
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
File: 3139322e36342e3230332e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier: iSVzEtaduQywCQdcSyMNmFI0Id4YYz6qHsCZbxVt1kQ=
Subject key identifier: D3:69:83:0B:9B:08:9A:71:A9:0B:EF:D3:6C:14:10:12:47:06:28:AF
Certificate issuer: /CN=A91D85A20000/serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Certificate serial: 1A2180DF713FC2A0B2E21AC0AF157CFAF55BBA3C
Authority key identifier: 5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
Signing time: Mon 04 Aug 2025 22:13:58 +0000
ROA not before: Mon 04 Aug 2025 22:08:58 +0000
ROA not after: Mon 03 Aug 2026 22:13:58 +0000
asID: 36236
IP address blocks: 192.64.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Oct 2025 06:37:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:21:80:df:71:3f:c2:a0:b2:e2:1a:c0:af:15:7c:fa:f5:5b:ba:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D85A20000, serialNumber=5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1
Validity
Not Before: Aug 4 22:08:58 2025 GMT
Not After : Aug 3 22:13:58 2026 GMT
Subject: CN=D369830B9B089A71A90BEFD36C141012470628AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:9d:2c:01:8b:89:f6:c3:d4:29:18:e7:11:
d3:97:74:00:13:98:54:e1:34:ee:d5:f5:02:0a:c1:
13:45:76:e6:b7:7b:fc:c7:1c:2d:15:68:57:6a:76:
80:54:f5:1e:60:1d:1e:03:56:1c:cf:50:e3:b8:46:
02:3a:00:3c:53:5c:23:00:59:c7:52:0e:85:d5:d7:
98:fc:6e:c4:10:c3:91:ae:26:53:a6:fa:e4:c3:b6:
c8:48:e6:74:24:1d:39:85:26:8d:56:51:38:b6:35:
4f:48:78:af:d8:6d:ac:ab:cf:0a:26:8a:18:50:d2:
d5:e7:ab:e3:f7:1f:fc:cd:c2:81:47:e9:9b:ca:70:
c5:94:c9:14:74:5a:e1:44:b8:a6:3d:ff:78:68:3b:
d4:08:4e:fa:43:69:e3:fd:8e:eb:a9:03:56:9c:56:
63:98:42:06:83:03:56:b0:f4:0c:70:1d:fe:cb:10:
b5:5c:38:2a:2f:88:ef:f1:67:63:cf:11:32:8b:4c:
ac:4e:f0:10:74:b0:6b:0d:48:2d:5f:e3:2f:7f:c6:
e4:fd:b0:91:a3:0c:76:29:1f:6e:24:8f:7e:18:b2:
fa:f5:9c:57:e3:16:6e:6d:15:2f:f1:a7:d8:be:93:
0d:d6:0d:f5:55:b5:67:72:44:39:98:b6:0c:b2:e2:
da:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:69:83:0B:9B:08:9A:71:A9:0B:EF:D3:6C:14:10:12:47:06:28:AF
X509v3 Authority Key Identifier:
keyid:5E:D5:F7:92:1A:C8:65:41:D9:29:36:F6:91:CB:1C:DB:F6:D5:C2:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/5ED5F7921AC86541D92936F691CB1CDBF6D5C2A1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XtX3khrIZUHZKTb2kcsc2_bVwqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/2/3139322e36342e3230332e302f32342d3234203d3e203336323336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.64.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:40:fe:f4:20:7e:60:32:42:6e:2c:97:70:61:b2:b2:5d:e4:
1c:b2:46:66:40:1e:61:68:79:13:fa:f2:fd:5e:19:bf:f1:01:
61:9e:8f:4c:5e:f4:ed:6c:e9:9f:c8:ad:fb:db:c1:e7:42:5a:
b5:e6:26:26:b1:49:d2:ea:87:27:30:66:f5:d2:d3:2c:4d:b2:
e8:de:4a:1d:fc:cc:01:64:5f:a3:57:18:a8:a1:83:0c:68:fd:
c8:fe:3f:f1:c4:7c:58:9d:03:63:55:2a:00:07:02:18:3d:44:
31:6e:28:1f:9d:5a:14:c1:ca:f9:0f:a3:87:1c:9d:24:e0:d0:
f4:5b:a3:f4:15:89:50:f4:0f:99:bc:61:45:8e:aa:1c:88:d3:
c5:8d:74:7b:55:e6:d7:16:9f:00:ae:7a:b3:5c:d4:0a:92:ed:
d6:44:1b:b3:18:7d:de:02:78:03:51:32:b0:5e:a0:09:a3:d8:
c2:64:3e:38:52:13:71:d5:80:95:8e:13:bc:ab:f1:26:49:af:
0e:24:b1:7a:77:10:a8:6b:a6:85:12:df:5a:1b:b9:d7:3d:8b:
27:85:ad:ca:ae:94:d1:e6:b3:30:7e:e9:21:32:eb:bc:1e:66:
f7:84:1b:c5:86:61:34:a6:22:e3:72:91:fe:37:7d:ef:f1:a0:
f2:3a:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:00:02 2025 by rpki-client