
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130372e302f32342d3234203d3e203430363035.roa
File: 3137332e302e3130372e302f32342d3234203d3e203430363035.roa (raw, json)
Hash identifier: oplTCbcOGoMhmvXDcxDbZOPFxiz0Yna7RSuKc9MEXt8=
Subject key identifier: 69:A6:9C:C6:E0:3B:6F:1F:9F:AC:D0:02:F8:94:91:6D:AE:9A:FB:95
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 6E4433E77E9F60D30994EE9ED90502E9DBB696F5
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130372e302f32342d3234203d3e203430363035.roa
Signing time: Wed 30 Sep 2026 09:14:20 +0000
ROA not before: Wed 30 Sep 2026 09:09:20 +0000
ROA not after: Wed 29 Sep 2027 09:14:20 +0000
asID: 40605
IP address blocks: 173.0.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:44:33:e7:7e:9f:60:d3:09:94:ee:9e:d9:05:02:e9:db:b6:96:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:20 2026 GMT
Not After : Sep 29 09:14:20 2027 GMT
Subject: CN=69A69CC6E03B6F1F9FACD002F894916DAE9AFB95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:fb:de:1c:55:a7:26:0f:94:33:f7:a1:b6:
05:44:21:40:0a:5a:5a:6d:8d:18:03:80:67:d8:7a:
11:4f:ce:23:01:2a:52:63:f7:b9:0c:e8:45:3f:fc:
3a:1f:d5:3b:70:06:0b:c4:fb:08:74:cb:f2:24:44:
68:3c:91:15:e8:41:87:47:88:2e:25:e8:26:2c:8d:
43:15:23:b4:ca:74:8a:88:c9:a7:5d:9f:87:cc:55:
53:fe:c1:2f:4e:48:6c:0c:e0:35:74:16:0d:9f:55:
98:ed:0a:8a:ef:41:28:d7:c6:e3:39:2a:aa:2e:dd:
8d:f4:ca:eb:18:28:d1:f7:a3:93:88:d4:ed:9c:4a:
fa:73:74:c2:f5:c9:a0:3b:83:27:68:50:9f:3f:8e:
ad:f8:d9:53:d3:28:46:c0:83:38:a0:cd:49:cb:7e:
a4:0c:a7:4b:8e:3d:29:d9:10:dd:23:66:40:30:ca:
c4:ff:f2:7c:f4:d1:5f:9e:86:8d:0d:7d:dc:43:bf:
41:13:71:29:59:9c:87:7a:d5:6a:e9:93:a6:f7:6b:
6d:73:51:0e:d0:82:e3:15:ea:fa:b8:fb:be:25:b8:
af:4b:cb:11:0a:6e:df:37:d8:d6:f7:78:d7:e0:65:
0f:9b:45:a6:e7:3e:db:d6:6e:cf:9e:92:65:38:f0:
4b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:9C:C6:E0:3B:6F:1F:9F:AC:D0:02:F8:94:91:6D:AE:9A:FB:95
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130372e302f32342d3234203d3e203430363035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.107.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d3:33:58:1c:08:d6:61:19:df:83:9c:24:8b:06:45:9e:d3:
8d:48:51:76:f9:f8:b9:8b:d3:83:45:54:b6:90:69:51:6a:83:
98:02:dd:18:2f:4b:75:3d:b7:ee:d0:06:c6:ab:a2:a1:3a:93:
4a:75:e8:a9:7b:a5:bf:0d:a9:26:ec:c8:ee:66:73:9e:0c:b1:
1a:86:6c:c9:cf:be:ca:49:a3:92:8c:47:92:3d:09:4d:cc:5c:
d5:f7:16:87:c8:30:b5:80:dd:87:f8:e7:88:b8:2c:e7:ce:80:
0d:1c:dd:09:d3:d4:92:f9:e9:c0:99:66:92:db:7a:57:47:36:
c7:e2:7b:fc:4a:b7:f2:12:a6:88:e3:09:aa:2d:8e:53:12:28:
20:1f:d6:cc:86:13:de:ba:75:64:d7:84:ff:28:73:49:05:ee:
34:a8:6d:23:a3:92:2c:6c:5e:76:3f:18:c2:21:b5:e9:58:73:
ff:f1:ed:dd:39:aa:c9:02:ae:aa:f8:cf:7e:fa:6c:80:9d:e6:
1c:54:a0:c9:e5:d8:85:d5:d7:c3:ad:6e:39:fe:95:02:0b:40:
eb:d4:0f:3c:34:ed:a8:f7:ce:83:9e:1b:81:a6:a6:8f:47:50:
2e:3d:ce:f9:90:85:ec:7f:02:4b:ac:7a:ba:45:dc:59:9e:39:
fb:cb:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:21 2026 by rpki-client