
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130342e302f32342d3234203d3e2037343539.roa
File: 3137332e302e3130342e302f32342d3234203d3e2037343539.roa (raw, json)
Hash identifier: NnW0YyTkM0VU9UMBkB2f9TGocPdY3u5676Ro9yNa6NE=
Subject key identifier: FA:40:81:98:B7:3A:05:38:78:8B:ED:B4:1E:BA:6F:DE:61:F9:26:E8
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 31B489AB737B0DF75AA1E7D4730137CE2C8D7E61
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130342e302f32342d3234203d3e2037343539.roa
Signing time: Wed 30 Sep 2026 09:14:20 +0000
ROA not before: Wed 30 Sep 2026 09:09:20 +0000
ROA not after: Wed 29 Sep 2027 09:14:20 +0000
asID: 7459
IP address blocks: 173.0.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:b4:89:ab:73:7b:0d:f7:5a:a1:e7:d4:73:01:37:ce:2c:8d:7e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:20 2026 GMT
Not After : Sep 29 09:14:20 2027 GMT
Subject: CN=FA408198B73A0538788BEDB41EBA6FDE61F926E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:48:61:d7:73:b1:fe:9d:8a:13:44:c7:3b:
34:aa:d1:6a:f4:c2:64:05:fc:2e:3a:e5:b2:53:9e:
a6:99:59:f6:ac:1a:72:40:81:77:45:1d:49:22:c7:
32:bb:6e:61:a1:0e:3c:fa:a2:68:b4:8b:46:10:c4:
97:9d:9a:23:49:69:d0:c2:21:a0:42:c3:97:2c:41:
19:73:29:40:ad:f3:1e:75:90:a8:13:b8:1c:8f:9f:
cf:61:c6:60:ee:d8:45:f7:85:bf:7c:dc:92:68:c3:
d4:cd:d5:ae:29:95:c2:ba:8f:52:3a:82:f2:c8:6d:
78:6a:01:d8:08:15:e2:ed:5f:8a:12:44:24:b9:fc:
7a:3c:57:38:5f:a2:d1:8a:5d:5c:06:20:4d:52:9c:
40:af:b2:81:db:42:19:f1:90:7a:cf:54:7d:2d:d6:
f7:df:20:72:3b:c2:1c:6f:41:71:9e:6c:cf:3c:cd:
e2:82:00:e7:e6:5b:d1:c1:9f:57:32:ad:c9:6f:25:
f1:a7:f7:70:88:f5:36:c3:c4:45:d9:c3:58:ce:ca:
f1:8a:33:7d:25:2c:4f:e2:20:42:4a:1a:9f:cd:1b:
8b:f9:56:cd:32:9d:5e:b0:30:ce:dd:a9:fc:07:63:
3a:a3:98:4e:a2:d1:93:6a:6a:68:bf:a7:25:c1:99:
ff:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:81:98:B7:3A:05:38:78:8B:ED:B4:1E:BA:6F:DE:61:F9:26:E8
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130342e302f32342d3234203d3e2037343539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.104.0/24
Signature Algorithm: sha256WithRSAEncryption
96:36:65:34:0e:cb:60:45:17:8f:f5:44:48:9b:59:4c:69:f4:
75:64:cc:a7:b4:25:9d:92:a4:cc:79:cc:64:a0:e7:8a:67:4e:
ed:f6:d7:64:2c:04:96:19:15:5c:fe:8d:dc:6d:20:a6:6c:2f:
47:2c:f0:28:d7:67:1d:28:c2:bd:b3:86:56:dd:b7:86:f2:7a:
81:64:1c:74:c7:41:81:d5:66:56:a1:36:58:53:d8:50:31:ed:
