
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
File: AS215224.roa (raw, json)
Hash identifier: BlUl1ZCuLu3kzZyEE5fxafZvk1Nzl132ldmDvFhECtI=
Subject key identifier: 14:28:2B:92:5F:EA:AF:47:1A:2E:FB:E3:B2:21:79:54:7C:D5:6C:7C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4F7D7EC1A9D164584A6529B964CC62F62CF75C2C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
Signing time: Tue 27 Jan 2026 13:50:47 +0000
ROA not before: Tue 27 Jan 2026 13:45:47 +0000
ROA not after: Tue 26 Jan 2027 13:50:47 +0000
asID: 215224
IP address blocks: 98.142.244.0/24 maxlen: 24
104.234.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 02:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:7d:7e:c1:a9:d1:64:58:4a:65:29:b9:64:cc:62:f6:2c:f7:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 27 13:45:47 2026 GMT
Not After : Jan 26 13:50:47 2027 GMT
Subject: CN=14282B925FEAAF471A2EFBE3B22179547CD56C7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:4c:2d:be:d1:0c:57:e0:bb:4b:50:4e:3b:44:
65:84:d1:db:f1:c2:61:6a:f7:a4:56:f9:bd:f9:70:
9b:2b:51:ba:6f:89:21:ef:48:ed:44:af:17:b5:fa:
dd:35:cc:36:8f:66:d2:fa:49:39:8a:e7:b2:25:0b:
ab:a5:20:6a:64:a0:22:80:e5:cf:af:87:9b:34:d3:
ed:22:0e:61:24:8a:09:ed:a4:35:96:d6:91:51:6a:
7b:1d:55:c1:1f:37:62:a0:ad:fa:a7:28:2c:4a:a0:
f9:0b:98:db:85:ae:3a:51:a0:d4:cd:cd:bf:21:de:
51:b5:46:17:66:4d:3f:32:ab:a3:a6:5f:21:02:43:
7d:0e:37:de:77:13:2b:e7:29:bb:69:1a:f4:44:c8:
33:3b:4c:02:14:eb:cb:59:94:5a:e5:f1:90:41:83:
58:cf:a1:a4:2d:9f:2c:73:14:7c:c7:10:52:04:2d:
b5:5c:2b:7a:b7:f4:cd:10:3d:6e:33:3f:71:a8:b4:
88:b7:01:14:07:06:6e:0f:c3:33:35:d0:59:6a:2c:
42:31:ef:48:0a:e0:bf:14:94:4c:57:73:54:ee:7d:
9f:e2:bd:15:c5:eb:b7:31:98:00:3a:f3:e1:cb:11:
a3:e1:68:f4:87:8c:75:df:8a:d6:e5:1a:75:26:15:
e1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:2B:92:5F:EA:AF:47:1A:2E:FB:E3:B2:21:79:54:7C:D5:6C:7C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.142.244.0/24
104.234.243.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8b:d1:b8:9d:91:a9:8d:e0:45:6b:8e:01:c9:f3:92:59:28:
b2:fb:c3:1d:47:1a:84:17:d2:ec:88:90:64:1d:78:4a:eb:c5:
52:f5:fc:a5:24:97:51:de:15:cc:d2:ef:97:4b:79:65:4c:16:
30:ec:fb:8e:61:e0:72:0f:ad:55:02:cc:5f:f8:41:fa:8d:22:
ce:13:3e:78:34:84:30:ce:d5:1c:45:00:ea:b5:0e:d6:cb:80:
22:e3:23:cd:68:c8:4f:9d:32:23:52:89:c6:11:57:6e:58:4c:
3b:d2:5b:f6:ce:71:51:9e:f8:97:42:33:f8:cd:77:71:40:9a:
48:8e:73:5d:70:3c:c4:16:b2:fe:cd:eb:f9:24:af:89:a1:17:
96:eb:97:12:00:c2:75:71:a2:15:7e:77:d7:5e:5d:7e:78:10:
50:92:c7:0d:74:eb:e5:00:9b:78:14:36:31:1a:b7:68:81:1a:
8c:ed:77:8b:a8:e4:62:cd:bd:7d:4b:8b:33:14:a0:19:48:84:
c3:b1:5e:52:43:3d:58:da:3d:b0:ed:41:f5:9b:ed:ec:dc:9b:
fc:f2:c3:ac:16:75:ec:27:65:c3:62:99:f4:a8:b0:fe:14:99:
df:57:2b:30:c6:b5:9f:c2:54:b0:dc:17:88:86:2a:87:03:47:
af:bb:45:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:34:02 2026 by rpki-client