
$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e20313432323430.roa
File: 3134302e3233352e32342e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier: dqhrqJzsR7y859ed7OiO/q2goVgIxQg3r12olO7f+BA=
Subject key identifier: 65:2B:E6:29:05:CE:B0:10:2D:7D:7C:86:14:C4:29:E6:10:74:C6:9E
Certificate issuer: /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial: 3854CE8F67AF4FF94CBFB6E302758D5BF05E4939
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access: rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e20313432323430.roa
Signing time: Fri 28 Aug 2026 11:11:58 +0000
ROA not before: Fri 28 Aug 2026 11:06:58 +0000
ROA not after: Fri 27 Aug 2027 11:11:58 +0000
asID: 142240
IP address blocks: 140.235.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 18:17:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:54:ce:8f:67:af:4f:f9:4c:bf:b6:e3:02:75:8d:5b:f0:5e:49:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Validity
Not Before: Aug 28 11:06:58 2026 GMT
Not After : Aug 27 11:11:58 2027 GMT
Subject: CN=652BE62905CEB0102D7D7C8614C429E61074C69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3b:47:f4:62:a2:31:8d:94:4b:a9:b9:56:65:
85:a1:d9:f6:1b:e0:3c:eb:46:27:a7:2d:da:96:93:
44:87:f6:f6:c2:9b:ea:99:29:c1:03:18:ae:d5:91:
8d:77:40:00:2e:cc:ac:15:30:f0:0c:f0:3b:99:b0:
37:20:b8:81:fe:df:95:5c:5a:92:06:25:ec:95:be:
ad:8a:ff:45:fd:d3:53:d4:cc:27:f7:a6:31:f8:51:
0d:09:89:be:fc:5e:51:24:f5:44:11:10:d3:42:4f:
cb:1d:9f:b9:3e:0a:08:44:9f:65:8b:53:22:d6:66:
69:e4:53:07:42:ba:b9:4d:c3:d1:e3:f5:11:e4:db:
96:5b:e0:fb:5f:85:fc:06:e0:91:61:d7:bc:a9:b2:
9d:b5:0b:6f:c6:e6:82:44:55:4d:4b:9f:e2:ce:b4:
cc:28:4c:2e:fb:e1:8e:b7:e8:e2:f6:17:ad:d3:8b:
47:1f:7f:67:ab:4d:d9:28:ba:8e:08:1f:a1:d2:b9:
b7:05:71:52:2c:bb:8a:77:d7:51:5a:1a:b2:ba:3a:
2d:d0:c8:03:54:f6:73:7e:b5:15:51:e1:7d:40:5c:
64:56:50:67:60:56:bf:8b:d9:b8:14:f2:be:b1:89:
d0:1e:4c:e2:b9:5f:9f:ea:51:b5:3c:bc:2d:20:7d:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2B:E6:29:05:CE:B0:10:2D:7D:7C:86:14:C4:29:E6:10:74:C6:9E
X509v3 Authority Key Identifier:
keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32342e302f32342d3234203d3e20313432323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.235.24.0/24
Signature Algorithm: sha256WithRSAEncryption
af:16:da:68:18:ba:60:db:bc:81:1f:0e:be:28:97:0a:a6:34:
06:8e:04:93:b9:45:34:ea:9f:77:07:b1:8a:e0:a9:79:9b:94:
cf:4c:9e:f4:8e:f0:17:ad:24:7c:9f:24:f0:be:5b:cf:f7:1b:
f6:2a:c2:2a:80:67:b7:8d:09:c6:dc:e4:50:db:3a:c9:49:57:
d9:03:f9:e7:4c:fa:61:19:3a:48:a2:45:1e:9f:f1:05:84:a5:
1f:a6:ec:97:d3:a9:77:12:7a:d4:a7:b5:d8:35:80:bc:fa:16:
02:36:66:7b:a1:e5:44:6c:94:cc:c1:8c:f0:b0:f4:e3:c8:f2:
b3:fe:86:ab:e1:29:2c:8a:f8:aa:82:e4:26:f0:b6:f2:f6:85:
b5:48:f3:51:53:30:b5:8e:72:08:df:2a:96:e9:5a:38:86:f0:
92:19:d4:70:9f:7b:fc:46:06:2d:ba:a8:53:46:e8:b8:52:9c:
14:d2:59:bf:c1:ac:4f:35:dd:c6:9a:71:46:e3:72:de:ef:b8:
5d:03:ab:08:e3:50:24:08:b1:62:a4:2a:35:97:ea:fa:0a:40:
45:5b:89:e0:94:65:c4:33:5d:c9:21:78:ef:d9:1b:39:69:7a:
f8:ce:d7:e0:44:ba:b6:d6:ea:4e:6b:b0:a8:60:45:09:a4:cd:
79:f4:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:59 2026 by rpki-client