34:50:b2:c0:28:b0:a2:90:b0:94:fb:3f:58:91:b0:ce:cd:7d:
e2:c8:5a:ff:fb:51:28:a1:26:d5:4c:fb:46:18:5a:d7:47:1a:
1a:e3:0d:b5:f3:cb:57:e1:4e:fb:e7:4c:05:1e:ed:f6:1f:fc:
4d:3a:7d:22:f9:ae:d6:57:c6:31:79:13:59:74:47:c1:14:c5:
06:ea:9d:94:60:f2:57:7a:f6:25:7d:dc:1e:5c:84:c1:f7:12:
cc:29:4f:fa:a4:21:70:d8:c8:e5:2d:c7:53:00:8b:ef:eb:3b:
4a:83:93:c0:66:b2:70:04:04:93:62:35:dc:fc:68:7d:5a:02:
76:89:19:d4:23:72:6a:5e:10:77:74:32:53:61:fc:21:45:b9:
27:46:0b:97:a2:54:d5:6b:61:ad:fa:8a:3a:ee:74:df:be:d0:
51:e8:1e:84
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUMbSJq3N7DfdaoefUcwE3ziyNfmEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTA3NDk5NmMyNzA3ZTY2YWJmY2JmY2VlZmQ0NzBlNDFj
YjM2MGFhYzY3OGZlMzgyNzIwHhcNMjYwOTMwMDkwOTIwWhcNMjcwOTI5MDkxNDIw
WjAzMTEwLwYDVQQDEyhGQTQwODE5OEI3M0EwNTM4Nzg4QkVEQjQxRUJBNkZERTYx
RjkyNkU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+RIYddzsf6d
ihNExzs0qtFq9MJkBfwuOuWyU56mmVn2rBpyQIF3RR1JIscyu25hoQ48+qJotItG
EMSXnZojSWnQwiGgQsOXLEEZcylArfMedZCoE7gcj5/PYcZg7thF94W/fNySaMPU
zdWuKZXCuo9SOoLyyG14agHYCBXi7V+KEkQkufx6PFc4X6LRil1cBiBNUpxAr7KB
20IZ8ZB6z1R9Ldb33yByO8Icb0FxnmzPPM3iggDn5lvRwZ9XMq3JbyXxp/dwiPU2
w8RF2cNYzsrxijN9JSxP4iBCShqfzRuL+VbNMp1esDDO3an8B2M6o5hOotGTampo
v6clwZn/TwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPpAgZi3OgU4eIvttB66b95h
+SboMB8GA1UdIwQYMBaAFBRdzfcdn4kSrVlXRJDXWAvADTsWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5YzAyZGQ1MzY4LzAv
MTQ1RENERjcxRDlGODkxMkFENTk1NzQ0OTBENzU4MEJDMDBEM0IxNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5L2Q3NGNhNjY0LThiYTQtNGRiOS1iZTg1LWRiZGIyMGY2YWYyNy9hMDc0
OTk2YzI3MDdlNjZhYmZjYmZjZWVmZDQ3MGU0MWNiMzYwYWFjNjc4ZmUzODI3Mi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5
YzAyZGQ1MzY4LzAvMzEzNzMzMmUzMDJlMzEzMDM0MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzczNDM1Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACtAGgwDQYJKoZIhvcNAQELBQADggEB
AJY2ZTQOy2BFF4/1REibWUxp9HVkzKe0JZ2SpMx5zGSg54pnTu3212QsBJYZFVz+
jdxtIKZsL0cs8CjXZx0owr2zhlbdt4byeoFkHHTHQYHVZlahNlhT2FAx7TRQssAo
sKKQsJT7P1iRsM7NfeLIWv/7USihJtVM+0YYWtdHGhrjDbXzy1fhTvvnTAUe7fYf
/E06fSL5rtZXxjF5E1l0R8EUxQbqnZRg8ld69iV93B5chMH3EswpT/qkIXDYyOUt
x1MAi+/rO0qDk8BmsnAEBJNiNdz8aH1aAnaJGdQjcmpeEHd0MlNh/CFFuSdGC5ei
VNVrYa36ijrudN++0FHoHoQ=
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:22 2026 by rpki-client