
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
File: 3139392e3233312e36382e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier: dLUYA1BYaAGj3wpnWyZ3a/U6sACbdOL5uz8xy1lyI3I=
Subject key identifier: 5F:FC:A4:F1:2C:60:35:14:9A:8F:16:1E:1B:0B:91:10:B4:47:82:D7
Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial: 34C826254C894B8E6AF0860A689871FD442524BF
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
Signing time: Fri 10 Oct 2025 12:26:37 +0000
ROA not before: Fri 10 Oct 2025 12:21:37 +0000
ROA not after: Fri 09 Oct 2026 12:26:37 +0000
asID: 64267
IP address blocks: 199.231.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 19:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:c8:26:25:4c:89:4b:8e:6a:f0:86:0a:68:98:71:fd:44:25:24:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Validity
Not Before: Oct 10 12:21:37 2025 GMT
Not After : Oct 9 12:26:37 2026 GMT
Subject: CN=5FFCA4F12C6035149A8F161E1B0B9110B44782D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:b4:4d:20:51:6f:7a:30:4b:63:79:74:f7:
69:73:ab:2e:85:98:29:c3:94:b8:47:41:45:ab:00:
b6:7c:5b:6a:73:ba:af:f9:43:38:68:e3:21:81:d0:
c1:81:94:6d:54:78:5a:fd:f1:bf:03:78:cc:d0:41:
de:7b:46:bb:ae:95:ef:2a:32:e2:0c:0a:c9:c2:23:
11:67:58:0d:05:4e:34:2c:b6:ba:17:f8:51:2c:04:
cf:48:cc:22:1a:46:d8:97:a9:48:b6:6f:b7:27:1f:
e7:7f:87:ac:7c:50:d7:0b:c4:19:9d:92:49:17:13:
93:82:73:ed:3b:62:00:14:1a:92:64:da:2b:72:d9:
51:11:fd:ed:cb:79:a7:3a:a8:4f:5d:98:1d:39:1f:
02:e9:2a:8a:03:73:78:4f:8c:03:ce:fc:85:b4:77:
f2:a3:3a:05:fd:b5:c6:b8:b9:71:c8:d4:62:ef:9e:
0e:f9:f2:5b:ed:28:c2:fe:45:f4:a7:7d:f1:55:61:
a5:e6:ba:ee:2b:e8:46:5b:df:01:1c:56:57:52:4d:
9e:c4:c7:34:8d:75:57:c3:94:97:d9:06:68:f0:40:
71:b7:0e:df:dd:a3:bd:14:3a:5d:f0:84:4c:68:4c:
f6:fe:7e:95:43:28:15:45:3a:b6:4e:ac:93:55:c2:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FC:A4:F1:2C:60:35:14:9A:8F:16:1E:1B:0B:91:10:B4:47:82:D7
X509v3 Authority Key Identifier:
keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.231.68.0/24
Signature Algorithm: sha256WithRSAEncryption
61:b5:9d:1a:a2:f8:21:0b:71:dc:17:72:6e:8c:ef:41:f6:ab:
7b:98:0f:a6:a6:48:3d:7c:7e:3e:8f:35:aa:04:59:6c:7b:ba:
a0:fe:df:13:d5:2a:4d:18:f2:82:14:53:4e:1c:bc:37:36:1b:
d1:6d:23:b8:e0:43:37:43:53:b8:f9:8e:0d:ad:7d:6e:16:b5:
e4:b8:a8:b8:f7:43:d0:83:0e:e6:91:df:75:c5:99:dc:c4:09:
e7:2e:0e:16:ff:9a:f8:35:c8:02:e7:7d:22:84:91:86:d4:24:
d4:f8:c0:8e:bd:00:a7:c3:7e:28:0c:cd:b8:13:6c:67:27:59:
f9:b9:1a:62:50:bd:5d:69:06:f7:2b:2b:a8:3c:1c:6b:d4:a7:
d0:61:8a:2b:ea:22:f2:68:73:e1:1e:d8:84:7f:97:24:63:5d:
02:35:83:8f:50:69:ff:80:21:dc:80:30:6f:b3:96:21:9e:88:
fd:2a:7a:2a:01:b8:fb:d7:3d:2e:8c:49:e9:13:57:be:04:8e:
e8:16:e2:43:ce:5b:29:f7:67:3b:16:a5:0d:a2:81:c6:17:19:
69:6d:58:db:e8:ef:31:5e:e7:26:e1:1f:87:29:34:2f:97:83:
2e:76:00:16:e9:4b:b2:6d:29:3d:9c:02:bc:b7:1d:9c:a0:a0:
15:2d:d9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:41:34 2025 by rpki-client