
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219498.roa
File: AS219498.roa (raw, json)
Hash identifier: 5CTnJwALSopHoUN0RXJ2T6sg0pOfWXB40PY/mQSZaqQ=
Subject key identifier: 7E:0E:3B:F4:89:1F:B2:7B:9E:80:39:6F:83:8E:F6:04:97:26:C3:D7
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 5318E9100D3C885A0F1AECF8F8E344FD73CC6A4B
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219498.roa
Signing time: Wed 28 Oct 2026 19:42:25 +0000
ROA not before: Wed 28 Oct 2026 19:37:25 +0000
ROA not after: Wed 27 Oct 2027 19:42:25 +0000
asID: 219498
IP address blocks: 104.234.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 12:09:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:18:e9:10:0d:3c:88:5a:0f:1a:ec:f8:f8:e3:44:fd:73:cc:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 28 19:37:25 2026 GMT
Not After : Oct 27 19:42:25 2027 GMT
Subject: CN=7E0E3BF4891FB27B9E80396F838EF6049726C3D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:80:16:11:b6:b4:be:00:73:b5:92:be:fd:
ba:46:18:78:dd:da:aa:c6:ba:8c:ba:1b:18:8e:70:
1d:8f:b3:62:3b:2d:04:9b:4a:7f:de:b6:31:40:c6:
f9:59:f9:e2:14:9d:6a:8e:41:1c:77:f5:ed:57:86:
10:d7:df:f7:5a:82:5a:87:9c:8d:41:e7:35:e1:08:
43:4a:85:eb:b3:c3:fe:8a:b2:6c:db:87:b3:d9:17:
d1:08:71:88:ef:e2:fe:31:f0:02:bc:7f:3d:d0:aa:
41:d4:50:62:af:87:50:8f:58:ad:b1:18:a3:7f:c0:
ae:0c:73:8f:24:01:bd:6d:94:c1:7e:cc:1c:3c:7f:
ce:97:22:b6:27:8c:19:0f:fc:9f:e9:b0:76:a5:50:
27:f7:c8:e1:d8:25:dd:51:f6:a3:7c:8c:79:da:34:
fc:f6:84:0d:31:83:a9:f1:10:66:e5:9b:1a:98:02:
d3:ce:99:97:e2:4c:3d:fc:aa:4a:7c:71:16:58:7e:
3a:35:5e:a9:51:23:be:c1:f7:a7:49:d8:ab:4e:38:
3d:84:53:f7:0f:ef:b6:a2:f9:0a:02:72:af:fa:83:
be:12:c3:65:3f:e8:bf:c4:ab:05:1e:d2:a2:d3:54:
ed:42:8c:b2:e6:4f:78:4a:55:ca:fa:d0:90:14:60:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0E:3B:F4:89:1F:B2:7B:9E:80:39:6F:83:8E:F6:04:97:26:C3:D7
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219498.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.156.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:4c:66:62:e7:67:29:59:25:a6:f1:13:69:52:6e:a7:32:1a:
e3:f0:e6:8c:31:f5:65:d8:96:8b:65:17:17:43:00:35:93:6c:
e6:52:0c:20:37:37:28:f4:19:0a:02:e5:13:c1:a3:5e:6e:28:
54:7a:8b:fc:89:df:b5:a4:e3:e7:26:a9:4e:a6:71:02:68:8c:
88:d6:fc:e6:1a:b3:72:84:1f:07:92:9e:57:3e:7e:26:41:09:
dc:3f:c7:2e:23:23:a1:ec:22:49:93:4e:74:55:96:6d:ed:1c:
79:9d:61:b1:36:6e:79:aa:b7:a3:27:be:2c:29:77:79:9d:62:
85:fe:13:21:84:8e:b2:65:99:b9:4d:5c:90:8f:32:79:f6:75:
3f:ca:4e:11:5c:eb:b0:37:89:eb:b2:99:91:16:4d:a8:c1:09:
c6:05:af:18:d4:af:04:3e:15:56:6f:7e:23:31:be:c3:5a:d1:
8c:5e:1c:ce:0c:57:65:42:81:63:f7:a0:34:ce:0c:3c:13:25:
dd:9c:3d:48:67:63:b5:7a:b0:1d:5c:56:0a:44:d6:d0:dc:2d:
d8:77:ee:88:aa:ea:e1:d9:ce:1b:63:5a:30:64:7f:43:85:5c:
5d:94:f1:4b:18:cf:34:14:22:ec:5d:b8:a8:45:c7:e9:b5:3e:
47:2b:f6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:00:42 2026 by rpki-client