
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130302e302f32342d3234203d3e203534303034.roa
File: 3137332e302e3130302e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: LZZGMfJJg+fiO+v+yohzjzhBTpngSNk/Y3eXuVTYRLY=
Subject key identifier: CE:97:2C:D9:45:97:CF:38:2C:5C:8B:BF:68:C4:E3:F0:D6:4A:E9:9E
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 70F1E82F8EAB7DF26E05175C4171CB5DDB518EA7
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130302e302f32342d3234203d3e203534303034.roa
Signing time: Wed 30 Sep 2026 09:14:21 +0000
ROA not before: Wed 30 Sep 2026 09:09:21 +0000
ROA not after: Wed 29 Sep 2027 09:14:21 +0000
asID: 54004
IP address blocks: 173.0.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f1:e8:2f:8e:ab:7d:f2:6e:05:17:5c:41:71:cb:5d:db:51:8e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:21 2026 GMT
Not After : Sep 29 09:14:21 2027 GMT
Subject: CN=CE972CD94597CF382C5C8BBF68C4E3F0D64AE99E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:fe:7d:e2:64:19:da:ce:12:37:5b:bc:f6:
e9:92:5d:2d:6b:ae:48:17:fa:83:37:17:48:47:63:
4b:b0:fb:00:80:d5:80:2a:db:c9:ae:65:66:e1:a8:
ac:25:70:b9:18:98:f0:f7:f7:1c:0e:e8:68:2f:ee:
06:6c:43:f2:5d:c8:87:5d:d8:f5:ee:73:4d:47:c3:
35:35:6e:52:ad:28:ff:57:f0:03:a6:4c:c4:7a:cd:
15:e0:13:6a:fb:34:d8:b1:92:c6:5d:5d:05:1b:f3:
29:30:d3:18:85:7a:95:28:b0:b2:58:3b:3d:6b:b2:
b6:c5:f6:2e:3c:02:ad:6d:3d:31:4d:bd:11:ea:5e:
c1:35:e4:79:c8:39:6e:da:8c:66:3f:df:f1:f4:da:
ba:3d:47:87:78:f0:ae:35:75:5c:1b:dc:53:8b:32:
07:4c:82:6d:3b:09:0f:93:e7:71:b0:14:61:f2:b6:
0a:a4:fe:f5:6e:6a:54:8d:8d:f9:1a:b9:63:52:60:
1e:85:e6:e9:37:71:9c:27:0f:c4:1e:6e:65:05:8a:
db:cb:f8:93:d5:a1:83:45:60:d7:99:60:92:b6:d8:
84:9e:5a:6b:3b:90:74:48:c4:0a:ca:f2:bf:6b:dd:
76:5f:ec:1e:0d:37:61:f8:4d:6b:3f:0b:aa:a0:67:
17:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:97:2C:D9:45:97:CF:38:2C:5C:8B:BF:68:C4:E3:F0:D6:4A:E9:9E
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130302e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.100.0/24
Signature Algorithm: sha256WithRSAEncryption
31:bd:2e:be:77:3c:be:05:55:99:84:96:cc:2f:f8:8f:e0:ca:
0d:f8:67:68:e6:89:b2:99:ef:2d:96:5c:ef:a6:d4:ee:52:5e:
de:b0:e8:02:4e:33:69:94:83:09:a6:fe:c5:b5:8d:9d:79:42:
70:67:b8:ee:ac:bb:11:72:d7:6d:e8:4c:e6:5f:31:b1:cd:c1:
df:69:ad:8e:9f:b0:2a:0f:17:8d:cc:9a:c3:93:54:c5:f2:af:
06:26:34:48:a1:c3:f3:5b:39:e0:b9:97:d7:06:88:6c:10:26:
c4:5a:dc:d0:38:54:05:7e:86:1a:04:f6:06:0c:e7:68:3e:a2:
78:aa:71:fc:fd:bb:fd:2e:f7:2e:5f:47:57:a2:62:24:55:b3:
8a:81:4a:2d:ff:da:89:48:0b:be:1f:0c:93:89:b7:b8:ee:41:
de:6a:3b:21:30:39:db:94:80:e1:8b:fa:f9:de:5a:ea:40:85:
db:86:8c:92:db:cc:2e:e9:9b:7e:4f:ec:0c:3c:00:66:ee:d4:
1d:14:8f:c2:63:c5:a4:f8:5b:19:67:33:15:1f:f0:53:3b:01:
7c:9d:b4:5e:08:e7:bc:6e:ca:a4:6e:72:a5:f9:e0:65:7b:43:
37:89:18:f2:06:c1:3d:3e:97:9a:32:95:c1:59:79:8f:21:82:
fd:5e:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:23 2026 by rpki-client