
$ rpki-client -vvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e203430323434.roa
File: 3134302e3233352e32342e302f32342d3234203d3e203430323434.roa (raw, json)
Hash identifier: VIdWF7tMen6xKzT1k/0aVe7e6bw77oDLcoav5MtmRw4=
Subject key identifier: 91:58:FE:CF:6D:65:87:81:E0:FC:DC:49:09:AD:A8:CB:2E:21:52:D8
Certificate issuer: /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial: 2004F5EEC71FA3FF2D449AB9C1B1D5EB9C720622
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access: rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e203430323434.roa
Signing time: Wed 01 Jul 2026 07:26:45 +0000
ROA not before: Wed 01 Jul 2026 07:21:45 +0000
ROA not after: Wed 30 Jun 2027 07:26:45 +0000
asID: 40244
IP address blocks: 140.235.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 23:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:04:f5:ee:c7:1f:a3:ff:2d:44:9a:b9:c1:b1:d5:eb:9c:72:06:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Validity
Not Before: Jul 1 07:21:45 2026 GMT
Not After : Jun 30 07:26:45 2027 GMT
Subject: CN=9158FECF6D658781E0FCDC4909ADA8CB2E2152D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:11:77:fe:9f:46:f2:22:b2:1d:48:81:79:
aa:82:60:06:0c:99:d5:77:d9:1e:61:3b:25:a4:8f:
2d:34:f1:b4:43:36:2a:90:da:90:7b:9c:68:d7:06:
c7:5d:16:50:9f:12:22:cb:a1:2f:7b:6d:bf:f1:65:
e7:5d:b1:2d:e3:7d:fd:0f:0c:01:b3:0f:2c:37:b1:
08:78:79:a0:44:e7:94:93:79:2c:61:e4:a5:15:f6:
f2:fb:7e:6a:c5:4b:f5:76:28:d6:76:12:86:8c:6f:
7f:e9:2c:ab:f9:17:c1:ff:6b:bb:31:7f:75:bc:97:
f9:b8:a5:b7:bb:71:76:aa:6f:21:fa:28:b7:28:3b:
00:a2:5b:9e:e2:93:f8:9b:cb:2e:50:98:ea:c4:da:
f0:06:3b:38:83:75:4f:d4:d9:00:4a:85:1d:41:f7:
a8:64:8d:e2:49:ef:f7:5a:e8:4c:c6:a7:55:e2:47:
e3:89:5c:41:81:ef:b6:ce:75:b1:ef:da:de:b0:58:
8b:a0:4b:da:63:2c:f3:3b:3f:b4:bb:f4:2d:18:73:
14:d1:39:97:60:7a:ed:32:aa:c7:46:4b:7e:39:e5:
9d:83:39:b4:d1:78:d5:cc:54:3c:ab:fb:cc:c0:db:
a4:90:88:ee:3a:17:01:32:31:9c:49:ef:88:fb:25:
16:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:58:FE:CF:6D:65:87:81:E0:FC:DC:49:09:AD:A8:CB:2E:21:52:D8
X509v3 Authority Key Identifier:
keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e203430323434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.24.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:e3:8f:04:44:f9:1f:e0:e7:66:d0:4a:4d:7a:72:b7:3d:d3:
30:ea:6a:a8:64:a4:96:cd:0d:c7:31:82:5b:67:21:0e:44:2f:
c1:fe:77:e9:e5:34:24:0a:e5:13:76:51:20:51:ef:49:77:c5:
90:c4:ff:c0:7e:ea:24:85:94:9a:79:8e:95:a3:2d:32:6a:e2:
ec:5c:2c:2e:17:6c:62:da:77:f3:39:9d:a4:ce:8b:04:d4:3e:
19:9d:85:70:05:20:23:ac:68:08:3f:d2:b8:7b:1a:18:2d:1f:
26:7e:b2:e7:9a:ed:ea:bb:7d:f9:0a:ea:e7:66:64:30:6f:82:
86:43:ee:1a:91:b0:c0:07:0e:e4:58:c6:39:cb:76:30:2c:37:
2e:67:c8:76:e0:9a:05:82:8f:d8:46:c4:fb:fc:2a:59:18:08:
7b:ca:3c:95:08:ef:8f:df:e7:2b:4a:56:e5:f6:81:69:62:10:
20:59:7a:a6:3c:ec:b1:f8:fa:6d:cb:8b:46:2a:90:67:7f:4b:
69:a1:ac:38:7b:26:52:05:e4:f5:e3:e8:bc:d1:6a:39:e7:de:
a7:3e:c7:a2:c5:91:e0:1f:95:ea:f4:76:12:a2:cd:b3:da:ed:
39:d6:d7:fb:f5:94:57:d7:bc:55:9c:7c:46:f5:5c:02:66:b4:
be:3d:8f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:09:01 2026 by rpki-client