
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
File: 37342e3132302e3132302e302f32342d3234203d3e2039333132.roa (raw, json)
Hash identifier: JU9beN667qlVitFJ8N2ti6nSK8/e5OAp5//CQFucTE8=
Subject key identifier: C5:D5:D6:94:FA:BC:22:62:1A:85:69:6A:E0:EA:1D:16:60:82:0D:B8
Certificate issuer: /CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Certificate serial: 662401A4A79AC55075AAC129B85BD3226A2A911F
Authority key identifier: 35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
Signing time: Fri 25 Sep 2026 21:36:20 +0000
ROA not before: Fri 25 Sep 2026 21:31:20 +0000
ROA not after: Fri 24 Sep 2027 21:36:20 +0000
asID: 9312
IP address blocks: 74.120.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/907e0105-3516-47a0-a9c2-5f0b77661cb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 08:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:24:01:a4:a7:9a:c5:50:75:aa:c1:29:b8:5b:d3:22:6a:2a:91:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2
Validity
Not Before: Sep 25 21:31:20 2026 GMT
Not After : Sep 24 21:36:20 2027 GMT
Subject: CN=C5D5D694FABC22621A85696AE0EA1D1660820DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:0c:3a:d2:4f:33:14:21:91:c9:36:d6:75:
0c:ec:0a:fb:7f:c6:b7:63:99:d0:07:a7:0f:ce:cd:
52:7a:09:13:05:b1:28:1b:d6:b4:ba:28:17:fa:be:
04:2a:9e:62:98:fa:f0:73:20:31:2b:68:e0:a4:d1:
02:ac:26:fd:c8:d8:6f:a4:d4:c4:28:01:b3:a0:af:
21:e7:85:b9:77:6a:b1:30:f9:6e:de:5c:4c:ea:61:
d0:58:32:13:74:cf:3c:df:12:b0:60:1a:6e:3a:e0:
e1:e4:e8:75:0a:8e:be:3f:55:94:ac:c5:19:25:b5:
72:ac:cc:c9:fb:98:b6:22:55:ba:1d:cb:61:a0:f1:
b6:bf:d1:69:c7:c6:0f:01:a3:ab:a1:42:65:12:6f:
3a:4c:cc:c5:ba:75:70:00:46:cb:b1:9d:70:e1:66:
8f:7c:98:15:fe:19:1e:81:c3:fc:73:35:9d:f1:2b:
02:b6:51:d6:bb:e3:f0:10:54:a1:8d:ea:b8:06:12:
55:73:12:0c:c2:6e:0f:84:14:d8:05:e9:d2:90:72:
5a:93:3c:e2:9a:6a:1d:b5:9f:79:73:84:5d:a5:71:
70:64:1a:9f:76:a2:14:b3:f7:5d:5f:6f:28:57:87:
84:cc:e8:c4:c8:e3:47:e5:9b:3a:64:77:5c:d4:96:
e4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D5:D6:94:FA:BC:22:62:1A:85:69:6A:E0:EA:1D:16:60:82:0D:B8
X509v3 Authority Key Identifier:
keyid:35:14:EE:D0:EE:5C:55:34:23:A2:5F:1D:7D:56:FC:26:13:11:A1:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/3514EED0EE5C553423A25F1D7D56FC261311A1EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/907e0105-3516-47a0-a9c2-5f0b77661cb1/9995ba05e90aa3951d9ab39d9355b6b683e32e6a19adf153f2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185d07c5f6044eb/0/37342e3132302e3132302e302f32342d3234203d3e2039333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.120.120.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:49:22:24:b4:f5:66:20:17:ba:da:b2:07:78:7b:f2:b6:a9:
