
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
File: 3139352e37382e35342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier: v2StcfA5hzMOR5Hqlb3fJhuvIINNEPkxjfKyLigfapM=
Subject key identifier: 74:DE:F2:6B:06:89:E4:77:92:0F:F9:02:E0:B9:99:5A:99:1F:52:3E
Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial: 302B9BF08974CDB8A0279A3DB0BA2DD2BC44C389
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
Signing time: Mon 01 Sep 2025 13:29:44 +0000
ROA not before: Mon 01 Sep 2025 13:24:44 +0000
ROA not after: Mon 31 Aug 2026 13:29:44 +0000
asID: 174
IP address blocks: 195.78.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 22:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2b:9b:f0:89:74:cd:b8:a0:27:9a:3d:b0:ba:2d:d2:bc:44:c3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Validity
Not Before: Sep 1 13:24:44 2025 GMT
Not After : Aug 31 13:29:44 2026 GMT
Subject: CN=74DEF26B0689E477920FF902E0B9995A991F523E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c2:84:c1:74:bb:6f:01:a1:5d:49:28:4e:d6:
63:21:03:ac:02:ce:ef:1e:52:0d:9d:7e:a9:a0:41:
4a:68:a7:32:e2:8c:37:bf:09:68:50:24:bc:28:ea:
5b:59:f4:eb:48:9e:81:7d:9c:96:cc:e5:6d:47:34:
c5:95:e6:ab:e5:41:ee:eb:ed:f6:a5:d0:cb:6d:cc:
90:27:de:5b:f5:d3:f7:6b:1d:1b:f3:dd:d8:f9:4d:
d8:b7:a7:7f:a8:da:95:51:72:08:83:c1:2c:4c:20:
97:2c:25:b0:de:df:42:1f:4e:29:2f:5a:83:5f:11:
3b:b4:78:38:65:40:5f:93:53:5c:5a:47:11:cb:ec:
8f:f4:d9:cd:92:7a:94:aa:5c:de:03:59:21:90:4b:
43:77:01:5a:b8:77:b9:55:3e:e5:da:72:06:26:45:
43:f7:48:96:d5:7f:72:c4:05:e2:b6:5d:b5:78:80:
a8:3d:45:10:6a:e2:ef:6e:68:9b:68:ae:6a:ed:29:
f6:ce:c9:ba:b5:c0:4f:c2:94:81:92:82:78:82:5b:
0d:21:22:e9:f6:bd:c7:78:83:e2:d3:dd:81:05:4a:
5c:d7:63:71:f2:5a:77:5e:c4:65:01:a0:4d:63:86:
7d:c4:56:a7:02:bf:84:59:07:a7:67:68:d7:d3:29:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:F2:6B:06:89:E4:77:92:0F:F9:02:E0:B9:99:5A:99:1F:52:3E
X509v3 Authority Key Identifier:
keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:81:29:7f:37:58:1a:4d:91:91:45:31:4b:b2:2d:16:e7:21:
86:26:65:68:b2:70:7d:31:d3:00:c7:84:11:4c:07:86:a6:80:
a6:e5:df:03:a7:de:69:ff:b6:90:d0:ce:80:2b:41:92:ef:14:
6c:ef:af:2f:ee:07:34:91:e7:4a:f2:c1:96:95:d2:d0:21:15:
6f:28:1b:54:6d:b4:5c:8a:88:cf:e4:3b:14:b7:31:37:9e:15:
d6:91:23:c3:4e:de:be:40:fa:51:b1:a1:03:7b:17:9e:17:59:
6b:09:1f:16:f9:f4:e1:b1:5e:d9:55:1c:d1:09:df:53:6f:82:
1e:61:14:58:8f:b1:3d:b6:8c:ca:2a:e2:08:9a:aa:0f:4f:15:
1e:74:f8:08:a5:40:ad:5c:97:29:1a:ca:ef:8f:1a:de:a6:d0:
6f:86:85:e8:42:4f:ea:66:eb:bf:b5:75:b2:b5:fe:fa:55:06:
b3:64:33:f5:40:65:cb:5d:35:69:80:58:de:83:0a:e2:5d:77:
c9:44:58:a4:5d:ec:e8:c7:3d:ab:16:cb:b6:9a:1e:ce:57:e7:
fb:a7:e4:cc:3d:a8:7e:6d:0a:89:38:c0:dc:22:f8:0e:88:56:
07:49:b8:42:2d:ea:15:1a:c0:a4:90:cf:b6:23:a7:27:e6:50:
54:f7:70:25
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUMCub8Il0zbigJ5o9sLot0rxEw4kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTAxMTMyNDQ0WhcNMjYwODMxMTMyOTQ0
WjAzMTEwLwYDVQQDEyg3NERFRjI2QjA2ODlFNDc3OTIwRkY5MDJFMEI5OTk1QTk5
MUY1MjNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cKEwXS7bwGh
XUkoTtZjIQOsAs7vHlINnX6poEFKaKcy4ow3vwloUCS8KOpbWfTrSJ6BfZyWzOVt
RzTFlear5UHu6+32pdDLbcyQJ95b9dP3ax0b893Y+U3Yt6d/qNqVUXIIg8EsTCCX
LCWw3t9CH04pL1qDXxE7tHg4ZUBfk1NcWkcRy+yP9NnNknqUqlzeA1khkEtDdwFa
uHe5VT7l2nIGJkVD90iW1X9yxAXitl21eICoPUUQauLvbmibaK5q7Sn2zsm6tcBP
wpSBkoJ4glsNISLp9r3HeIPi092BBUpc12Nx8lp3XsRlAaBNY4Z9xFanAr+EWQen
Z2jX0yl6mwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHTe8msGieR3kg/5AuC5mVqZ
H1I+MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzEzOTM1MmUzNzM4MmUzNTM0MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzEzNzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw042MA0GCSqGSIb3DQEBCwUAA4IBAQCp
gSl/N1gaTZGRRTFLsi0W5yGGJmVosnB9MdMAx4QRTAeGpoCm5d8Dp95p/7aQ0M6A
K0GS7xRs768v7gc0kedK8sGWldLQIRVvKBtUbbRciojP5DsUtzE3nhXWkSPDTt6+
QPpRsaEDexeeF1lrCR8W+fThsV7ZVRzRCd9Tb4IeYRRYj7E9tozKKuIImqoPTxUe
dPgIpUCtXJcpGsrvjxreptBvhoXoQk/qZuu/tXWytf76VQazZDP1QGXLXTVpgFje
gwriXXfJRFikXezoxz2rFsu2mh7OV+f7p+TMPah+bQqJOMDcIvgOiFYHSbhCLeoV
GsCkkM+2I6cn5lBU93Al
-----END CERTIFICATE-----
Generated at Wed Nov 5 12:19:42 2025 by rpki-client