
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa
File: 3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa (raw, json)
Hash identifier: fZkjmW9rPTuNxpRX711SuESrIgD8yZdIF576MNwt9Ng=
Subject key identifier: FA:F1:62:24:EA:86:16:93:BD:B8:77:8F:1C:D5:DF:55:F8:8E:4E:8B
Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial: 7FD79C2EED04408B4329BD6FB2924036125AFB02
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa
Signing time: Fri 11 Sep 2026 08:35:17 +0000
ROA not before: Fri 11 Sep 2026 08:30:17 +0000
ROA not after: Fri 10 Sep 2027 08:35:17 +0000
asID: 209109
IP address blocks: 142.249.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 25 Sep 2026 08:56:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:d7:9c:2e:ed:04:40:8b:43:29:bd:6f:b2:92:40:36:12:5a:fb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Validity
Not Before: Sep 11 08:30:17 2026 GMT
Not After : Sep 10 08:35:17 2027 GMT
Subject: CN=FAF16224EA861693BDB8778F1CD5DF55F88E4E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0d:47:76:f1:86:1a:99:49:0e:ac:de:96:e4:
fa:e1:51:ab:44:c0:d9:d1:17:dc:99:ba:c3:1d:27:
d4:06:21:7c:c9:1e:3c:85:0b:ea:a6:1f:66:4c:3b:
30:ca:ac:fb:06:cb:0c:08:8f:4d:ec:fa:22:6d:a8:
08:6f:ca:b2:76:45:96:0a:e0:96:4a:b8:34:46:4c:
fc:fc:a8:10:fe:6b:e0:31:b8:bb:8d:02:fe:f4:eb:
d4:a6:9f:0b:e2:3c:6d:ce:35:68:6e:3e:e9:59:af:
23:79:92:8b:3a:de:72:a1:43:00:93:96:fc:d5:6a:
46:a8:f9:b7:b1:8f:75:09:b7:31:26:63:06:0b:95:
f9:d3:aa:64:6b:13:64:c0:b7:bb:cc:ac:ca:50:27:
4d:9e:1a:1a:c2:91:ed:3e:2b:d8:2d:14:48:5b:09:
99:39:d6:28:04:f0:66:9a:b5:b6:40:89:9b:86:51:
88:be:a1:d8:36:30:d1:d5:59:2c:1c:e9:ad:af:03:
27:44:aa:e6:34:40:26:f3:bc:a9:f0:1f:fe:24:cd:
1d:40:b2:fa:ac:c5:37:89:04:c9:36:77:ae:98:da:
f1:ef:5a:a6:7f:73:b4:79:88:2c:fa:15:f2:5e:da:
d6:9f:68:fb:b9:36:0c:c7:9b:c2:a0:5b:72:53:c0:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F1:62:24:EA:86:16:93:BD:B8:77:8F:1C:D5:DF:55:F8:8E:4E:8B
X509v3 Authority Key Identifier:
keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131322e302f32342d3234203d3e20323039313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.249.112.0/24
Signature Algorithm: sha256WithRSAEncryption
68:69:d7:23:eb:86:43:49:1d:ab:ec:a4:2c:c7:8c:e9:3d:bf:
ab:90:37:70:5f:7e:56:5f:1f:5e:dd:dd:1c:e0:77:ef:29:34:
c9:4b:87:1c:49:b0:cc:60:47:fe:29:4c:fc:e9:63:a2:27:f9:
2b:13:7f:f8:b2:06:ce:16:8b:57:81:bb:26:20:59:07:ae:e7:
