
$ rpki-client -vvvf rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20313339363432.roa
File: 3133302e31322e3130322e302f32342d3234203d3e20313339363432.roa (raw, json)
Hash identifier: F8+B8LwJ4gqDFRp5K8Y7fJsp2TtMgURfQktLQGO8Fh4=
Subject key identifier: 68:AF:C7:B3:57:5C:13:F8:63:94:E7:0A:0E:90:0C:76:FF:EF:F1:87
Certificate issuer: /CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Certificate serial: 4A10DB71BC0A3BDCB95EAFEC95CEF1C5A6467E1D
Authority key identifier: F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20313339363432.roa
Signing time: Sat 01 Aug 2026 17:01:17 +0000
ROA not before: Sat 01 Aug 2026 16:56:17 +0000
ROA not after: Sat 31 Jul 2027 17:01:17 +0000
asID: 139642
IP address blocks: 130.12.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 13:19:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:10:db:71:bc:0a:3b:dc:b9:5e:af:ec:95:ce:f1:c5:a6:46:7e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Validity
Not Before: Aug 1 16:56:17 2026 GMT
Not After : Jul 31 17:01:17 2027 GMT
Subject: CN=68AFC7B3575C13F86394E70A0E900C76FFEFF187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:e9:08:9e:27:78:5d:72:03:42:b5:4f:ec:
5f:e9:eb:a3:91:11:5b:39:0b:51:b5:f0:e2:04:9b:
7a:a5:0a:62:1a:31:44:d2:2a:1a:95:eb:9f:21:e1:
01:a2:71:71:ac:fe:3c:2d:1f:e1:ca:d1:da:fb:67:
29:f3:f6:ba:e2:0c:b7:48:e3:2c:51:1a:6c:4e:31:
fa:8d:1c:66:9a:c3:7c:da:5e:24:07:3c:ba:3c:1a:
b7:d8:0e:b9:a3:7d:ce:ab:a0:43:73:44:b5:d4:d0:
0e:0f:5a:2e:11:88:6a:95:fb:57:69:e7:42:f6:c2:
27:03:67:40:0a:67:88:24:98:4c:df:c5:5a:3f:d5:
03:3e:69:3f:e0:5d:ee:dc:a0:f5:61:1a:d4:f2:1c:
66:f9:0d:d5:6f:46:52:61:1f:b1:2e:64:c3:9d:b0:
e5:b8:55:ae:4a:62:3f:84:c4:ca:87:15:76:1f:03:
fc:f5:aa:84:9e:b7:3e:e5:ce:95:84:12:ef:aa:56:
42:bc:59:30:de:27:20:4a:bd:59:61:60:41:25:bd:
b0:cc:e3:f9:78:4c:75:df:ed:22:eb:f2:e1:f9:8c:
8a:dd:35:6d:7c:8f:a6:2c:55:eb:a5:a4:d9:5a:34:
fb:13:6f:23:db:4b:39:ba:cf:87:f0:09:fb:fa:8d:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AF:C7:B3:57:5C:13:F8:63:94:E7:0A:0E:90:0C:76:FF:EF:F1:87
X509v3 Authority Key Identifier:
keyid:F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20313339363432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.12.102.0/24
Signature Algorithm: sha256WithRSAEncryption
52:6a:56:29:b7:c7:4d:cd:e1:85:cb:b2:6c:3b:08:8d:71:38:
c3:60:54:25:d4:a6:bd:0c:af:8f:a3:ec:0d:ac:17:12:df:c4:
7b:10:23:8d:46:c1:65:9b:13:17:94:79:0f:cf:2b:0d:dc:ca:
e6:ab:80:ce:77:85:57:d7:f7:49:be:66:f9:e3:ca:df:be:0d:
