
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS4637.roa
File: AS4637.roa (raw, json)
Hash identifier: Lslh1dOFsnYwfN4yKfAAbsmHYkdBahF8uyl8glFXYU0=
Subject key identifier: 74:DB:0A:50:33:DF:B8:6B:5A:6B:3F:49:65:DE:48:00:D0:C5:01:66
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 36FDE296D05DBBC0851B86D62A17FC1B7CA3136A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS4637.roa
Signing time: Wed 01 Apr 2026 10:03:10 +0000
ROA not before: Wed 01 Apr 2026 09:58:10 +0000
ROA not after: Wed 31 Mar 2027 10:03:10 +0000
asID: 4637
IP address blocks: 104.234.104.0/24 maxlen: 24
104.234.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 09:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:fd:e2:96:d0:5d:bb:c0:85:1b:86:d6:2a:17:fc:1b:7c:a3:13:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 1 09:58:10 2026 GMT
Not After : Mar 31 10:03:10 2027 GMT
Subject: CN=74DB0A5033DFB86B5A6B3F4965DE4800D0C50166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:90:52:44:f2:c3:7e:49:cf:7d:6d:85:c5:
92:7b:00:ec:15:60:6c:43:cd:9a:15:0b:b0:59:6f:
21:a1:de:cc:94:4a:b5:f0:1c:55:a2:56:93:e5:c7:
d1:ae:c5:d9:00:c0:81:c2:74:3f:40:94:4a:5e:64:
c4:63:75:a2:d7:11:d7:3d:47:67:e6:c4:1b:bb:9d:
f0:55:8d:09:d5:e5:1e:dc:b4:63:79:e2:d6:67:6f:
54:d8:4e:85:3a:b3:38:cf:bb:fb:6d:a6:60:cb:20:
8c:08:35:d9:59:24:fa:9a:29:22:5e:16:15:07:60:
36:1a:01:5c:ea:d9:6e:7a:17:01:50:02:ab:f2:c6:
67:45:86:68:ca:be:3f:d7:8b:09:3b:25:e9:a3:5d:
92:3a:7f:a3:a2:a2:95:f7:b1:b6:74:16:ed:81:e5:
81:5e:80:b2:05:bb:20:82:8c:e8:88:ac:41:67:a6:
96:16:01:a9:ee:ef:fc:cd:d2:b7:97:31:3a:8f:b0:
43:9a:be:67:bd:8b:32:06:8e:dd:53:a8:d7:c3:25:
e1:85:65:ec:85:27:2c:a6:f0:3c:9d:dd:15:e5:1d:
a1:72:48:5a:07:ed:e2:e3:e8:52:51:3a:ef:41:70:
b9:2b:1f:c7:6d:2d:75:31:34:80:80:e2:0b:74:b0:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DB:0A:50:33:DF:B8:6B:5A:6B:3F:49:65:DE:48:00:D0:C5:01:66
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS4637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.104.0/24
104.234.184.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ca:7a:1f:5b:b2:6c:c0:e5:23:68:cf:6d:24:96:f5:52:9e:
bb:f6:ca:17:65:f7:a1:72:37:65:1d:ec:84:83:db:7e:9d:c0:
97:e2:48:84:46:e4:4d:5e:24:3b:cf:ab:c6:44:6a:63:4a:0f:
f3:f7:7f:bc:35:51:cf:87:3d:0c:7e:94:c9:cc:47:bf:50:7b:
b9:8b:d4:6d:5c:9b:c6:05:20:da:e6:31:59:24:0d:6a:2a:26:
08:42:3c:2b:cf:53:d9:48:58:64:29:e0:94:57:1c:cb:26:b5:
93:c2:c4:f7:4b:29:a0:58:e7:dc:dd:4b:93:ec:d4:90:60:11:
35:46:35:4d:98:7a:f6:91:3d:28:59:ae:4b:fe:3d:13:bc:ca:
41:b8:ce:d7:ce:b7:f2:6e:34:77:1a:a6:8c:ec:dd:db:1f:4c:
06:ec:e0:7f:9c:6a:9f:8c:f4:56:90:da:31:83:59:b9:ff:09:
9a:e9:ea:a8:be:ba:ab:6b:d4:9e:26:63:d4:60:7b:2e:87:90:
69:5b:66:34:b2:07:18:66:86:ac:42:40:c7:26:c4:f8:8f:5a:
7e:f3:a1:c0:4b:7e:d3:ab:ee:da:05:a2:0d:f0:a8:90:b7:15:
ba:b1:8c:9d:06:65:01:d3:50:d4:86:39:ca:40:b8:d0:ad:6c:
24:98:d1:f9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUNv3iltBdu8CFG4bWKhf8G3yjE2owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDAxMDk1ODEwWhcNMjcwMzMxMTAwMzEw
WjAzMTEwLwYDVQQDEyg3NERCMEE1MDMzREZCODZCNUE2QjNGNDk2NURFNDgwMEQw
QzUwMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtCQUkTyw35J
z31thcWSewDsFWBsQ82aFQuwWW8hod7MlEq18BxVolaT5cfRrsXZAMCBwnQ/QJRK
XmTEY3Wi1xHXPUdn5sQbu53wVY0J1eUe3LRjeeLWZ29U2E6FOrM4z7v7baZgyyCM
CDXZWST6mikiXhYVB2A2GgFc6tluehcBUAKr8sZnRYZoyr4/14sJOyXpo12SOn+j
oqKV97G2dBbtgeWBXoCyBbsggozoiKxBZ6aWFgGp7u/8zdK3lzE6j7BDmr5nvYsy
Bo7dU6jXwyXhhWXshScspvA8nd0V5R2hckhaB+3i4+hSUTrvQXC5Kx/HbS11MTSA
gOILdLA+iQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFHTbClAz37hrWms/SWXeSADQ
xQFmMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzQ2Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI
KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABo6mgDBABo6rgwDQYJKoZIhvcNAQEL
BQADggEBAKnKeh9bsmzA5SNoz20klvVSnrv2yhdl96FyN2Ud7ISD236dwJfiSIRG
5E1eJDvPq8ZEamNKD/P3f7w1Uc+HPQx+lMnMR79Qe7mL1G1cm8YFINrmMVkkDWoq
JghCPCvPU9lIWGQp4JRXHMsmtZPCxPdLKaBY59zdS5Ps1JBgETVGNU2YevaRPShZ
rkv+PRO8ykG4ztfOt/JuNHcapozs3dsfTAbs4H+cap+M9FaQ2jGDWbn/CZrp6qi+
uqtr1J4mY9Rgey6HkGlbZjSyBxhmhqxCQMcmxPiPWn7zocBLftOr7toFog3wqJC3
FbqxjJ0GZQHTUNSGOcpAuNCtbCSY0fk=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:02:59 2026 by rpki-client