
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219053.roa
File: AS219053.roa (raw, json)
Hash identifier: dGO2R/YvHRSdHvLV8riRvTLo3rWYNnwT667lzfbzfoo=
Subject key identifier: FE:B0:E3:05:E2:06:64:45:44:32:81:8F:06:C1:69:36:AE:8D:5D:77
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 3F3E8A4B5B1FA61AAC7F85363A32AE43137C15CB
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219053.roa
Signing time: Thu 10 Sep 2026 08:52:53 +0000
ROA not before: Thu 10 Sep 2026 08:47:53 +0000
ROA not after: Thu 09 Sep 2027 08:52:53 +0000
asID: 219053
IP address blocks: 40.223.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 09:57:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3e:8a:4b:5b:1f:a6:1a:ac:7f:85:36:3a:32:ae:43:13:7c:15:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Sep 10 08:47:53 2026 GMT
Not After : Sep 9 08:52:53 2027 GMT
Subject: CN=FEB0E305E20664454432818F06C16936AE8D5D77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:68:8a:dc:23:2e:23:1c:a6:74:ef:75:23:6d:
ad:46:99:5d:7f:68:0c:da:27:17:64:2f:4c:f0:f6:
90:23:ab:b5:45:97:f1:44:66:08:10:c2:c2:8b:e9:
b2:47:2c:a4:0f:e9:53:04:47:e4:46:d5:fa:cb:0d:
e5:4f:3e:47:65:0d:82:af:e6:1f:84:8c:9b:d1:5d:
2e:1b:e5:4a:17:b7:ae:9a:fe:e5:7c:1b:08:60:1b:
1b:59:40:c8:fe:3b:8d:21:d5:da:9d:a7:6d:f1:99:
d2:90:38:19:1e:84:cc:d7:19:1f:db:23:75:c4:d1:
e7:f9:6c:2d:5d:34:b6:19:c7:f5:d3:e6:ee:7b:4c:
db:d9:32:23:8d:d7:fc:3b:47:e0:03:bf:6e:bd:bc:
d5:0e:af:7c:64:23:91:58:c6:37:cf:bf:89:32:1d:
0e:20:d6:2e:4f:ff:d0:27:a3:10:79:16:04:0a:91:
ec:0b:f2:f0:dd:6b:67:62:c8:ef:85:93:60:43:80:
1a:24:69:00:e4:dd:43:18:97:42:cf:b4:45:26:c8:
42:49:47:9f:70:f0:9d:b7:6c:1b:43:b7:94:32:7d:
bf:ce:cb:17:1f:dd:d8:ce:e5:be:8c:88:db:98:f9:
b2:10:05:1f:6d:f2:1a:4b:88:ed:62:d4:5b:d1:52:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B0:E3:05:E2:06:64:45:44:32:81:8F:06:C1:69:36:AE:8D:5D:77
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.223.20.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:d3:4b:56:a3:4b:4a:87:06:20:46:89:17:c0:73:e5:cb:56:
9f:60:c3:eb:6f:67:35:4c:71:11:92:48:d2:42:b1:a1:45:6c:
aa:b2:52:9f:6d:46:43:b8:43:1d:da:74:31:85:11:5d:60:3d:
41:29:bf:8e:65:61:7c:15:b3:87:85:a2:d9:3d:fb:c9:55:d2:
9a:e7:b7:a5:05:43:70:d0:be:b0:22:fc:bb:8c:c8:a6:82:80:
1b:82:ed:e2:71:f7:43:14:44:af:f9:29:52:b1:f0:cf:2c:51:
ac:35:78:98:58:dd:86:4e:4a:2e:40:9b:7d:65:c9:62:84:bf:
81:62:77:a4:b4:d8:ee:d9:e2:5a:9a:dc:e6:e3:d2:09:41:37:
4a:4a:04:f3:96:23:3c:a2:e4:e1:32:e3:ec:52:ee:de:87:d4:
91:af:db:a8:57:29:a1:d3:a9:1b:aa:67:08:28:d4:bb:4f:c6:
b8:1f:87:7e:a3:fe:61:74:07:15:c3:3e:fd:15:f0:49:ff:10:
54:55:6e:b8:5b:9f:4d:6b:95:d0:08:aa:c8:72:1d:f0:8d:6f:
f2:a2:fa:56:3b:9c:19:51:ce:9a:e8:d7:b5:13:74:fb:fe:bd:
92:af:09:4c:4b:03:e2:17:02:14:3d:38:a9:f4:28:a0:1b:d0:
13:65:62:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:01:02 2026 by rpki-client