
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130312e302f32342d3234203d3e203534303034.roa
File: 3137332e302e3130312e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: wpYDwhNbCf7AibXXYBxvncAt/bVsdYsnTKCO2gC3j94=
Subject key identifier: 3B:DF:52:79:A7:D6:F6:0A:C3:10:D5:B7:FA:6E:39:58:6D:34:C5:54
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 2D0F93D7AB43EBD5E4211F77AB675467C92F226C
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130312e302f32342d3234203d3e203534303034.roa
Signing time: Wed 30 Sep 2026 09:14:21 +0000
ROA not before: Wed 30 Sep 2026 09:09:21 +0000
ROA not after: Wed 29 Sep 2027 09:14:21 +0000
asID: 54004
IP address blocks: 173.0.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:0f:93:d7:ab:43:eb:d5:e4:21:1f:77:ab:67:54:67:c9:2f:22:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:21 2026 GMT
Not After : Sep 29 09:14:21 2027 GMT
Subject: CN=3BDF5279A7D6F60AC310D5B7FA6E39586D34C554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:02:08:39:90:6f:02:0b:7e:a1:7e:2f:39:
82:f5:23:fa:2f:df:d3:bf:3c:31:85:d3:82:4c:3e:
98:01:c9:69:5b:cf:66:a2:30:ec:44:51:a8:35:07:
e9:32:5a:f2:dd:76:dd:0d:7c:cf:f3:8f:8f:fa:dd:
c9:18:cc:ad:88:ae:cf:96:62:70:26:70:1c:1f:47:
2d:1a:d2:50:70:eb:03:0a:65:54:aa:b2:c4:95:5a:
79:1d:96:1b:c1:8c:59:0a:48:d2:b7:dd:37:49:06:
bc:e7:30:5f:21:b8:78:81:27:9c:f8:77:f4:3c:41:
66:0b:25:8f:70:41:08:69:d3:4b:b2:39:68:c4:da:
d4:2c:cc:77:8a:ab:b6:0b:47:11:dd:7b:d8:10:31:
c6:5b:2d:66:bd:af:2e:e9:7f:3c:ce:f5:fa:89:41:
46:5c:1c:4a:db:fa:f8:17:cf:21:e1:d3:8f:a0:22:
aa:dd:20:bd:26:c5:c5:49:79:c1:3c:fb:0d:66:95:
0b:af:7f:c8:5f:ce:6e:a3:04:4b:3c:f6:d0:11:2f:
ec:46:a6:da:18:9f:3c:dc:1c:e2:5a:d2:32:3e:0b:
13:5e:88:30:9f:71:66:1a:c2:3f:25:8b:ed:e7:72:
55:47:50:04:cf:b0:48:e1:bc:9d:f6:f4:82:c5:e8:
3e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DF:52:79:A7:D6:F6:0A:C3:10:D5:B7:FA:6E:39:58:6D:34:C5:54
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130312e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.101.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:14:ab:6e:9f:26:a3:69:af:61:61:97:19:6a:30:7d:e5:71:
98:af:87:0e:f1:4b:b4:30:19:da:8e:a0:81:9e:53:7c:f3:43:
13:98:86:12:89:78:f5:a8:67:66:e6:40:29:ac:01:d8:ae:8a:
69:1c:19:c5:81:4c:2d:41:8d:c5:8e:46:50:51:8f:e3:bd:3f:
1e:3b:6f:9b:41:79:4d:f8:19:6d:dd:03:d5:ee:4b:a7:f6:95:
7c:b8:52:1f:f9:99:51:43:d6:a6:30:fc:35:0e:63:6c:89:12:
68:bf:81:6a:06:28:02:ed:41:a7:44:32:e6:33:bc:c3:c9:32:
cc:5c:55:02:46:65:3b:33:a7:f3:ad:2f:ea:33:1b:62:a8:0e:
5f:e1:19:4c:1a:08:82:19:22:bf:fd:9f:a1:08:c2:48:50:d6:
b1:af:39:bb:2d:0e:40:f9:59:43:f7:23:7b:25:e0:c6:b3:60:
21:8b:20:fa:ad:b5:96:7f:90:67:e0:1c:10:49:74:93:cc:d0:
89:78:84:57:e1:93:89:e0:b7:ef:dd:45:4a:37:cf:9c:bf:61:
68:6a:1d:d6:22:a9:d7:f8:82:83:84:ce:a4:77:e0:72:c7:ed:
d3:df:61:bd:71:be:15:3a:8f:52:dd:3b:2b:f0:ad:90:d7:af:
2e:26:6d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:23 2026 by rpki-client