
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
File: 3230342e31342e37352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: 3xr666FlivlRf7bI3dyvl7+o0M/pvx648Fs6Vjnd6yA=
Subject key identifier: 60:DE:97:8F:12:6E:08:BC:DD:8A:2B:36:AB:E4:26:21:94:AF:F9:AA
Certificate issuer: /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial: 0E6FE35D9B98C2C63B4B013800B104E9007D271B
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
Signing time: Tue 22 Sep 2026 03:04:39 +0000
ROA not before: Tue 22 Sep 2026 02:59:39 +0000
ROA not after: Tue 21 Sep 2027 03:04:39 +0000
asID: 834
IP address blocks: 204.14.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 23:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:6f:e3:5d:9b:98:c2:c6:3b:4b:01:38:00:b1:04:e9:00:7d:27:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Validity
Not Before: Sep 22 02:59:39 2026 GMT
Not After : Sep 21 03:04:39 2027 GMT
Subject: CN=60DE978F126E08BCDD8A2B36ABE4262194AFF9AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:e4:5f:1b:5d:01:30:29:39:9d:14:f1:02:
a6:47:1e:68:6b:94:7f:6a:be:f8:96:5c:d3:0f:8d:
9d:e5:3f:05:09:ff:af:26:72:a4:24:ba:5a:d9:dc:
c5:42:82:0a:95:9a:9c:ad:cf:f5:98:9d:38:86:45:
0c:4b:fb:0d:2d:c3:cb:7c:f8:64:63:e9:67:ec:28:
e0:4c:c4:57:f7:7e:c6:30:c2:d7:b3:5b:09:85:1e:
0d:97:09:8b:a8:f9:23:e4:fb:57:93:d5:c1:d1:24:
20:06:7e:fb:2d:e2:34:5e:31:0a:b8:36:76:46:23:
b3:47:94:23:8e:c6:e2:d0:a4:72:84:70:e6:bf:0c:
d5:31:55:27:c5:35:a5:2a:9f:d9:fc:83:7a:42:ce:
e2:08:fa:e9:fa:2d:03:ef:89:00:48:af:a5:fd:a1:
ba:96:30:b7:ff:ae:20:80:67:74:84:35:7c:bf:6e:
bc:a7:44:65:6a:4f:e8:8b:d3:5c:57:11:85:39:81:
de:b4:8f:d2:2b:8b:ff:4c:77:03:e2:41:6b:48:32:
7c:9c:26:32:3b:98:89:dc:1f:00:a2:86:80:ca:56:
2b:0d:14:a9:13:2b:14:cc:35:27:e8:1f:a8:73:6e:
9b:e6:12:da:01:fc:90:c6:33:8a:a7:bb:11:5c:b6:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DE:97:8F:12:6E:08:BC:DD:8A:2B:36:AB:E4:26:21:94:AF:F9:AA
X509v3 Authority Key Identifier:
keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37352e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.14.75.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:a3:c5:8a:ff:64:33:08:13:11:76:4a:6c:4b:e8:84:f1:53:
57:4f:49:b9:79:e8:57:ed:fc:2f:71:c5:73:bb:38:71:9f:a7:
18:d4:79:82:f0:a9:a9:dc:f5:8b:43:09:22:09:86:1f:b6:32:
3b:c8:0f:19:c7:39:7a:03:5a:61:fe:a6:e1:1e:ef:e2:d0:c0:
0f:48:1f:de:2f:5b:47:7c:3c:a9:57:4d:d5:28:53:30:62:c8:
85:e1:e4:a6:be:18:ee:88:73:5b:b8:0a:df:82:95:d3:d8:90:
13:99:0c:73:f5:42:27:70:9a:3b:b3:86:f7:b3:d0:3d:e0:89:
30:35:de:9f:86:eb:8f:2c:51:b0:d3:95:22:9b:ca:0f:9d:c7:
96:ba:4d:50:d1:53:92:64:3f:7c:76:c9:0e:2d:1f:c3:4d:75:
e8:b9:74:89:a5:9f:5e:f5:f3:92:f0:c1:ae:a3:ac:4b:d4:40:
39:aa:14:1d:76:f4:25:68:da:67:d4:32:84:ca:0f:6f:73:6b:
99:57:7f:47:6c:41:32:21:89:c2:c2:3e:50:3e:23:df:04:92:
75:11:ca:82:2a:75:93:37:d5:ae:0e:eb:f9:50:af:3e:4a:ae:
41:3e:58:85:a6:29:3f:06:db:da:3f:3e:2e:03:4a:42:c4:0b:
2a:90:dd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:45:20 2026 by rpki-client