Fri 15 Oct 2027 18:36:20 +0000
asID: 11426
IP address blocks: 144.168.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 19:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e0:36:7a:bf:57:c9:06:74:99:73:15:e0:23:45:da:bc:bd:b9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Oct 16 18:31:20 2026 GMT
Not After : Oct 15 18:36:20 2027 GMT
Subject: CN=51834C70D34FD016D9603AD29350F173B81D01AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:b4:87:b7:dc:33:00:92:fd:79:44:5c:b6:
05:e9:fb:d3:c8:ba:6f:82:c3:97:76:c3:22:0c:f7:
ef:bf:4f:9d:1e:86:e1:3e:48:43:56:30:db:54:95:
4d:ae:ca:ce:0f:47:69:0a:db:0d:44:c2:79:29:ee:
f1:ef:4e:e5:da:99:f9:a6:4a:81:40:14:82:08:51:
3e:c4:2f:b0:e3:75:92:97:cc:ec:48:55:f4:de:23:
27:44:07:3d:74:54:bf:a2:e2:3d:a6:d2:a6:25:ba:
17:c0:df:0e:79:03:ac:b7:b1:db:f2:b0:4b:10:dc:
c5:a7:b1:93:4c:a2:fd:c6:30:01:16:f1:85:5b:26:
18:7c:08:f6:5e:cc:81:c4:79:cf:1e:64:03:f5:48:
92:08:63:8e:64:15:89:b2:77:a0:86:15:9c:c3:1f:
5c:ca:2f:a2:fc:6d:fc:9f:87:62:29:80:97:9a:b3:
71:86:78:5f:b3:21:6c:05:5e:89:ea:a6:1f:f6:a5:
6e:e2:50:d0:6f:a6:c2:20:70:7b:f4:eb:38:9a:32:
9f:d5:75:c3:3b:65:37:ad:fa:07:5b:f1:f5:85:04:
b2:65:af:d0:5d:a2:bf:99:5f:c7:e1:72:7a:7e:72:
4c:5a:bc:18:54:79:c3:56:f5:05:4a:7e:5a:81:10:
42:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:83:4C:70:D3:4F:D0:16:D9:60:3A:D2:93:50:F1:73:B8:1D:01:AE
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e382e302f32322d3232203d3e203131343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.8.0/22
Signature Algorithm: sha256WithRSAEncryption
45:de:47:74:d2:4e:eb:f9:48:91:8c:e6:b9:d1:1d:75:58:21:
e6:0f:53:68:53:76:a3:64:6b:37:b4:87:e5:fa:6e:39:c9:14:
e1:d8:4a:bf:16:7a:b3:1c:75:17:5b:61:b4:34:91:5c:fc:70:
57:04:e9:7c:df:f4:e7:94:5d:19:f7:99:c5:ef:47:1e:5c:74:
03:27:70:19:80:05:1a:a8:f8:7c:7d:6d:e5:b4:a5:fe:e2:3b:
0f:61:6f:f2:dd:25:0a:39:c6:94:9a:c4:3a:d3:b5:3c:84:bf:
11:59:a7:35:4d:2c:58:0e:d5:44:32:3b:d4:ff:15:5b:af:a7:
6e:5b:e2:0a:7b:88:c8:d4:c2:2b:8f:47:34:e3:2a:c6:6a:92:
cb:7a:48:39:72:ab:90:b6:da:59:d6:11:b7:65:e8:45:52:99:
b3:ee:d9:62:79:09:b8:fc:bd:c4:a0:85:7a:d3:5a:70:80:5b:
5f:78:77:7e:d7:04:2b:37:17:65:64:ea:d4:59:e5:23:bc:dd:
19:c0:24:40:81:ea:18:8a:c7:9f:e5:81:87:b8:b8:79:e8:5e:
f7:bb:97:ff:91:ac:de:fb:1e:6e:f1:47:1d:18:f4:53:a8:b9:
de:75:96:dd:68:ed:38:20:a0:4c:58:58:b3:21:fd:02:12:86:
38:c1:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:16:53 2026 by rpki-client