
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130322e302f32342d3234203d3e20343032383537.roa
File: 3137332e302e3130322e302f32342d3234203d3e20343032383537.roa (raw, json)
Hash identifier: k2YrOjZEWAfGU/z9W4EPfs271VnHNqXLAbjtOzvBpLA=
Subject key identifier: AD:0D:B1:44:65:0E:AC:38:0F:84:D9:78:1A:7C:B4:EB:0D:6C:2F:3A
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 1090E606FC38F762830F08B9AA25E4A8FAF640F4
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130322e302f32342d3234203d3e20343032383537.roa
Signing time: Wed 30 Sep 2026 09:14:20 +0000
ROA not before: Wed 30 Sep 2026 09:09:20 +0000
ROA not after: Wed 29 Sep 2027 09:14:20 +0000
asID: 402857
IP address blocks: 173.0.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:90:e6:06:fc:38:f7:62:83:0f:08:b9:aa:25:e4:a8:fa:f6:40:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:20 2026 GMT
Not After : Sep 29 09:14:20 2027 GMT
Subject: CN=AD0DB144650EAC380F84D9781A7CB4EB0D6C2F3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:b9:5a:07:6b:0a:6b:fc:30:9a:4f:6e:11:
8d:49:8e:72:29:c5:b4:f7:37:f8:f5:36:a3:ec:88:
fb:4f:68:2b:a9:a4:63:35:47:83:90:75:ad:b2:6e:
47:c4:dd:de:18:54:98:3c:87:6e:01:51:51:5a:f2:
66:6e:2c:43:ce:ce:7e:68:b0:08:85:c1:39:c5:f6:
e3:96:17:53:f8:cb:57:a3:f0:03:82:71:6f:90:52:
7b:73:b3:a5:dd:7e:c7:3c:19:02:5b:55:1f:fe:13:
28:cb:88:45:a2:6b:98:81:ca:e3:59:e0:7f:09:c3:
fd:65:e2:cb:93:7c:26:c8:34:a2:b4:80:42:f0:05:
8d:a1:e5:38:5f:57:98:00:4b:30:c1:1c:ab:6e:fa:
1d:d6:43:eb:79:5b:b2:c1:b0:64:9b:f4:c7:f6:34:
1a:a2:3e:9e:25:9b:29:e5:80:ec:65:9d:19:1e:93:
75:ed:8f:34:a1:71:0a:ad:46:6a:55:e2:8d:94:3c:
ad:14:64:b4:7d:21:e3:63:d3:4d:4f:70:0b:6e:35:
70:ee:c6:c6:f4:8d:7d:fa:96:3e:5d:c8:cc:59:ed:
35:9c:7c:aa:2d:32:8c:ce:56:ae:57:a9:dd:7f:b8:
95:23:a2:b1:a6:cd:53:e3:49:9c:fc:e0:58:9f:62:
66:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0D:B1:44:65:0E:AC:38:0F:84:D9:78:1A:7C:B4:EB:0D:6C:2F:3A
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130322e302f32342d3234203d3e20343032383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.102.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:9d:86:f5:37:08:2a:03:65:dc:b7:07:7d:dd:13:bc:fc:c1:
2b:fe:8f:ea:e8:96:b1:af:6f:a5:04:57:c7:0d:8f:0f:f2:7b:
8a:42:97:33:ee:49:54:82:aa:4c:db:0e:ba:ba:10:b5:d9:3d:
07:4c:c5:a4:10:a5:f5:70:ed:f1:8e:ba:1a:18:79:92:6d:4b:
00:83:e3:cd:51:07:54:0d:84:81:6d:d2:0a:08:56:52:e2:a8:
80:e9:29:6d:67:cf:fd:11:25:82:ff:b6:b3:18:ca:0c:0b:07:
c2:5e:a7:ad:44:83:c7:c2:0b:73:a2:22:1c:52:4a:18:d8:66:
c2:13:1e:a5:63:cc:ac:7b:ea:bd:9e:56:44:da:0a:14:03:aa:
23:b9:50:b4:59:f8:c1:00:42:35:c8:d1:5a:b3:42:a5:9c:95:
ce:39:69:38:6e:04:25:12:96:5d:c5:81:c8:6e:a9:89:b2:e5:
12:73:53:1a:67:3f:7f:aa:1e:0d:31:a3:ba:b7:d7:44:1a:e3:
b4:07:f9:31:0f:e4:74:88:5f:bf:5c:8c:8c:08:64:93:aa:c2:
64:b9:1a:d6:84:3d:75:77:b3:66:64:b6:4d:f7:eb:4e:64:1d:
83:55:e9:90:ff:d4:55:a4:f5:04:3d:d8:b5:dd:8f:54:7c:e2:
5a:c6:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:30 2026 by rpki-client