
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
File: AS23470.roa (raw, json)
Hash identifier: ZEcPaQf0AaWRrdAJPsikIVoLemc8bQVZHVk1xnJf4h0=
Subject key identifier: 31:08:E9:78:60:D4:6B:BF:5F:C4:96:82:50:75:F4:F9:90:F8:E4:AD
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 4F62C21D0D8F5AE2655D086937152A74C1C70EF6
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
Signing time: Fri 04 Sep 2026 00:00:22 +0000
ROA not before: Thu 03 Sep 2026 23:55:22 +0000
ROA not after: Fri 03 Sep 2027 00:00:22 +0000
asID: 23470
IP address blocks: 104.234.139.0/24 maxlen: 24
104.234.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 16:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:62:c2:1d:0d:8f:5a:e2:65:5d:08:69:37:15:2a:74:c1:c7:0e:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 3 23:55:22 2026 GMT
Not After : Sep 3 00:00:22 2027 GMT
Subject: CN=3108E97860D46BBF5FC496825075F4F990F8E4AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b1:e4:e9:1e:14:e2:de:10:62:75:4b:98:33:
3c:f5:d2:91:4c:90:2f:ec:4f:40:dd:b3:e7:f9:a2:
59:e6:35:0e:7f:21:ff:6f:1f:e9:27:a1:11:62:8a:
67:e9:9f:e4:3e:1f:4d:c1:db:fb:fb:3b:2a:b6:61:
65:ce:c3:88:fd:79:11:1a:f7:7f:2b:dd:48:15:d2:
05:5d:7c:41:ae:93:2b:4a:24:8a:47:f4:ca:2c:89:
aa:7b:e2:10:df:bf:5a:18:0d:4f:5a:6f:7e:65:f9:
19:3b:72:0b:04:f5:b2:4b:78:10:13:6e:5b:f6:6c:
0b:be:b0:23:15:a1:d7:76:f2:85:de:80:e1:bb:4a:
cf:dd:b7:d5:6d:f2:9d:a9:a7:c4:27:5b:33:b0:6a:
4f:e1:cb:93:d0:c3:b2:e4:1f:23:1a:05:34:aa:0d:
39:c7:37:0b:35:33:e2:f2:a9:dd:c7:21:5b:4c:fa:
1f:26:c6:e9:ed:eb:43:d2:42:66:e9:58:de:75:46:
fc:1d:ed:b3:13:de:c5:b3:79:48:d7:a6:4b:cc:2f:
29:6e:4f:25:24:06:bb:2f:a2:da:c9:81:8a:b0:65:
3a:eb:70:63:6c:40:9f:cc:f4:6a:80:0d:89:4e:8f:
2d:0a:e4:7d:9d:eb:33:31:04:ef:3d:ea:60:33:b4:
5c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:08:E9:78:60:D4:6B:BF:5F:C4:96:82:50:75:F4:F9:90:F8:E4:AD
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.139.0/24
104.234.142.0/24
Signature Algorithm: sha256WithRSAEncryption
84:94:2f:7d:ed:70:0c:25:8c:33:44:05:37:5d:b6:60:92:22:
9e:57:7d:11:28:8e:02:7f:c7:09:8e:95:90:d8:4a:b0:6f:7e:
ba:5a:8b:19:00:5a:7c:3f:0c:0c:12:83:f7:1a:a6:5f:a9:80:
9d:ff:96:b7:30:72:8d:44:e6:0a:57:d2:f6:c7:46:50:b5:d5:
70:78:3e:97:a7:e0:21:08:b5:85:b5:37:36:f7:db:dd:36:c9:
f3:70:f5:18:20:86:b0:7b:4b:b5:db:f0:d6:48:7e:72:7e:94:
8e:67:6e:d0:a7:0b:3e:24:4b:77:ef:4e:75:b4:bd:fc:a0:7d:
09:bf:d6:b1:41:b7:ca:e4:07:3b:54:54:32:fe:d7:a8:90:53:
59:54:a8:11:dd:f3:a8:89:86:0a:44:d0:bf:23:28:d8:4f:01:
72:9c:82:e0:12:06:b6:37:ae:c1:fb:55:c3:c7:96:e2:ed:25:
80:cb:22:83:1b:7f:41:00:f2:c9:53:5b:76:9f:73:6e:f4:18:
4e:36:0d:21:41:7f:0b:df:f7:4d:29:1a:58:52:fb:31:b9:ad:
f5:c0:7e:85:14:a3:6a:20:d1:e6:4c:20:5f:40:36:15:6f:1b:
8f:fb:e1:28:82:76:a3:f6:45:73:96:84:74:2e:56:d5:5a:2f:
4c:19:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:24:22 2026 by rpki-client