
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32332d3234203d3e20383334.roa
File: 3139322e302e32302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier: LcSVA6vnio4GoBR1LZ+UVefs+Ph3DAlSgKKQDTngFV8=
Subject key identifier: E8:2D:C7:4B:E8:4F:96:F6:4E:95:FD:D7:72:06:19:7E:CE:7F:76:94
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 6AA6B1010C030069FB55BBB78E4B7C5AFD6605EC
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32332d3234203d3e20383334.roa
Signing time: Thu 12 Jun 2025 10:43:31 +0000
ROA not before: Thu 12 Jun 2025 10:38:31 +0000
ROA not after: Thu 11 Jun 2026 10:43:31 +0000
asID: 834
IP address blocks: 192.0.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 19:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a6:b1:01:0c:03:00:69:fb:55:bb:b7:8e:4b:7c:5a:fd:66:05:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Jun 12 10:38:31 2025 GMT
Not After : Jun 11 10:43:31 2026 GMT
Subject: CN=E82DC74BE84F96F64E95FDD77206197ECE7F7694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:38:fc:db:f9:a6:b5:e6:2b:bb:10:44:8f:
05:46:2f:5d:a5:32:36:60:14:97:d6:9e:86:98:11:
a9:f3:75:c3:a9:e8:df:3f:76:8b:83:2b:c5:ea:78:
a4:8b:0e:97:9b:f2:63:a8:fa:5e:45:04:a3:d6:f3:
2f:55:af:da:b3:7b:8b:d3:15:32:2f:c2:ad:75:ac:
ab:10:a2:07:1d:28:bd:56:cd:23:d8:63:ca:45:00:
fe:ca:2b:b6:28:05:61:fb:4c:84:1c:de:17:d4:6e:
a5:30:2a:52:16:89:72:9f:95:25:22:68:5d:c9:39:
3e:c6:b2:92:f2:9d:c5:87:81:e5:e8:6f:0d:92:41:
d1:62:06:7e:26:d8:37:bc:47:66:83:d3:fa:02:74:
a8:f9:f6:fa:99:7c:5a:20:fc:19:a0:67:a4:8c:59:
64:2e:95:4a:3e:19:be:9c:be:3f:4a:78:21:b0:4c:
6a:78:88:96:fb:81:03:8c:c3:83:83:f1:48:dd:2f:
2f:01:f4:73:22:bb:44:ba:4d:d8:9d:4b:c3:c4:9d:
30:32:bb:de:24:4f:2c:ef:5d:d1:ae:21:ae:4b:2b:
6e:25:74:5b:34:1b:c4:79:4a:43:8b:bc:c7:dd:4f:
d6:c5:a9:b4:01:58:42:21:b0:ad:c3:82:96:4e:ca:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2D:C7:4B:E8:4F:96:F6:4E:95:FD:D7:72:06:19:7E:CE:7F:76:94
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32332d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.0.20.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3e:fb:29:fd:60:bc:ec:c1:91:b6:2e:d4:d3:cb:04:29:e6:
3b:a2:d4:e5:7f:9f:ba:8b:f5:29:06:d4:1d:4e:a2:0f:8d:b3:
60:20:ac:7b:d9:12:a5:51:13:e3:8a:e6:ff:bc:eb:98:02:0a:
54:f9:0e:e8:07:10:e4:df:49:6b:9e:cb:3b:01:58:f9:be:b3:
6c:7d:2c:3d:27:f1:8f:e0:1c:74:84:15:e3:9f:dd:02:1a:e2:
f2:6d:c6:c0:b8:07:27:fe:db:c4:59:b7:99:f0:cd:f8:73:2b:
ee:96:30:fa:02:52:21:f7:15:71:49:8b:40:97:47:70:31:f5:
65:a2:36:1a:b9:99:16:d4:6b:d7:fa:8b:58:9c:93:22:80:0b:
16:e8:9a:78:d1:43:46:ae:15:51:64:df:37:20:d4:fb:1c:55:
7f:66:d5:08:c4:27:05:81:16:f0:88:52:11:bd:35:97:9e:01:
e8:95:32:46:8b:a3:20:11:0d:ea:95:b8:f1:17:84:d9:92:93:
fc:60:b5:7a:c3:a0:dd:5d:3c:66:92:6c:61:ac:58:f0:0a:72:
95:33:1c:dd:ab:cf:3a:8b:5b:9b:59:e7:37:b9:2b:22:8a:86:
23:ec:43:ff:ff:b3:5f:b7:38:5c:d2:2e:e6:8b:81:dd:4e:27:
36:9c:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:26:07 2025 by rpki-client