
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198250.roa
File: AS198250.roa (raw, json)
Hash identifier: /legTCr5lbKMfaDB8NQHyIggP8BEQ9fgj8trEFvfTi4=
Subject key identifier: D6:87:0C:2E:05:B9:AE:38:3F:F8:61:86:D8:DA:E8:B1:42:43:5B:79
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 03A2C41D2424FFAA57C3E682C2C373AA5626E914
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198250.roa
Signing time: Mon 13 Apr 2026 13:25:15 +0000
ROA not before: Mon 13 Apr 2026 13:20:15 +0000
ROA not after: Mon 12 Apr 2027 13:25:15 +0000
asID: 198250
IP address blocks: 104.234.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 09:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:a2:c4:1d:24:24:ff:aa:57:c3:e6:82:c2:c3:73:aa:56:26:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 13 13:20:15 2026 GMT
Not After : Apr 12 13:25:15 2027 GMT
Subject: CN=D6870C2E05B9AE383FF86186D8DAE8B142435B79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dd:f5:75:57:8c:e2:16:2e:27:8c:47:4a:8c:
dc:9e:dc:a6:32:62:24:cf:c0:36:ac:51:75:56:54:
31:45:c1:aa:15:c4:3d:19:bb:8e:31:1a:1c:d2:7e:
14:d8:0e:f5:4f:d4:9b:a9:38:a1:cc:cf:23:5b:b5:
ce:72:a7:ab:33:fe:38:6b:f6:92:86:de:87:9e:3d:
98:a9:c7:fc:cd:02:33:88:14:c3:fc:2e:f1:53:2b:
5e:fd:19:44:65:ff:d0:56:b6:a0:df:9b:73:af:60:
2b:6f:00:97:ab:94:53:e5:47:58:25:62:9d:9a:ea:
37:d4:49:4e:ca:3f:7a:25:66:83:20:56:bb:d2:98:
9d:d0:8b:7f:d2:78:01:c9:5a:3e:16:0b:37:93:bf:
a4:68:f8:fd:df:7a:d0:3a:a3:51:11:72:94:5b:8d:
56:d5:88:a7:9e:73:11:47:59:1a:13:49:0f:9b:c2:
25:a5:36:42:d6:9b:91:41:fb:f5:2d:99:85:97:74:
d0:e0:b3:c4:dd:28:f3:e3:c9:2a:bd:b7:5c:78:74:
83:20:47:26:60:18:0d:fb:26:2a:95:46:0b:18:05:
ba:04:f7:f7:85:43:07:97:08:99:69:dc:28:7b:e4:
c2:6d:fd:84:1e:93:83:d6:25:7f:9c:ac:af:50:8d:
76:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:87:0C:2E:05:B9:AE:38:3F:F8:61:86:D8:DA:E8:B1:42:43:5B:79
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:93:b9:28:6e:cc:c2:18:92:2c:80:76:1a:b1:ce:50:57:ca:
e1:88:4b:f2:13:19:a6:40:c4:a7:2f:c6:14:ee:a1:4e:6c:f1:
d0:d9:aa:17:75:49:2d:c3:4d:60:87:20:bd:c5:3a:24:1a:d2:
6a:0e:6d:d3:cd:e6:76:bf:58:29:6a:64:db:dd:54:b4:81:92:
9d:ab:30:cd:0a:21:79:a5:8e:1a:03:81:ce:5a:e4:db:3f:1f:
55:53:df:98:6d:3f:86:fe:43:1c:a0:68:bd:31:47:da:b9:e1:
b4:53:63:3b:e5:f5:4e:d3:b4:9d:86:85:d2:63:66:28:0b:c3:
a7:4f:de:e3:54:fd:9a:e4:6a:1a:2c:28:9d:22:d9:4c:31:f5:
29:6b:2e:b7:36:41:7d:06:e3:3a:c1:01:fe:6e:52:92:c2:e3:
62:63:58:14:6c:44:c1:eb:e1:28:cb:b1:8b:cd:5b:f9:e4:fb:
81:33:fc:45:9a:61:7f:ed:3f:3f:97:98:49:32:1f:1c:69:ef:
21:0a:cc:9d:86:8c:60:b3:29:dc:19:98:18:e0:04:86:92:70:
55:f5:af:60:ca:42:54:63:d6:27:3d:73:c9:22:52:b6:8f:77:
59:cf:33:4c:28:c1:29:3c:40:3c:4c:f0:5d:33:c9:26:f5:ee:
10:5b:82:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:59 2026 by rpki-client