
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa
File: AS214432.roa (raw, json)
Hash identifier: Bmy8Cmh8M7cfXSPc21h24nT0j3bizpbHhxWD3UIG0n0=
Subject key identifier: 88:7F:E6:4A:EF:92:18:82:D1:48:1F:4B:9D:3C:FF:79:8D:30:3A:A1
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 43012889460289F733FABE1B76CA36C1185C0D8D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa
Signing time: Thu 09 Apr 2026 12:13:12 +0000
ROA not before: Thu 09 Apr 2026 12:08:12 +0000
ROA not after: Thu 08 Apr 2027 12:13:12 +0000
asID: 214432
IP address blocks: 40.27.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 10:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:01:28:89:46:02:89:f7:33:fa:be:1b:76:ca:36:c1:18:5c:0d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Apr 9 12:08:12 2026 GMT
Not After : Apr 8 12:13:12 2027 GMT
Subject: CN=887FE64AEF921882D1481F4B9D3CFF798D303AA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:93:e8:03:11:67:34:5d:e4:78:8f:cc:08:
1f:37:86:d9:77:6c:fa:30:dc:64:61:42:74:64:c6:
94:9a:04:82:42:7e:ec:17:15:b1:b8:da:0c:3f:57:
09:0b:2a:b5:9c:dc:34:0f:a6:ba:e9:17:a8:0f:27:
67:93:08:e4:2b:a5:d6:45:42:21:3a:4f:20:37:ce:
8c:04:f1:7f:62:25:f7:ce:38:25:79:e4:7d:44:1c:
68:37:3f:7e:e6:ab:e9:16:66:1d:27:27:33:0d:06:
24:e1:8f:59:3c:eb:06:e6:a5:0e:f4:63:51:a7:27:
11:86:39:e6:34:31:d8:e5:6a:15:8a:38:48:bc:a4:
7e:e9:7d:41:af:b5:1e:2a:0f:a1:d3:8f:32:f8:3b:
6a:18:80:9e:86:3f:71:a5:54:28:5f:f5:b3:9e:c2:
ab:6b:2a:30:c2:99:b0:11:da:03:ea:a2:5a:89:18:
44:c7:46:2f:75:48:f0:9a:ba:6d:b4:29:19:2f:05:
11:b8:25:9e:21:1d:c0:d4:e6:ec:16:cb:0c:5c:3f:
d2:20:d0:2c:c2:45:21:e2:2b:f9:f1:ca:1b:57:c9:
37:88:3a:a6:12:5e:ab:3b:6a:63:64:ff:38:b4:77:
d1:5d:ac:92:e3:91:b0:c7:1d:09:f7:1d:90:e6:53:
ab:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7F:E6:4A:EF:92:18:82:D1:48:1F:4B:9D:3C:FF:79:8D:30:3A:A1
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.114.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:12:44:7a:a6:ea:a1:2f:bd:f1:ee:8c:d4:69:18:3f:1b:98:
84:e3:b5:2d:bf:d0:40:ea:3f:78:36:41:7b:af:c4:69:c1:c3:
59:98:54:c3:35:a7:71:53:2a:26:48:9e:df:18:65:52:ec:2a:
62:ec:02:5d:94:f8:44:11:87:ce:04:8e:d4:f7:4c:2c:ed:c6:
34:82:40:c3:d2:e6:22:c6:0e:e5:c7:da:f8:d1:2b:23:24:50:
c4:26:16:b7:46:8a:f6:83:21:61:ca:1b:a4:8e:33:9a:88:31:
db:9d:4b:a1:cd:34:e5:91:84:04:5c:ba:e7:e3:b9:da:13:0c:
bf:96:05:62:74:af:58:a9:48:5d:ce:27:01:74:09:6f:cc:30:
dc:ba:07:c0:77:fc:9b:77:a8:e4:e8:a8:96:37:cd:8d:c2:8e:
00:9b:c3:72:85:c2:3d:89:46:36:70:ea:fc:1a:dd:43:8e:f5:
23:a0:17:18:3b:80:bb:a0:a9:9b:33:16:d9:f3:33:89:e4:cc:
50:ac:de:ad:84:aa:83:ac:34:a8:d9:fc:13:0e:2d:cd:dd:94:
36:59:75:1d:bf:18:19:f9:3e:d2:6a:bc:ae:bb:bf:75:7a:2e:
fe:c7:24:25:80:dc:4a:79:b2:9d:bd:6f:51:f7:3c:cc:23:e6:
44:95:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:10:15 2026 by rpki-client