
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39392e302f32342d3234203d3e20343032383537.roa
File: 3137332e302e39392e302f32342d3234203d3e20343032383537.roa (raw, json)
Hash identifier: wVGX2kICNSBg8RzjbLFwLEuTXKWEi609gr8al/IRQ3o=
Subject key identifier: E9:84:30:49:E9:A6:7F:63:C3:D6:73:CD:35:4A:1F:98:56:82:3E:DD
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 0AB4F4086540D1676D66BD20E3BA07099D1E08E2
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39392e302f32342d3234203d3e20343032383537.roa
Signing time: Wed 30 Sep 2026 09:14:20 +0000
ROA not before: Wed 30 Sep 2026 09:09:20 +0000
ROA not after: Wed 29 Sep 2027 09:14:20 +0000
asID: 402857
IP address blocks: 173.0.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 07 Oct 2026 12:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b4:f4:08:65:40:d1:67:6d:66:bd:20:e3:ba:07:09:9d:1e:08:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Sep 30 09:09:20 2026 GMT
Not After : Sep 29 09:14:20 2027 GMT
Subject: CN=E9843049E9A67F63C3D673CD354A1F9856823EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:d4:ab:2a:4b:96:4f:53:76:05:e6:6f:31:
90:51:6e:85:0f:19:f9:f8:bd:4a:47:a1:61:05:d4:
05:b5:ff:7b:d6:7e:ff:e9:fc:0a:d1:a8:13:71:33:
c1:f6:4d:c1:e1:3b:8c:8c:02:d2:9d:a4:a7:1a:f0:
3c:0b:c9:29:36:5b:f5:dc:22:9a:f7:35:8a:c1:fb:
88:36:46:e7:1d:17:ba:e8:93:8b:fc:3f:f0:a0:64:
89:60:bd:ea:df:d3:b3:52:7d:e6:92:de:fe:b0:ff:
63:14:bd:aa:14:bc:ca:87:e4:4b:26:36:c9:51:e4:
44:78:2e:1c:63:11:59:7b:e6:fe:a5:ee:a8:4a:6e:
68:67:f9:3a:d1:bf:e7:32:4c:1b:68:2e:d1:df:82:
d6:d3:23:a0:92:b7:d1:b8:ef:5a:7d:a2:3f:ac:cc:
8a:3c:9f:a3:42:74:dc:e5:fb:78:2f:9f:6b:99:58:
c0:78:95:e2:bd:bc:16:95:38:8f:69:fe:36:1d:ad:
fd:93:cd:ed:0f:32:82:b9:25:05:e4:a8:48:2b:00:
d3:71:dd:3f:05:4b:bf:f4:2d:f2:9b:fe:af:bd:8e:
67:a1:69:84:c7:0d:99:ed:65:43:f3:89:f7:07:9e:
0a:0f:53:db:25:03:b9:f6:54:fe:fe:28:96:bc:72:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:30:49:E9:A6:7F:63:C3:D6:73:CD:35:4A:1F:98:56:82:3E:DD
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39392e302f32342d3234203d3e20343032383537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.99.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8f:57:ee:19:e5:33:2e:df:10:76:0a:7d:84:95:31:ca:45:
a3:c8:bb:5b:04:81:44:d8:e1:88:94:dc:6d:67:70:1b:53:96:
b6:3e:84:e9:5a:24:99:ce:15:9b:98:f8:d4:af:9f:0c:20:37:
4a:cd:1d:f0:cd:2a:e7:6f:c4:59:94:42:11:31:8e:0a:01:d6:
6d:29:4a:1a:6e:c9:a8:e7:43:72:c5:40:ca:2f:3f:65:3e:76:
94:fc:ea:1e:fc:da:b2:b9:aa:a1:8f:d5:92:b3:09:75:78:bf:
ee:54:84:b8:75:00:2d:76:70:3b:0c:ad:f2:b4:5f:2a:b6:34:
83:d1:93:40:58:69:8b:7d:9d:25:34:b0:82:b1:f0:6d:43:86:
6f:68:a1:22:13:31:3b:d6:2f:fd:b1:a8:ff:ab:36:2d:48:ae:
f7:7b:79:f6:f4:a0:2e:ea:f1:74:7f:33:61:28:83:98:7c:b1:
0a:fa:a3:fc:ad:ab:f4:fb:ca:82:84:a7:f4:a2:c7:ac:a6:06:
0e:4e:d0:ce:ff:ad:36:e4:c4:82:28:f6:7f:25:e8:05:e7:dc:
e3:95:47:7c:f0:6c:fd:37:6d:35:65:e8:bd:45:db:f7:06:e6:
5c:b1:ae:e2:b5:a4:e0:16:16:32:09:c7:bb:44:6c:e2:65:78:
5d:d0:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:27 2026 by rpki-client