0d:02:a8:bd:48:73:0f:cc:9d:31:f6:d5:04:d1:ff:3d:b7:d4:
cf:d2:6e:c1:00:e2:7b:30:7a:bc:16:fc:3e:3d:9c:a2:de:5f:
aa:8d:a9:48:38:c1:98:c0:32:45:5b:1c:db:db:26:7a:55:f5:
89:e0:e8:89:b2:11:9a:26:d4:89:28:87:60:f3:94:de:0e:5a:
74:4a:2a:50:4b:b6:09:6d:5f:ee:c6:7c:ab:7c:15:fa:81:42:
5e:a0:d9:fd:0d:d9:7d:d1:be:46:6c:2d:e6:d9:76:cd:01:a2:
f4:79:6e:23:bc:1e:18:dd:a2:ed:97:fb:ee:5e:f6:af:69:d5:
36:c4:8e:4a:a1:aa:52:21:87:8c:11:fe:07:18:68:17:c1:2a:
a7:b0:41:12:28:3d:d3:e4:d8:1b:7f:71:b3:39:8b:32:b9:fc:
db:3f:1d:47:ac:1c:8e:65:63:b7:c6:63:5a:7f:57:bc:d1:55:
ff:52:56:48
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUf9ecLu0EQItDKb1vspJANhJa+wIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGNjODU3ZDA1ZWZiYjM1MDIzMDUyMGQwOGM4ZDdmNDVl
MzRlM2JmZjNjYjUxNmU1NTYwHhcNMjYwOTExMDgzMDE3WhcNMjcwOTEwMDgzNTE3
WjAzMTEwLwYDVQQDEyhGQUYxNjIyNEVBODYxNjkzQkRCODc3OEYxQ0Q1REY1NUY4
OEU0RThCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3w1HdvGGGplJ
DqzeluT64VGrRMDZ0RfcmbrDHSfUBiF8yR48hQvqph9mTDswyqz7BssMCI9N7Poi
bagIb8qydkWWCuCWSrg0Rkz8/KgQ/mvgMbi7jQL+9OvUpp8L4jxtzjVobj7pWa8j
eZKLOt5yoUMAk5b81WpGqPm3sY91CbcxJmMGC5X506pkaxNkwLe7zKzKUCdNnhoa
wpHtPivYLRRIWwmZOdYoBPBmmrW2QImbhlGIvqHYNjDR1VksHOmtrwMnRKrmNEAm
87yp8B/+JM0dQLL6rMU3iQTJNneumNrx71qmf3O0eYgs+hXyXtrWn2j7uTYMx5vC
oFtyU8CnoQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPrxYiTqhhaTvbh3jxzV31X4
jk6LMB8GA1UdIwQYMBaAFKsu+I8kdJ9aEg363mfJGOTHEMU+MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyOTA4YjNlMjg1MTRhLzAv
QUIyRUY4OEYyNDc0OUY1QTEyMERGQURFNjdDOTE4RTRDNzEwQzUzRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2NkOWE5ZGNmLTQ0NDgtNDVmZi04ZWE2LWQxM2JlOTdkOTFhMi8wY2M4
NTdkMDVlZmJiMzUwMjMwNTIwZDA4YzhkN2Y0NWUzNGUzYmZmM2NiNTE2ZTU1Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5Mjkw
OGIzZTI4NTE0YS8wLzMxMzQzMjJlMzIzNDM5MmUzMTMxMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzkzMTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACO+XAwDQYJKoZIhvcN
AQELBQADggEBAGhp1yPrhkNJHavspCzHjOk9v6uQN3BfflZfH17d3Rzgd+8pNMlL
hxxJsMxgR/4pTPzpY6In+SsTf/iyBs4Wi1eBuyYgWQeu5w0CqL1Icw/MnTH21QTR
/z231M/SbsEA4nswerwW/D49nKLeX6qNqUg4wZjAMkVbHNvbJnpV9Yng6ImyEZom
1Ikoh2DzlN4OWnRKKlBLtgltX+7GfKt8FfqBQl6g2f0N2X3RvkZsLebZds0BovR5
biO8Hhjdou2X++5e9q9p1TbEjkqhqlIhh4wR/gcYaBfBKqewQRIoPdPk2Bt/cbM5
izK5/Ns/HUesHI5lY7fGY1p/V7zRVf9SVkg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:22:56 2026 by rpki-client