
$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e20313938353636.roa
File: 3134302e3233352e32342e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier: j4dshgBR7fs0ibFIX6OL2wRKAXHk3/xT2GwBu+PxFu0=
Subject key identifier: 6F:B2:37:AF:82:97:FB:18:23:CC:1B:DE:4B:E6:BE:C7:11:8A:11:34
Certificate issuer: /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial: 3FE687B733BB1A14318374B1A2459B1E3641AB2A
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access: rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e20313938353636.roa
Signing time: Sun 04 Oct 2026 20:19:57 +0000
ROA not before: Sun 04 Oct 2026 20:14:57 +0000
ROA not after: Sun 03 Oct 2027 20:19:57 +0000
asID: 198566
IP address blocks: 140.235.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 09:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e6:87:b7:33:bb:1a:14:31:83:74:b1:a2:45:9b:1e:36:41:ab:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Validity
Not Before: Oct 4 20:14:57 2026 GMT
Not After : Oct 3 20:19:57 2027 GMT
Subject: CN=6FB237AF8297FB1823CC1BDE4BE6BEC7118A1134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:03:f8:e8:fb:e7:00:b7:89:9d:40:87:6f:
00:3b:36:e2:47:c9:69:4a:b4:27:57:72:e9:a4:f5:
18:c9:d6:90:c7:4f:15:df:47:c4:27:48:4a:15:26:
4c:fa:92:ea:8c:5f:e4:9f:59:fc:91:08:2d:d3:c3:
29:11:b4:26:73:cb:95:11:d9:87:50:37:18:e9:48:
59:08:50:5b:cf:5f:da:86:2f:93:d5:ae:a5:b3:48:
d9:4c:93:cf:3e:c9:3a:78:b2:11:bb:4c:4f:90:96:
7e:aa:b1:ab:f6:f3:b4:ff:29:08:86:43:70:e4:21:
0f:f0:cf:a4:13:d6:36:8f:89:0e:1f:f3:1e:5e:b1:
71:9e:e2:a9:da:ba:30:80:dc:13:32:31:de:5f:e6:
fb:09:92:71:31:29:37:29:96:7d:55:15:7f:9d:e2:
c5:90:e2:6a:bf:d9:16:f8:41:79:28:6f:4c:cb:43:
3f:01:2c:d8:c5:fa:be:56:22:b0:da:95:99:f2:64:
c3:c2:5a:57:a3:5f:61:b9:9f:6e:07:49:99:a1:f9:
3b:1e:8a:85:ab:38:ff:29:5a:f7:f5:ed:f7:1e:42:
61:55:44:f7:fd:6c:6a:ea:cc:30:f7:a0:4e:c6:90:
e1:8b:a2:0d:f0:9c:5b:6a:39:05:93:f9:6b:45:b3:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:37:AF:82:97:FB:18:23:CC:1B:DE:4B:E6:BE:C7:11:8A:11:34
X509v3 Authority Key Identifier:
keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e20313938353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.24.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ea:ad:ed:8a:cc:45:92:0b:c3:65:91:bd:37:61:04:cc:80:
85:0c:7d:1b:e2:1f:b6:7b:de:dd:15:4d:0d:8e:9c:d5:e9:31:
17:85:73:10:73:32:84:8d:6f:eb:a9:cb:59:84:11:43:6e:a1:
1a:dc:76:ef:fa:b0:ad:d0:d0:d4:01:ed:c0:51:44:d9:b2:8d:
1b:fc:15:ac:64:14:f7:84:80:bd:5e:20:b8:ff:81:8c:db:27:
4e:44:02:63:75:dd:6e:c7:05:a8:fb:30:66:a3:c2:c9:0c:26:
4e:ab:76:c2:37:ac:bf:b2:84:6a:35:eb:ac:86:2b:1a:bd:f7:
00:f5:f7:43:11:e2:7f:77:1f:e7:c1:3d:8a:47:ce:cf:06:a7:
ca:f4:71:5e:f0:c4:6a:95:b4:b6:fe:24:83:ec:b5:16:82:69:
ec:16:2c:83:b5:47:31:2e:c0:aa:e2:52:85:cf:4b:b7:47:37:
f5:ba:ff:62:4e:58:df:d5:f8:10:0e:dd:1f:9a:71:2e:81:0a:
ec:21:57:83:50:f0:23:f8:1f:09:56:fb:18:bc:d3:1d:4c:91:
2b:cd:72:73:1f:d2:a1:f2:1e:ac:13:8d:b2:28:7c:a9:e8:a8:
c6:fe:64:f7:6b:b5:f0:9c:7b:fd:04:1b:20:2f:dc:1d:19:2e:
ab:35:e6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:00:17 2026 by rpki-client