
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
File: 3130342e3235342e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 8L4aXO68DNrIrN/mI5BDaa+lr0w5YSHNl+uxoBsucf8=
Subject key identifier: 25:E7:99:71:9B:44:FD:1F:1C:43:A9:CD:3D:CD:99:CA:CA:95:68:A3
Certificate issuer: /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial: 2EB18E9A1E017C128A13F85E01D2B9A913305426
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
Signing time: Fri 17 Apr 2026 00:05:16 +0000
ROA not before: Fri 17 Apr 2026 00:00:16 +0000
ROA not after: Fri 16 Apr 2027 00:05:16 +0000
asID: 834
IP address blocks: 104.254.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 03:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:b1:8e:9a:1e:01:7c:12:8a:13:f8:5e:01:d2:b9:a9:13:30:54:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Validity
Not Before: Apr 17 00:00:16 2026 GMT
Not After : Apr 16 00:05:16 2027 GMT
Subject: CN=25E799719B44FD1F1C43A9CD3DCD99CACA9568A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:df:7d:dc:45:66:93:c4:c7:16:e4:44:f6:
a5:f4:8a:2c:ac:0d:79:7a:7e:aa:c5:ff:74:23:ad:
8f:6d:5a:be:eb:ee:51:89:43:2f:35:0a:63:04:57:
d6:b0:51:bd:26:be:97:93:0a:4e:aa:bc:30:9d:91:
43:97:a4:53:e2:11:06:ae:4f:03:2b:62:ad:70:31:
d8:c5:1e:88:32:12:86:5f:6d:de:71:ce:66:13:7a:
cd:a4:a0:bc:a4:d5:8f:9b:80:e7:9e:72:00:15:ac:
f1:9e:ce:80:5f:89:b1:b7:79:16:ae:46:69:38:12:
b0:f1:c7:1d:b3:4c:9b:a8:34:e6:3c:40:8f:9a:46:
39:32:4a:0e:06:8c:36:ca:a8:61:c1:0a:4f:87:c9:
99:c3:98:74:dc:95:e7:16:f4:49:2a:cb:5f:15:22:
20:96:0c:58:bb:55:77:e9:f2:89:5d:20:86:d5:b9:
b8:fa:aa:62:5c:df:dc:3f:3b:17:bc:4e:0f:d8:8f:
18:38:5d:d4:13:77:eb:ad:07:c0:95:de:e6:2b:4e:
96:55:68:44:8c:53:9e:e3:52:67:e1:5a:f0:c5:f3:
81:83:ab:e9:e7:b1:c0:a9:8f:14:bb:da:c4:a8:ae:
44:f4:ab:a5:2b:d9:77:62:9d:f4:ef:37:86:eb:55:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E7:99:71:9B:44:FD:1F:1C:43:A9:CD:3D:CD:99:CA:CA:95:68:A3
X509v3 Authority Key Identifier:
keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.254.194.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2e:a6:fb:06:eb:75:44:d0:e4:1a:ba:3d:f7:9b:b1:15:81:
b9:fb:90:ad:b1:da:df:68:ee:6a:9e:68:7d:27:70:57:c6:a9:
59:94:ab:21:e6:bf:9a:cc:1b:ff:24:49:04:d4:a6:8f:48:8c:
93:64:f3:16:20:fa:50:fe:d8:c4:40:7c:ef:30:3e:56:20:2f:
3f:11:be:b4:38:e0:83:93:12:e9:2d:01:20:d0:01:e5:09:0d:
01:2e:8d:c6:e4:5d:7e:d6:06:8c:90:46:f7:9d:6e:0a:c1:69:
43:36:84:4b:71:54:a7:35:5c:a8:09:8c:5d:c9:5f:4f:46:dc:
72:33:38:85:9e:24:e7:09:14:51:27:ab:82:ab:d7:07:4c:86:
e5:bf:78:26:c6:d5:4e:3a:f0:ca:78:f0:f0:f3:5b:21:8e:07:
5e:4a:18:00:0e:56:73:68:50:24:af:aa:d4:68:07:24:c5:0d:
e0:26:65:ce:8e:29:d5:43:d9:c9:1e:0e:37:6f:4d:92:0e:fd:
a0:e9:bb:b2:7d:6e:4c:b5:6f:01:99:1f:84:e2:18:7f:c1:e8:
0d:72:1a:f2:d9:ec:d3:9b:be:84:1f:b2:0e:84:4e:ac:3c:88:
ed:53:03:bb:2d:5a:3b:3f:c6:e8:60:00:de:c3:bd:98:ce:85:
7b:4d:7b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:47 2026 by rpki-client