f5:ab:19:73:a5:6c:e8:07:17:8e:4a:10:06:6b:55:c7:f3:e4:
ff:0d:03:cc:68:19:34:08:ab:0c:92:a5:d4:98:f6:a0:cb:80:
8c:7f:3c:dd:6e:69:8c:2d:dd:ad:42:58:54:57:3b:64:08:d6:
8b:4f:a2:00:ae:81:1a:6d:52:30:2e:a5:f5:66:c2:70:d8:d4:
fd:39:2d:0d:fc:8c:67:ce:da:4b:cc:0b:c3:c6:6f:aa:4a:0f:
79:4e:2c:e1:87:22:af:89:b3:bc:dc:0c:1e:78:e8:c5:34:1a:
1b:12:e7:d0:1f:0f:7d:86:92:3a:80:cf:51:49:c5:ae:9f:46:
45:4c:6a:11:17:68:39:5c:d8:2f:f9:d3:d9:0f:17:83:9d:f8:
a1:07:f3:a0:77:12:3a:59:71:c6:9b:8f:f6:26:4f:0f:83:38:
88:48:c5:c1:eb:d7:0e:d9:a0:72:86:30:b1:a2:ab:6e:2d:45:
68:c0:8d:31
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUShDbcbwKO9y5Xq/slc7xxaZGfh0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTQzMWVkZDU2NTYyNjg0ZWNkNGJlODQ4ZDkzZjBiNTg2
ZmY4ZTIwN2ZhNzY3YzZkZDkwHhcNMjYwODAxMTY1NjE3WhcNMjcwNzMxMTcwMTE3
WjAzMTEwLwYDVQQDEyg2OEFGQzdCMzU3NUMxM0Y4NjM5NEU3MEEwRTkwMEM3NkZG
RUZGMTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA3pCJ4neF1y
A0K1T+xf6eujkRFbOQtRtfDiBJt6pQpiGjFE0ioaleufIeEBonFxrP48LR/hytHa
+2cp8/a64gy3SOMsURpsTjH6jRxmmsN82l4kBzy6PBq32A65o33Oq6BDc0S11NAO
D1ouEYhqlftXaedC9sInA2dACmeIJJhM38VaP9UDPmk/4F3u3KD1YRrU8hxm+Q3V
b0ZSYR+xLmTDnbDluFWuSmI/hMTKhxV2HwP89aqEnrc+5c6VhBLvqlZCvFkw3icg
Sr1ZYWBBJb2wzOP5eEx13+0i6/Lh+YyK3TVtfI+mLFXrpaTZWjT7E28j20s5us+H
8An7+o0kSwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGivx7NXXBP4Y5TnCg6QDHb/
7/GHMB8GA1UdIwQYMBaAFPk2pZIaQxyGi7jqgQuCn7zBjEt6MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzYwN2Y4MTIxMjNhNjRlNTY4MGRkYWNmYjA5MTU1YjliLzAv
RjkzNkE1OTIxQTQzMUM4NjhCQjhFQTgxMEI4MjlGQkNDMThDNEI3QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEw
YWZhMTI1LzQ4ZGI5ZjM3LWViYjEtNGU1OC04MjMyLWZmOWQ5YmNmNWNlYi9hNDMx
ZWRkNTY1NjI2ODRlY2Q0YmU4NDhkOTNmMGI1ODZmZjhlMjA3ZmE3NjdjNmRkOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS82MDdmODEyMTIzYTY0ZTU2ODBkZGFj
ZmIwOTE1NWI5Yi8wLzMxMzMzMDJlMzEzMjJlMzEzMDMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzM5MzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxmMA0GCSqGSIb3DQEB
CwUAA4IBAQBSalYpt8dNzeGFy7JsOwiNcTjDYFQl1Ka9DK+Po+wNrBcS38R7ECON
RsFlmxMXlHkPzysN3Mrmq4DOd4VX1/dJvmb548rfvg31qxlzpWzoBxeOShAGa1XH
8+T/DQPMaBk0CKsMkqXUmPagy4CMfzzdbmmMLd2tQlhUVztkCNaLT6IAroEabVIw
LqX1ZsJw2NT9OS0N/IxnztpLzAvDxm+qSg95TizhhyKvibO83AweeOjFNBobEufQ
Hw99hpI6gM9RScWun0ZFTGoRF2g5XNgv+dPZDxeDnfihB/OgdxI6WXHGm4/2Jk8P
gziISMXB69cO2aByhjCxoqtuLUVowI0x
-----END CERTIFICATE-----
Generated at Thu Aug 27 15:11:56 2026 by rpki-client