
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32332d3234203d3e20333936393832.roa
File: 3134322e3234392e3131342e302f32332d3234203d3e20333936393832.roa (raw, json)
Hash identifier: q4ODbfy0vHJknUUB1f80Z9ZTcDo+0xXHXHsXaHlKX48=
Subject key identifier: 6C:71:0E:93:E1:CE:8B:04:3D:17:05:B1:F0:BF:67:4C:69:EA:F7:1B
Certificate issuer: /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial: 5A763F3F962E1263A2ECA5C62EB8A87AA00999C3
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32332d3234203d3e20333936393832.roa
Signing time: Sat 09 May 2026 08:08:24 +0000
ROA not before: Sat 09 May 2026 08:03:24 +0000
ROA not after: Sat 08 May 2027 08:08:24 +0000
asID: 396982
IP address blocks: 142.249.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 09:42:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:76:3f:3f:96:2e:12:63:a2:ec:a5:c6:2e:b8:a8:7a:a0:09:99:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Validity
Not Before: May 9 08:03:24 2026 GMT
Not After : May 8 08:08:24 2027 GMT
Subject: CN=6C710E93E1CE8B043D1705B1F0BF674C69EAF71B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:c9:50:10:1d:38:c5:0d:dd:95:77:58:f4:
3b:ba:8d:88:a5:b1:8a:29:ed:93:60:44:cf:fa:32:
94:a8:fa:72:77:66:de:20:2e:66:03:83:c9:70:f0:
11:05:a2:8f:0b:16:7d:a2:c0:a8:4c:ff:c2:09:e7:
73:ee:0a:88:78:58:fb:76:e0:a9:70:b7:19:c2:3d:
44:3c:3a:77:85:66:bd:da:db:ae:a9:0a:3a:3a:5e:
c1:b0:d8:15:e7:74:d7:d9:bc:46:f3:e9:93:69:c4:
c1:cc:4a:ab:38:e0:b8:1a:2d:44:08:13:07:3c:94:
b8:dd:80:f4:08:36:53:24:77:bb:de:10:75:ed:08:
3d:4b:76:c8:12:42:64:78:ae:03:7d:d8:3e:64:f7:
97:27:3e:5f:e5:2b:15:f6:5f:54:94:3b:ee:c6:7b:
1f:31:7f:ac:a2:9f:a5:87:b2:52:31:75:bd:65:d7:
da:ea:73:d7:a2:8e:72:e4:0f:66:e6:b4:c6:65:01:
63:21:a8:6c:40:e5:b8:a8:35:1f:07:16:78:4b:86:
31:1d:c5:26:f4:ec:64:61:d0:00:0b:9b:15:b1:b3:
e7:b8:db:5b:7c:b9:f8:5c:5f:d8:43:e8:62:19:27:
4f:14:91:03:7b:dc:8c:6d:e2:7d:3f:1a:30:3c:73:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:0E:93:E1:CE:8B:04:3D:17:05:B1:F0:BF:67:4C:69:EA:F7:1B
X509v3 Authority Key Identifier:
keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/3134322e3234392e3131342e302f32332d3234203d3e20333936393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.249.114.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:32:6b:1c:de:86:24:4e:1d:d6:a3:f3:f7:70:61:53:22:63:
8d:e0:00:88:b3:27:73:12:3a:15:9c:c0:46:32:f2:59:7d:65:
53:94:23:e6:2e:73:27:55:44:b0:5e:c2:e2:36:2b:34:1c:81:
8a:b2:ba:4e:ec:f5:a8:63:af:df:34:78:f5:9e:c8:73:b6:74:
7c:78:36:be:d0:90:d9:53:ef:2d:10:74:96:85:58:bb:6a:88:
9d:9a:e0:09:f5:24:02:89:9f:f3:c6:5e:12:36:6b:28:bf:d9:
1b:86:1f:3a:e8:d6:8b:53:79:40:65:5d:e6:a0:e0:38:10:43:
8b:5e:ab:a3:d7:c7:e0:eb:06:97:ff:32:86:97:36:bc:97:76:
d9:ba:79:d5:e7:ef:ac:dd:b5:35:d0:e1:03:32:df:f0:c7:70:
77:97:f4:48:9d:9d:27:09:6c:3b:19:ae:6e:01:6e:7d:38:8a:
6c:18:4a:fe:6d:b5:0f:e2:a9:08:9c:d5:88:12:a9:bc:8c:72:
aa:bf:3d:7c:74:6a:73:47:dc:a5:0b:91:98:85:ff:2d:43:db:
02:3a:35:d4:45:64:2b:55:c0:a5:f2:9e:dd:19:25:a3:3f:07:
a5:81:2a:5e:8f:63:0c:0b:11:ed:a8:83:71:7b:a7:02:65:59:
7b:ca:0f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:39:06 2026 by rpki-client