
$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2039333034.roa
File: 3136352e3134302e32352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier: oXxBG78HnQQPoVcVjfijLvrQF/Qc12X4uwNAXz0AYZw=
Subject key identifier: E3:63:F1:FD:A9:9B:0D:AE:F5:1E:2B:B2:13:13:A6:1F:AB:68:7C:8F
Certificate issuer: /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial: 349EAEB5B709DCB389F77A7E1D0CA914266BDF28
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2039333034.roa
Signing time: Sun 21 Sep 2025 07:02:33 +0000
ROA not before: Sun 21 Sep 2025 06:57:33 +0000
ROA not after: Sun 20 Sep 2026 07:02:33 +0000
asID: 9304
IP address blocks: 165.140.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 15:21:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:9e:ae:b5:b7:09:dc:b3:89:f7:7a:7e:1d:0c:a9:14:26:6b:df:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Validity
Not Before: Sep 21 06:57:33 2025 GMT
Not After : Sep 20 07:02:33 2026 GMT
Subject: CN=E363F1FDA99B0DAEF51E2BB21313A61FAB687C8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:74:c7:b0:1e:d8:e2:3f:5a:bf:6d:aa:79:09:
0f:24:33:c4:45:87:22:e5:fc:25:77:45:11:6d:2b:
c8:83:6f:4a:29:5c:e0:ac:84:d8:bd:aa:66:8d:bb:
9d:5b:7e:e0:c2:4c:bf:da:0f:8d:6a:23:48:69:02:
bb:39:b4:f0:20:56:c5:94:26:54:3e:56:e2:75:93:
b8:26:f6:f0:fa:de:71:0c:4d:aa:8e:b4:a3:1c:1c:
d5:30:80:52:ea:57:5a:73:06:09:ed:d9:60:2b:bc:
10:aa:01:b9:75:6f:10:51:22:e8:65:a5:5d:65:3b:
ad:9c:1e:db:57:d9:4e:6e:a0:99:dd:b3:81:fc:71:
a4:11:0d:81:bd:d9:f5:e8:38:68:4f:4a:bb:8d:23:
ac:a3:5d:47:f2:9f:5b:48:fa:a7:10:af:34:6b:9e:
75:4f:ad:c1:29:1b:ca:3e:2a:2c:08:11:cc:12:6b:
15:c8:76:0d:47:55:4c:4d:a4:e5:26:d0:ad:24:50:
e5:f9:73:b9:c7:e3:7d:1b:a3:7c:38:f9:3f:8d:86:
a9:9e:1a:34:19:71:10:e6:9d:ed:30:da:e9:25:48:
79:26:e9:42:89:c9:8a:08:a7:d5:aa:c5:b5:f4:06:
36:f3:b4:52:04:8f:2c:2c:35:b2:85:76:25:51:3a:
e2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:F1:FD:A9:9B:0D:AE:F5:1E:2B:B2:13:13:A6:1F:AB:68:7C:8F
X509v3 Authority Key Identifier:
keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e6:52:47:53:58:ed:a2:82:ca:de:35:19:38:18:cf:5f:fa:
0f:bd:68:1f:1d:29:ba:15:7f:19:88:87:62:c7:49:c0:66:ba:
57:27:5a:ea:00:24:3b:72:44:29:0e:fd:2c:67:4d:78:37:1f:
cf:7b:87:0c:6b:2d:73:d1:6a:91:ac:30:e1:a3:5e:57:53:fd:
ed:08:6a:0f:b1:8e:53:80:d1:85:13:98:fd:d7:9e:8e:31:3a:
95:41:f1:cf:2a:30:88:f1:76:ce:50:24:c8:cb:19:a3:88:f7:
09:7b:00:81:2e:11:81:b2:45:65:4e:b9:0f:27:11:49:35:b8:
51:e7:96:32:3f:4c:85:94:b3:f6:ef:95:c9:49:9c:10:83:3c:
4a:06:8e:c1:11:76:5e:6a:37:00:21:40:4b:82:f4:37:a2:4f:
40:5d:d5:e9:67:dd:b2:8b:63:0b:bb:f8:ab:ea:9c:be:a2:90:
af:e6:0c:e1:e3:44:e6:a4:e1:32:33:df:24:e7:18:ba:98:92:
a8:77:4b:b3:5e:a1:bd:e3:f5:88:a9:7c:3f:82:0a:cb:7d:63:
13:70:90:07:74:24:af:5c:02:07:95:6e:6c:44:e7:c1:c7:65:
b3:83:4a:7f:e6:de:73:ac:e0:de:95:70:01:cf:f8:27:32:6e:
f5:b0:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:29:47 2025 by rpki-client