
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
File: 3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier: 1dEXyo/BDVUmSumDgkjiRdRAjK7wg1e16jwMUnZ1LfA=
Subject key identifier: C9:32:E4:08:CA:08:C4:AA:4C:75:AC:B6:C1:73:41:1A:E3:0D:8F:57
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 7068FC1DA0502810F5C9D20D3623DB617A808771
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
Signing time: Tue 04 Nov 2025 19:30:39 +0000
ROA not before: Tue 04 Nov 2025 19:25:39 +0000
ROA not after: Tue 03 Nov 2026 19:30:39 +0000
asID: 14618
IP address blocks: 104.254.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 20:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:68:fc:1d:a0:50:28:10:f5:c9:d2:0d:36:23:db:61:7a:80:87:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Nov 4 19:25:39 2025 GMT
Not After : Nov 3 19:30:39 2026 GMT
Subject: CN=C932E408CA08C4AA4C75ACB6C173411AE30D8F57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c1:5b:30:e1:e5:16:f8:35:95:53:33:81:42:
88:49:d2:a0:69:ed:7d:9b:13:38:f6:c4:09:00:d9:
2a:8d:2a:95:29:14:a7:e9:54:ac:1c:2e:5b:42:f7:
8b:e7:24:51:b3:51:a2:d1:19:b1:3a:40:59:fc:68:
29:b1:5a:d1:49:ef:67:0c:87:9f:0b:b8:1a:01:12:
34:74:66:45:1f:17:0b:47:8f:33:73:a0:09:aa:bf:
08:57:10:72:a6:7a:6a:43:a1:ae:0a:31:03:0d:7a:
36:80:68:52:4d:2e:3b:7c:18:62:cf:4c:4f:24:4e:
4f:a9:f4:47:ef:f6:8c:ab:f1:26:ca:f7:43:d8:b9:
9f:85:4f:8d:62:00:38:fd:12:e0:cf:84:74:48:b0:
ae:5f:df:a1:85:b1:bc:2c:b2:93:4d:af:42:9a:26:
c5:59:2f:69:fc:a9:fa:4c:56:87:a5:44:de:f3:20:
7e:1a:67:94:3c:51:c9:39:4d:10:77:98:ba:df:8f:
63:96:33:42:47:21:a9:30:74:1e:db:8b:71:58:a9:
33:77:a3:d6:78:7c:f3:34:9e:2d:21:84:cd:2c:89:
f1:cd:c3:f8:b3:c3:84:7e:47:fa:40:a4:d3:9f:5a:
42:f9:4a:c7:d8:54:16:66:ee:ec:1f:83:02:da:f7:
07:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:32:E4:08:CA:08:C4:AA:4C:75:AC:B6:C1:73:41:1A:E3:0D:8F:57
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5d:f2:bb:78:31:34:5d:0f:f0:cb:ee:6f:98:6b:e6:d2:7b:
6b:40:3a:8e:aa:d8:78:f3:34:40:be:ca:50:7a:ff:86:f5:0f:
4f:29:a6:f3:2f:2f:ce:5d:40:a3:7b:ff:7e:6a:0e:31:ed:0c:
e6:fc:98:3b:30:d9:f1:89:1e:40:6d:47:66:21:2e:89:25:ac:
40:37:b0:56:2c:f1:24:f9:98:c2:8e:1e:8e:ce:70:52:d3:57:
1f:58:48:9e:34:83:5c:45:be:82:21:93:96:46:4f:36:63:18:
a9:8f:dc:1e:c6:22:e1:04:12:db:7b:fb:66:ee:8b:76:38:02:
36:90:da:3a:10:84:f3:b3:5c:a8:df:55:a2:7d:f8:4d:e3:84:
a8:e4:ce:32:42:09:93:3b:a1:27:2a:7f:bc:b1:76:9e:5b:3b:
99:e7:f6:92:3f:b5:74:73:68:77:5f:c1:82:87:ea:27:5a:f9:
6f:a2:d9:76:50:a9:4c:c5:88:ca:e7:2e:46:65:1b:94:02:e8:
f7:1e:ff:46:13:d3:93:51:b7:1a:99:80:03:0d:63:b7:86:9a:
e7:4b:99:c9:98:c3:8c:49:67:57:dd:1b:cd:8b:d4:7e:f4:f6:
9a:91:51:26:c8:0f:a8:27:5b:2d:99:c8:9f:f0:61:73:85:fd:
b6:7e:be:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:49:18 2025 by rpki-client