
$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e302e302f32322d3234203d3e2039303039.roa
File: 3134342e3136382e302e302f32322d3234203d3e2039303039.roa (raw, json)
Hash identifier: ViK8ytaI8rqbHZ9enJ9mkzBhx/4ctQ9z6/faatBlb4Q=
Subject key identifier: E5:F7:1B:8C:62:16:83:3B:39:09:CC:98:36:ED:21:60:09:30:8F:E1
Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Certificate serial: 38569517C9DF394617862434F6E9AC168D04D83F
Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e302e302f32322d3234203d3e2039303039.roa
Signing time: Mon 06 Apr 2026 13:35:08 +0000
ROA not before: Mon 06 Apr 2026 13:30:08 +0000
ROA not after: Mon 05 Apr 2027 13:35:08 +0000
asID: 9009
IP address blocks: 144.168.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 13:34:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:56:95:17:c9:df:39:46:17:86:24:34:f6:e9:ac:16:8d:04:d8:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889
Validity
Not Before: Apr 6 13:30:08 2026 GMT
Not After : Apr 5 13:35:08 2027 GMT
Subject: CN=E5F71B8C6216833B3909CC9836ED216009308FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:05:b3:34:c7:6f:9d:68:91:62:f3:dc:af:23:
4d:41:d3:70:61:b2:42:31:b3:b7:b0:9d:05:02:bf:
99:64:66:ef:5e:69:68:29:c5:cb:d9:41:0e:fb:a8:
61:41:6e:2e:fd:6c:22:d7:1c:e4:e4:27:b6:03:12:
2a:0d:27:d7:81:0a:c2:30:39:ed:19:18:7e:29:6d:
ec:c6:db:53:a1:42:c0:d2:b2:67:ed:a6:1a:09:10:
a9:39:98:cb:6d:13:be:16:24:c7:7e:8b:d6:5a:03:
1c:7c:18:f2:80:0a:c2:9e:af:3a:e3:7a:6b:ef:9e:
a5:59:c5:72:08:70:08:ad:6c:a4:d9:41:2c:d2:da:
47:e3:ea:5d:85:99:86:b5:e9:21:5b:ae:1a:69:7a:
ea:34:fc:e8:dd:49:59:be:89:db:23:b6:c2:44:d4:
9c:13:14:f6:24:ca:3f:65:9e:a3:59:17:c8:97:e3:
a9:90:57:67:f2:38:31:78:b7:5f:d7:92:4f:1e:6f:
6c:e7:bf:c8:8f:dc:9d:6c:e1:e7:a9:e4:85:a1:17:
ef:ee:a3:68:12:5a:d5:58:51:42:77:91:26:4b:bc:
1b:bc:a1:8c:bb:a0:67:a6:2e:90:4b:b1:59:9d:cf:
13:c2:48:1e:f6:e7:fd:27:d5:62:5c:18:5c:c8:56:
16:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F7:1B:8C:62:16:83:3B:39:09:CC:98:36:ED:21:60:09:30:8F:E1
X509v3 Authority Key Identifier:
keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e302e302f32322d3234203d3e2039303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.168.0.0/22
Signature Algorithm: sha256WithRSAEncryption
28:ad:7e:bf:07:d8:36:45:43:38:b4:5e:73:6e:2a:c5:5f:9a:
d3:3b:6d:cb:8d:ba:c0:f2:1d:56:e1:a2:b3:eb:78:15:26:3c:
3c:6f:09:55:77:bb:46:2f:81:78:9c:33:7a:c2:57:ac:c8:18:
cb:62:47:69:5b:59:a3:e1:63:fc:73:c0:b2:9c:fc:f8:87:f2:
0c:df:36:55:9a:5e:88:4b:d1:23:8c:1d:c5:1e:f8:c4:77:bd:
99:03:9c:ef:63:70:dc:1b:34:46:de:55:46:87:10:70:b5:8a:
11:41:7d:db:4d:b4:c7:e2:cd:45:0f:59:fb:7e:d4:a2:61:72:
a9:37:a1:1c:23:9a:a9:be:f7:76:a0:1c:71:63:a8:32:50:89:
f8:56:f7:34:d9:b3:8f:da:1a:27:46:f3:5b:65:b8:d1:f5:74:
ba:01:c0:84:14:47:89:4a:ba:6b:51:d5:3c:3a:c4:1a:4c:a8:
cf:4f:18:63:d1:ba:46:5a:fb:6c:ef:1c:64:77:75:18:a8:b5:
0f:83:bb:7b:36:93:63:d7:30:bb:5c:ec:d5:34:21:f5:32:9f:
51:b1:8b:61:57:20:bd:73:6f:d6:42:52:1c:a4:59:9d:8e:10:
80:90:bd:77:fe:9e:c8:b1:cf:08:59:c2:a7:15:ac:46:aa:d1:
11:29:b7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:34:20 2026 by rpki-client