
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130382e302f32342d3234203d3e203534303034.roa
File: 3137332e302e3130382e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier: URW0Fk1c3OsLglXgk46/wtrejxGmAo1v/kc5EiQ6i8s=
Subject key identifier: 48:C2:24:14:0D:E6:F1:71:C5:56:0B:71:06:9E:37:83:39:BE:E5:BD
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 69B8E70266D402F290605F47D90B76FFDFF0FD00
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130382e302f32342d3234203d3e203534303034.roa
Signing time: Wed 30 Sep 2026 09:14:20 +0000
ROA not before: Wed 30 Sep 2026 09:09:20 +0000
ROA not after: Wed 29 Sep 2027 09:14:20 +0000
asID: 54004
IP address blocks: 173.0.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b8:e7:02:66:d4:02:f2:90:60:5f:47:d9:0b:76:ff:df:f0:fd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:20 2026 GMT
Not After : Sep 29 09:14:20 2027 GMT
Subject: CN=48C224140DE6F171C5560B71069E378339BEE5BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:f2:16:b9:a0:73:e9:5c:0f:b3:70:0c:8d:
1b:f7:16:d0:6c:19:10:0d:5b:04:47:3c:52:45:4b:
3e:f4:fd:5a:9c:87:ad:05:42:2b:77:8e:01:bf:33:
77:7b:18:80:49:b9:76:ca:9f:43:c3:79:9e:fe:1a:
bc:f8:4a:9b:9b:e7:79:e5:19:a6:21:22:13:0d:b5:
a5:f4:1d:20:c6:49:e0:9a:c7:1a:5b:7f:f2:79:3b:
f4:8e:18:e3:c4:64:cf:f9:9f:09:b3:33:a2:c7:2b:
65:7e:94:32:ec:c4:8c:4b:bb:64:a8:d3:b3:04:a3:
53:42:b1:1d:56:23:25:2d:10:00:22:44:2f:29:2b:
88:a5:88:e7:68:9a:b4:79:fe:97:a3:39:9d:8b:9b:
cf:c9:d5:db:0c:57:ea:48:6e:69:5f:9c:ff:d4:c5:
06:2a:5d:5d:33:dc:e1:f6:fb:e3:9d:83:42:83:49:
1d:df:31:a2:18:48:a2:8e:3c:27:93:a6:3a:68:b5:
f9:ae:ec:65:f2:b2:4d:67:60:02:5e:09:00:d3:71:
01:8c:41:89:12:97:90:66:0d:ee:5d:6d:c1:17:dc:
eb:c3:e5:7d:f7:d6:d0:0c:51:b8:29:bc:e7:ce:f7:
e5:d9:73:d8:5e:b4:83:e9:74:6b:b7:7d:7b:e0:9d:
ac:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C2:24:14:0D:E6:F1:71:C5:56:0B:71:06:9E:37:83:39:BE:E5:BD
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130382e302f32342d3234203d3e203534303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.108.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c2:9f:cd:03:67:0c:23:37:0c:79:e2:a7:be:82:5a:8f:fc:
c3:94:d8:89:17:00:5c:42:8c:21:61:41:12:a4:e5:1f:ee:52:
53:ab:5a:40:d5:20:46:42:82:cb:b9:a8:3b:ee:2b:9d:7d:b0:
f3:5d:f2:f2:d2:cd:0b:17:db:74:84:b0:1d:b6:08:b8:67:03:
bb:37:c3:86:ab:54:37:64:cb:3e:d1:15:0f:02:79:4b:e0:b8:
4c:b5:a6:e6:22:70:80:fc:2b:82:45:e6:ff:b6:01:c4:51:e7:
ac:da:cc:54:ba:aa:63:fc:a9:3b:13:42:5c:33:8d:48:44:85:
09:88:0a:2c:de:72:2e:cd:13:36:2a:09:6a:a8:d5:1f:c1:e4:
3d:80:0c:dd:c9:64:ef:9d:b1:00:0c:00:d9:89:86:67:45:7d:
10:82:c2:df:5c:67:a2:41:b8:ad:f5:cc:d6:9e:00:fb:97:61:
fd:fe:12:d5:01:df:71:b2:a5:75:3b:a8:95:37:ee:93:4c:e7:
74:e3:69:03:fc:f6:6e:8a:ae:14:9b:cb:c0:1e:55:03:d0:6c:
4a:8b:7e:86:86:a9:87:09:5e:bd:d0:7b:93:7c:a8:08:4e:5d:
ff:71:0b:3c:d9:bd:11:0c:92:46:11:43:85:28:0f:96:ae:51:
9e:f6:02:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:24 2026 by rpki-client