
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
File: AS394117.roa (raw, json)
Hash identifier: 5THzEMF4rHOo3Y542UtkWzgQr9WpG5vD7DaqNARNAVw=
Subject key identifier: A8:EF:71:1F:34:0E:5B:E9:00:90:79:8B:29:A2:A2:E8:B0:4A:7B:23
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 220ED26428F52C7505C7D4FC776CD93530902CB4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
Signing time: Mon 27 Jul 2026 19:36:09 +0000
ROA not before: Mon 27 Jul 2026 19:31:09 +0000
ROA not after: Mon 26 Jul 2027 19:36:09 +0000
asID: 394117
IP address blocks: 104.234.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 02:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0e:d2:64:28:f5:2c:75:05:c7:d4:fc:77:6c:d9:35:30:90:2c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 27 19:31:09 2026 GMT
Not After : Jul 26 19:36:09 2027 GMT
Subject: CN=A8EF711F340E5BE90090798B29A2A2E8B04A7B23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:0a:6c:2a:dc:8e:13:60:48:c8:a2:ba:a1:
75:6a:20:02:b9:2c:8b:cd:db:31:1f:ef:87:dd:94:
cd:4e:cf:fa:43:12:20:c1:0b:87:09:e0:49:c3:bb:
97:5f:a3:7d:7b:05:83:c2:24:89:31:bc:7e:83:6d:
bc:6e:91:4c:38:60:b4:33:c4:18:84:44:8d:c4:27:
e3:87:d3:80:bf:2d:4b:f2:00:5c:54:52:d8:dd:2c:
c5:33:3b:45:91:69:57:d8:88:f7:42:37:25:62:bd:
e4:27:5f:1c:be:2a:dd:0a:4b:17:d3:a7:62:ce:85:
cd:b9:37:50:f0:0b:1b:4a:78:18:8a:95:22:78:75:
2f:ff:e4:65:b4:11:b9:3d:74:1c:7f:d8:85:7c:96:
89:fc:6a:d0:fd:a2:c6:2a:1c:d6:75:2e:c5:9f:8a:
1d:34:6e:4c:e6:0d:7b:b6:dc:54:ea:bb:fc:23:08:
bf:cb:58:ed:b2:ee:ea:42:cc:00:06:ce:d5:80:73:
4c:7f:27:01:05:04:45:10:35:01:e9:a3:b1:ea:e8:
43:ef:1e:62:e4:77:95:5d:9d:c3:80:d6:68:3b:8e:
48:b4:fb:6d:fa:06:53:05:80:d5:ec:70:61:7b:9b:
81:47:73:72:1a:be:77:f4:9d:f1:ad:1b:6f:12:6b:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:EF:71:1F:34:0E:5B:E9:00:90:79:8B:29:A2:A2:E8:B0:4A:7B:23
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS394117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.35.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c8:f1:29:e6:ab:38:39:54:79:94:5e:b0:c3:d2:12:34:8f:
51:6b:9e:36:60:8f:32:bf:7e:e4:57:61:a2:7e:ff:fd:65:0d:
46:35:ea:3e:5f:5f:8e:0f:03:dd:95:48:31:e4:48:ff:5c:68:
8b:48:3e:40:8f:e0:c8:c4:98:ed:09:1f:41:e3:ed:0f:f2:b1:
4b:d9:48:11:8d:16:ac:4f:87:6e:18:b8:7d:c7:b5:36:53:14:
af:c0:d9:82:56:82:5f:0f:8a:49:b6:9c:b4:25:28:87:01:a1:
c5:81:37:ef:e1:ec:f0:99:6e:f3:fe:f1:0b:09:46:c6:35:8a:
5f:8d:5c:2c:95:67:c8:e4:3d:e2:b4:f7:80:ec:93:17:4e:c7:
ed:fa:c8:b7:ed:b7:9e:f8:a8:8d:79:55:07:86:13:a7:01:62:
2d:b5:59:55:bc:c3:77:90:f3:6d:b1:27:0d:18:69:d5:bd:12:
e6:07:4a:60:b4:74:10:bc:1d:af:65:08:59:3e:1f:22:7f:68:
6f:09:b6:a9:73:ad:b4:a3:7c:70:6e:f0:51:f4:a2:19:a5:79:
e1:7c:cf:77:79:39:65:04:61:3e:62:ab:cb:90:c6:f1:85:1f:
b8:49:25:90:c1:ca:73:16:6f:53:86:b2:6d:27:18:32:0c:d5:
94:ee:a6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:59:51 2026 by rpki-client