
$ rpki-client -vvf rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20323134343332.roa
File: 3133302e31322e3130322e302f32342d3234203d3e20323134343332.roa (raw, json)
Hash identifier: EZll0M6On6cDCkUaO+svdKfYAvTMq0TmCpiaBQ4FiZk=
Subject key identifier: A7:AC:A3:B5:5E:07:E4:4E:66:A5:84:7F:39:5F:4F:54:DB:47:E9:24
Certificate issuer: /CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Certificate serial: 3587E3ABCD1A17A645047668A5EC9C7E4DC6C6AF
Authority key identifier: F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20323134343332.roa
Signing time: Wed 22 Apr 2026 16:42:13 +0000
ROA not before: Wed 22 Apr 2026 16:37:13 +0000
ROA not after: Wed 21 Apr 2027 16:42:13 +0000
asID: 214432
IP address blocks: 130.12.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 28 Apr 2026 09:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:87:e3:ab:cd:1a:17:a6:45:04:76:68:a5:ec:9c:7e:4d:c6:c6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Validity
Not Before: Apr 22 16:37:13 2026 GMT
Not After : Apr 21 16:42:13 2027 GMT
Subject: CN=A7ACA3B55E07E44E66A5847F395F4F54DB47E924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:12:48:52:f9:c7:09:3c:96:7e:b4:0f:95:
08:cf:9b:36:ca:90:7b:dc:f1:42:93:0b:80:46:f5:
0f:6e:b5:ff:ef:21:4b:49:f4:c6:60:9a:cc:c1:a7:
d3:f2:db:63:5b:b4:f1:3c:57:b3:b1:bc:bc:99:cc:
ee:77:a1:0a:18:99:c3:66:d4:06:23:e8:a2:e4:15:
e2:03:b1:87:58:16:4a:ee:8c:de:6a:ea:0a:ec:d6:
c5:ba:44:8a:62:56:59:a2:2b:b1:15:ac:69:25:be:
85:36:66:43:d3:bc:36:b1:c2:08:10:2e:97:0a:6e:
95:06:85:33:3a:cc:72:49:31:1d:ac:5c:cb:1e:67:
d2:d0:62:ac:31:b0:45:1e:c7:8d:05:71:b9:e6:2c:
ab:e6:b3:d1:af:94:8a:1f:7d:82:20:bd:bd:d0:4c:
57:f7:4c:75:74:4c:f3:eb:50:f2:1b:94:ad:bc:ce:
62:8a:5d:d5:61:83:88:7c:89:eb:2d:05:d5:fa:b3:
0e:07:f0:0f:f1:e1:5c:89:74:a4:fc:d1:36:ee:2c:
0a:c6:83:91:18:c1:1b:06:43:2c:44:a2:d9:62:97:
5c:e9:a3:62:e6:ce:ef:7c:f6:d5:5c:61:ae:f4:56:
85:f1:aa:b5:e3:99:0d:24:e4:b8:7a:fb:2c:32:05:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AC:A3:B5:5E:07:E4:4E:66:A5:84:7F:39:5F:4F:54:DB:47:E9:24
X509v3 Authority Key Identifier:
keyid:F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20323134343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.12.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a7:dd:37:a8:63:95:9f:5a:99:4e:be:0d:82:8b:d4:b5:d8:
86:4b:e8:b8:bf:1e:b2:79:4c:59:fc:11:1a:d5:52:ff:1c:ac:
7b:26:7a:eb:f3:7e:7e:32:68:51:76:8a:51:6b:75:18:60:55:
bf:d4:ca:af:23:5a:40:38:d8:cd:72:13:52:f6:13:15:75:1c:
51:3d:13:a2:f4:07:1f:84:0d:cd:17:b9:09:12:f1:c5:c5:21:
36:f7:6b:ca:9a:8b:b4:e4:a0:b8:7d:77:a0:d4:50:c4:cb:47:
68:7b:f7:01:a8:b7:c6:a0:de:cb:8f:4d:13:dc:d5:76:b8:3c:
4f:4c:fd:d3:cd:4c:21:d2:c8:7d:b7:8c:79:a6:97:08:bf:ac:
a2:54:8a:21:47:43:ec:c9:cf:56:c4:e8:b0:43:a9:85:37:0e:
d5:c5:cc:b7:ff:6d:f0:b9:69:9d:b5:de:a5:71:06:f7:e3:3e:
01:44:3c:8c:70:9d:0b:d5:b7:d4:c9:bc:fa:32:f0:06:75:f9:
61:ac:60:02:c9:34:a6:65:31:43:f4:a1:7b:ae:aa:f5:64:05:
f2:81:4e:14:f5:81:db:b2:e2:49:c5:bf:9d:09:d3:70:dd:95:
72:59:9c:84:68:fd:35:28:b2:35:55:44:db:d6:57:2a:34:93:
06:3d:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:55:11 2026 by rpki-client