
$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20383334.roa
File: 3137332e302e3131312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier: CTyBCz5lzwR1z8o64vGF18WtViCmV3+/vqe2NKlwY30=
Subject key identifier: 04:F5:C0:5D:65:9E:C7:61:A3:E1:63:1C:38:6A:B8:E2:1C:BE:D4:EE
Certificate issuer: /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial: 10F940EBCAB04653CFB598DDDD4DEE1246A595B3
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20383334.roa
Signing time: Sun 25 Oct 2026 20:44:59 +0000
ROA not before: Sun 25 Oct 2026 20:39:59 +0000
ROA not after: Sun 24 Oct 2027 20:44:59 +0000
asID: 834
IP address blocks: 173.0.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f9:40:eb:ca:b0:46:53:cf:b5:98:dd:dd:4d:ee:12:46:a5:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Validity
Not Before: Oct 25 20:39:59 2026 GMT
Not After : Oct 24 20:44:59 2027 GMT
Subject: CN=04F5C05D659EC761A3E1631C386AB8E21CBED4EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:66:9f:b6:b8:07:59:ed:09:e5:a7:ed:8a:
c0:c4:b8:e6:04:d1:91:a7:18:77:54:62:b2:74:67:
23:a2:be:85:a3:b8:d6:99:d0:4f:f7:e3:9b:ae:7d:
49:6c:b2:08:12:37:15:ea:af:a1:7d:dd:33:f7:40:
3a:52:d7:35:9f:69:39:63:76:fc:a0:bc:d9:aa:11:
32:00:7c:c2:3a:ae:a1:33:07:a0:81:c2:e2:6e:55:
cb:30:33:d5:c6:c1:9b:31:18:aa:7b:35:2f:a1:2e:
38:4d:2d:ca:8d:ed:da:72:79:05:e6:a1:a7:b0:a9:
97:dd:41:bd:3d:d6:a7:35:85:40:63:c9:5a:85:b7:
cf:d7:ae:94:ec:9c:51:29:78:3a:79:db:ed:2e:bd:
89:3a:b2:d3:bf:d0:4c:3b:6f:2d:55:aa:ab:cc:b8:
c2:20:19:b4:83:cf:46:6a:cd:b7:85:83:cc:02:03:
74:80:95:39:ff:e7:65:31:73:c0:11:64:70:f4:4c:
de:fc:e9:c9:ae:2c:35:e4:a0:aa:2a:e8:1a:3d:9f:
49:cb:f8:62:ac:d4:1c:d8:42:6b:ca:0d:03:30:62:
34:9e:35:2a:c7:3c:62:5e:4e:6d:49:d0:46:07:bc:
7e:56:a5:6e:e5:e6:d9:f0:43:f4:83:0b:59:de:fa:
ab:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F5:C0:5D:65:9E:C7:61:A3:E1:63:1C:38:6A:B8:E2:1C:BE:D4:EE
X509v3 Authority Key Identifier:
keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
173.0.111.0/24
Signature Algorithm: sha256WithRSAEncryption
68:70:fd:af:24:41:37:43:1a:65:bd:d5:c5:cf:97:d6:e2:4c:
47:41:d1:f7:ce:e3:47:66:44:db:f9:f2:f3:b6:52:d6:1d:75:
d3:28:86:5f:a2:2e:f4:96:3e:46:cb:24:65:66:50:0e:99:30:
05:94:eb:b6:a1:de:1e:fb:9e:07:6f:5e:20:6b:45:fd:57:05:
