
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
File: AS209242.roa (raw, json)
Hash identifier: Dw9zCv7vjxSxfK7hhswekiqpLDpLO3t/4HLvTYYWoVA=
Subject key identifier: 68:27:F4:A3:B8:CD:5C:01:A8:B4:63:EE:9E:8A:E2:DF:FE:4D:99:14
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 6175579C233E01B457EE33678923FFC950AB2A85
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
Signing time: Tue 28 Oct 2025 10:15:06 +0000
ROA not before: Tue 28 Oct 2025 10:10:06 +0000
ROA not after: Tue 27 Oct 2026 10:15:06 +0000
asID: 209242
IP address blocks: 66.225.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 13:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:75:57:9c:23:3e:01:b4:57:ee:33:67:89:23:ff:c9:50:ab:2a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Oct 28 10:10:06 2025 GMT
Not After : Oct 27 10:15:06 2026 GMT
Subject: CN=6827F4A3B8CD5C01A8B463EE9E8AE2DFFE4D9914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:32:b5:47:66:00:2e:5b:ac:b5:13:ce:0a:
af:6e:2b:f0:58:23:58:7f:e1:a1:bf:76:5f:5b:e7:
48:57:1a:de:09:e1:ca:b0:02:26:36:b3:dd:b4:dd:
7a:cf:31:8c:34:3f:09:84:dc:35:31:2c:a2:87:e5:
dc:f0:f0:2a:22:5e:07:83:da:05:3f:64:e0:f6:bb:
a3:1f:0a:7a:19:dd:b5:59:38:8c:ee:24:5a:b6:8f:
84:20:56:01:5f:ca:18:7c:e8:de:18:59:5e:d4:3b:
d3:71:61:84:b8:c2:11:d5:7b:79:b8:d3:10:93:6e:
26:79:d2:55:f5:e7:f9:28:88:c3:8d:5d:1c:30:af:
02:93:f5:e0:5e:db:b7:86:c0:5e:96:26:b6:28:ba:
06:dc:db:7b:b2:f6:ac:02:01:2d:5d:2d:67:bc:1b:
ca:e3:d1:d6:4b:2b:ca:10:b8:fe:3c:6b:d0:20:94:
87:39:25:85:28:06:82:e3:52:97:90:96:61:9b:90:
02:e7:c7:0b:6e:e2:4c:1d:bf:a2:34:5e:2d:a4:36:
7f:fb:a2:2f:c4:be:a5:ce:26:44:9d:96:1f:4f:df:
30:63:f0:63:0c:6c:1c:cb:9f:6a:37:09:db:58:a4:
0c:d6:62:80:03:c1:85:ed:75:fd:53:ab:a9:49:f9:
8c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:27:F4:A3:B8:CD:5C:01:A8:B4:63:EE:9E:8A:E2:DF:FE:4D:99:14
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.225.252.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ca:0f:97:ab:de:c7:40:df:2d:4c:23:13:0c:ad:bd:6d:9e:
87:a8:91:4b:00:e4:e5:4d:78:60:e0:e9:fe:a0:ca:d5:71:d8:
da:ed:df:27:76:90:df:69:11:20:fd:6c:a5:b9:04:3c:7e:22:
05:88:08:ff:c6:c4:8d:8a:5c:94:bc:43:21:b0:dd:82:60:a7:
cb:04:55:3d:86:34:14:b6:49:52:a8:5d:ad:78:35:5d:c7:36:
2c:8c:cc:e6:28:d9:f5:4a:55:ea:9e:18:be:da:e7:a1:84:21:
96:37:df:45:65:99:34:aa:35:a2:17:c8:eb:11:01:f1:e6:36:
0b:00:0f:96:85:1e:ac:29:7a:8c:43:1e:eb:41:52:3a:2e:c0:
45:f6:40:1f:df:25:8a:c0:5f:a0:7b:0d:58:ae:f5:a1:c6:38:
ed:79:de:e6:58:07:dc:76:da:f0:29:56:09:c8:58:b7:9a:3c:
29:25:cb:74:ff:63:05:98:f0:92:0c:e6:fe:2f:db:f2:d8:bb:
b0:6d:6d:1e:7a:b6:a1:2f:40:7e:7a:e9:6a:c8:94:30:9d:64:
df:53:32:db:d5:4b:ef:a8:9a:7c:83:0c:17:4e:7c:49:e9:df:
a3:24:27:a0:29:28:22:c0:1a:9f:81:68:b3:39:df:8e:bc:d7:
a7:31:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:20:29 2025 by rpki-client