
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa
File: AS396356.roa (raw, json)
Hash identifier: zRJ+sYKLWJzpavGhHvHNInk+MM7xSGUzYj0qmR/Hz3U=
Subject key identifier: 9B:05:A1:96:89:F4:1B:AC:8A:99:0F:3B:3B:47:0F:39:A3:24:32:A4
Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial: 281E5E6F60116BEC43F9977F685A891928967401
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa
Signing time: Fri 29 May 2026 07:58:43 +0000
ROA not before: Fri 29 May 2026 07:53:43 +0000
ROA not after: Fri 28 May 2027 07:58:43 +0000
asID: 396356
IP address blocks: 140.99.164.0/24 maxlen: 24
140.99.172.0/22 maxlen: 22
140.99.216.0/24 maxlen: 24
140.99.217.0/24 maxlen: 24
140.99.218.0/24 maxlen: 24
140.99.219.0/24 maxlen: 24
140.99.222.0/24 maxlen: 24
140.99.224.0/24 maxlen: 24
140.99.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 06:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:1e:5e:6f:60:11:6b:ec:43:f9:97:7f:68:5a:89:19:28:96:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Validity
Not Before: May 29 07:53:43 2026 GMT
Not After : May 28 07:58:43 2027 GMT
Subject: CN=9B05A19689F41BAC8A990F3B3B470F39A32432A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8b:ab:95:33:6b:00:a9:0b:f5:d7:40:0f:bb:
be:2f:4a:90:07:85:b8:33:34:0a:6d:f4:d0:fc:05:
7d:d7:df:8d:65:c2:fb:39:c6:da:5e:a8:23:30:80:
df:f7:6d:51:72:24:ca:76:19:5f:0d:28:9c:a6:d1:
d2:96:2a:a4:c1:cb:b1:cf:75:12:ec:72:c5:65:9c:
b2:81:cf:9c:e5:60:fb:bd:76:30:2c:8e:a1:a0:2b:
92:78:19:51:31:87:12:cd:2a:85:de:75:f2:8a:0d:
e5:23:09:b1:9f:b5:1c:6c:97:de:85:de:b0:d4:3f:
f8:fe:40:ef:3a:dd:37:46:fb:77:66:d7:e1:17:8b:
37:4b:a2:7b:ef:c6:af:d3:a5:b4:3d:ba:4b:66:95:
0f:77:0e:d9:64:80:44:9e:9c:67:76:b7:7c:91:81:
fd:d6:98:d7:4a:1a:d3:6c:e3:e7:89:8a:b2:e7:e3:
03:d1:a8:a0:b5:d8:7e:70:fd:94:17:f1:03:50:fe:
3a:a0:85:8c:d8:50:25:14:17:a0:55:cc:d4:4a:61:
cf:b8:d2:4b:4d:66:1f:c5:3d:93:52:0b:a7:50:3b:
28:a2:fd:59:a1:8d:d8:aa:f4:76:ca:75:3e:e5:ae:
30:db:6c:c8:3e:46:38:0f:67:ec:2e:d0:d4:1c:8c:
09:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:05:A1:96:89:F4:1B:AC:8A:99:0F:3B:3B:47:0F:39:A3:24:32:A4
X509v3 Authority Key Identifier:
keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.99.164.0/24
140.99.172.0/22
140.99.216.0/22
140.99.222.0/24
140.99.224.0/23
Signature Algorithm: sha256WithRSAEncryption
59:83:ec:ae:6b:59:b9:31:c9:bd:46:40:47:5c:7a:7d:ab:26:
72:51:5c:1a:e1:6f:c9:b3:07:73:59:2a:c0:47:a6:f7:6e:ac:
a2:ec:a5:26:52:82:d9:e0:4a:aa:a9:88:58:e7:ea:34:f3:6e:
c7:53:b8:0e:0c:3d:73:c7:85:b2:4e:33:d7:57:64:28:8c:4d:
30:ba:3f:11:e3:53:da:ab:23:40:3a:1f:9f:e6:34:7e:9a:98:
f6:1e:d9:b3:c4:d0:8a:84:c1:3f:5e:4f:e5:cc:29:52:8c:7d:
99:2e:6c:6e:57:78:c3:99:89:e8:e4:47:49:d9:81:55:c9:88:
0a:f2:a1:45:6e:57:3a:22:63:eb:76:58:75:1b:90:6d:fd:d9:
30:01:ea:4a:13:57:ea:59:91:2c:e2:3b:e3:a8:9f:aa:75:cf:
71:7d:2f:cd:05:a2:6b:1d:fd:09:3d:13:ec:e8:65:c7:6f:d5:
63:10:bf:63:d6:b7:e2:63:ae:54:50:d6:94:23:db:6c:50:78:
66:7b:88:7e:ee:ad:04:df:07:86:c4:ba:a0:20:33:21:57:33:
c8:41:4d:2b:af:53:c4:05:bf:b4:51:0e:01:d4:16:a8:00:e9:
96:ac:18:a7:ea:9d:45:ca:80:ea:bd:cc:72:f1:6e:b7:93:30:
24:59:3f:d4
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgIUKB5eb2ARa+xD+Zd/aFqJGSiWdAEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwNTI5MDc1MzQzWhcNMjcwNTI4MDc1ODQz
WjAzMTEwLwYDVQQDEyg5QjA1QTE5Njg5RjQxQkFDOEE5OTBGM0IzQjQ3MEYzOUEz
MjQzMkE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYurlTNrAKkL
9ddAD7u+L0qQB4W4MzQKbfTQ/AV919+NZcL7OcbaXqgjMIDf921RciTKdhlfDSic
ptHSliqkwcuxz3US7HLFZZyygc+c5WD7vXYwLI6hoCuSeBlRMYcSzSqF3nXyig3l
Iwmxn7UcbJfehd6w1D/4/kDvOt03Rvt3ZtfhF4s3S6J778av06W0PbpLZpUPdw7Z
ZIBEnpxndrd8kYH91pjXShrTbOPniYqy5+MD0aigtdh+cP2UF/EDUP46oIWM2FAl
FBegVczUSmHPuNJLTWYfxT2TUgunUDsoov1ZoY3YqvR2ynU+5a4w22zIPkY4D2fs
LtDUHIwJJwIDAQABo4IClzCCApMwHQYDVR0OBBYEFJsFoZaJ9BusipkPOztHDzmj
JDKkMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAIxjpAMEAoxjrAMEAoxj2AMEAIxj
3gMEAYxj4DANBgkqhkiG9w0BAQsFAAOCAQEAWYPsrmtZuTHJvUZAR1x6fasmclFc
GuFvybMHc1kqwEem926souylJlKC2eBKqqmIWOfqNPNux1O4Dgw9c8eFsk4z11dk
KIxNMLo/EeNT2qsjQDofn+Y0fpqY9h7Zs8TQioTBP15P5cwpUox9mS5sbld4w5mJ
6ORHSdmBVcmICvKhRW5XOiJj63ZYdRuQbf3ZMAHqShNX6lmRLOI746ifqnXPcX0v
zQWiax39CT0T7Ohlx2/VYxC/Y9a34mOuVFDWlCPbbFB4ZnuIfu6tBN8HhsS6oCAz
IVczyEFNK69TxAW/tFEOAdQWqADplqwYp+qdRcqA6r3McvFut5MwJFk/1A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:58:24 2026 by rpki-client