56:7c:42:a6:e1:94:76:58:2c:a7:1f:78:85:3f:5b:33:26:73:
87:0d:02:0c:01:05:6e:50:97:eb:60:92:91:50:5f:b0:aa:d4:
62:97:66:55:56:fc:42:47:51:f5:25:d2:04:3a:54:90:f9:67:
c8:e3:7c:6c:fb:3d:ff:78:76:c5:48:77:5f:c4:d1:00:f4:22:
28:96:82:39:57:38:0e:37:ce:0b:09:8a:75:4b:37:13:24:c8:
6e:b1:dd:b0:c6:53:a0:68:cd:f6:f4:d0:6b:97:12:7b:10:43:
41:5f:fb:79:5b:31:ec:11:8e:6b:71:d6:7b:8f:54:df:ec:80:
d4:36:3f:a6:24:a3:7d:a0:6b:f6:be:03:ec:b9:4c:cf:22:8a:
71:dc:e3:7e:da:48:30:a7:e5:b3:87:74:b6:ba:80:30:87:bc:
5c:d4:d7:28:49:9b:b3:48:cc:8c:9f:aa:ab:a0:a0:90:25:ea:
2b:d7:47:66:bd:00:f2:33:9a:aa:8d:89:d1:e7:a0:74:f1:13:
82:23:55:cb:df:bd:66:48:40:82:eb:6f:74:bb:13:b4:70:c3:
8f:85:31:dd:09:7b:b1:2a:c0:07:f4:f3:b7:eb:b3:70:00:1a:
53:3e:09:db
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUZiQBpKeaxVB1qsEpuFvTImoqkR8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTk5NWJhMDVlOTBhYTM5NTFkOWFiMzlkOTM1NWI2YjY4
M2UzMmU2YTE5YWRmMTUzZjIwHhcNMjYwOTI1MjEzMTIwWhcNMjcwOTI0MjEzNjIw
WjAzMTEwLwYDVQQDEyhDNUQ1RDY5NEZBQkMyMjYyMUE4NTY5NkFFMEVBMUQxNjYw
ODIwREI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUUMOtJPMxQh
kck21nUM7Ar7f8a3Y5nQB6cPzs1SegkTBbEoG9a0uigX+r4EKp5imPrwcyAxK2jg
pNECrCb9yNhvpNTEKAGzoK8h54W5d2qxMPlu3lxM6mHQWDITdM883xKwYBpuOuDh
5Oh1Co6+P1WUrMUZJbVyrMzJ+5i2IlW6HcthoPG2v9Fpx8YPAaOroUJlEm86TMzF
unVwAEbLsZ1w4WaPfJgV/hkegcP8czWd8SsCtlHWu+PwEFShjeq4BhJVcxIMwm4P
hBTYBenSkHJakzzimmodtZ95c4RdpXFwZBqfdqIUs/ddX28oV4eEzOjEyONH5Zs6
ZHdc1JbkKQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMXV1pT6vCJiGoVpauDqHRZg
gg24MB8GA1UdIwQYMBaAFDUU7tDuXFU0I6JfHX1W/CYTEaHrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1ZDA3YzVmNjA0NGViLzAv
MzUxNEVFRDBFRTVDNTUzNDIzQTI1RjFEN0Q1NkZDMjYxMzExQTFFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzkwN2UwMTA1LTM1MTYtNDdhMC1hOWMyLTVmMGI3NzY2MWNiMS85OTk1
YmEwNWU5MGFhMzk1MWQ5YWIzOWQ5MzU1YjZiNjgzZTMyZTZhMTlhZGYxNTNmMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1ODgwMjllMDE4NWQw
N2M1ZjYwNDRlYi8wLzM3MzQyZTMxMzIzMDJlMzEzMjMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzkzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKeHgwDQYJKoZIhvcNAQELBQAD
ggEBAAxJIiS09WYgF7rasgd4e/K2qVZ8QqbhlHZYLKcfeIU/WzMmc4cNAgwBBW5Q
l+tgkpFQX7Cq1GKXZlVW/EJHUfUl0gQ6VJD5Z8jjfGz7Pf94dsVId1/E0QD0IiiW
gjlXOA43zgsJinVLNxMkyG6x3bDGU6Bozfb00GuXEnsQQ0Ff+3lbMewRjmtx1nuP
VN/sgNQ2P6Yko32ga/a+A+y5TM8iinHc437aSDCn5bOHdLa6gDCHvFzU1yhJm7NI
zIyfqqugoJAl6ivXR2a9APIzmqqNidHnoHTxE4IjVcvfvWZIQILrb3S7E7Rww4+F
Md0Je7EqwAf087frs3AAGlM+Cds=
-----END CERTIFICATE-----
Generated at Wed Oct 14 08:53:36 2026 by rpki-client