3c:e7:8b:dc:3e:eb:3a:6e:6f:c4:47:a3:12:0f:1f:f0:b6:a1:
cf:a7:03:ba:6a:aa:d8:b7:9b:2b:9f:ec:37:9b:c2:1e:15:3a:
cb:83:25:4e:95:f8:a4:4b:f4:82:30:95:89:cf:ba:14:df:eb:
e8:5f:4f:f9:6e:22:fb:94:87:61:73:8f:dc:18:b8:88:84:dd:
95:5a:27:5c:6e:e1:15:f9:d8:38:b9:d4:40:8b:1c:c2:82:11:
7d:60:70:3f:79:d5:6f:fb:28:b9:89:0a:92:28:c6:99:1f:d4:
d5:60:5b:73:c4:a0:3f:cb:8b:48:ad:ff:81:90:7a:4a:ee:1d:
7b:5b:66:14:09:ee:20:69:56:93:fc:9a:34:33:00:f7:4a:6a:
88:a3:49:12:cd:3a:6a:09:16:ae:48:25:0e:a8:3e:42:cb:cc:
ca:14:a9:af:a9:ff:93:47:a5:4b:b7:11:f1:59:a5:6d:6e:26:
6f:4e:2c:21
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUEPlA68qwRlPPtZjd3U3uEkallbMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTA3NDk5NmMyNzA3ZTY2YWJmY2JmY2VlZmQ0NzBlNDFj
YjM2MGFhYzY3OGZlMzgyNzIwHhcNMjYxMDI1MjAzOTU5WhcNMjcxMDI0MjA0NDU5
WjAzMTEwLwYDVQQDEygwNEY1QzA1RDY1OUVDNzYxQTNFMTYzMUMzODZBQjhFMjFD
QkVENEVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvahmn7a4B1nt
CeWn7YrAxLjmBNGRpxh3VGKydGcjor6Fo7jWmdBP9+Obrn1JbLIIEjcV6q+hfd0z
90A6Utc1n2k5Y3b8oLzZqhEyAHzCOq6hMweggcLiblXLMDPVxsGbMRiqezUvoS44
TS3Kje3acnkF5qGnsKmX3UG9PdanNYVAY8lahbfP166U7JxRKXg6edvtLr2JOrLT
v9BMO28tVaqrzLjCIBm0g89Gas23hYPMAgN0gJU5/+dlMXPAEWRw9Eze/OnJriw1
5KCqKugaPZ9Jy/hirNQc2EJryg0DMGI0njUqxzxiXk5tSdBGB7x+VqVu5ebZ8EP0
gwtZ3vqrxQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAT1wF1lnsdho+FjHDhquOIc
vtTuMB8GA1UdIwQYMBaAFBRdzfcdn4kSrVlXRJDXWAvADTsWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5YzAyZGQ1MzY4LzAv
MTQ1RENERjcxRDlGODkxMkFENTk1NzQ0OTBENzU4MEJDMDBEM0IxNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5L2Q3NGNhNjY0LThiYTQtNGRiOS1iZTg1LWRiZGIyMGY2YWYyNy9hMDc0
OTk2YzI3MDdlNjZhYmZjYmZjZWVmZDQ3MGU0MWNiMzYwYWFjNjc4ZmUzODI3Mi5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5
YzAyZGQ1MzY4LzAvMzEzNzMzMmUzMDJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBvMA0GCSqGSIb3DQEBCwUAA4IBAQBo
cP2vJEE3QxplvdXFz5fW4kxHQdH3zuNHZkTb+fLztlLWHXXTKIZfoi70lj5GyyRl
ZlAOmTAFlOu2od4e+54Hb14ga0X9VwU854vcPus6bm/ER6MSDx/wtqHPpwO6aqrY
t5srn+w3m8IeFTrLgyVOlfikS/SCMJWJz7oU3+voX0/5biL7lIdhc4/cGLiIhN2V
WidcbuEV+dg4udRAixzCghF9YHA/edVv+yi5iQqSKMaZH9TVYFtzxKA/y4tIrf+B
kHpK7h17W2YUCe4gaVaT/Jo0MwD3SmqIo0kSzTpqCRauSCUOqD5Cy8zKFKmvqf+T
R6VLtxHxWaVtbiZvTiwh
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:52 2026 by rpki-client