
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397045.roa
File: AS397045.roa (raw, json)
Hash identifier: 8cxQubYAneMvIWosYXVgb9y8nVDl4WTUTDof+HKkRbI=
Subject key identifier: BF:6B:04:20:6C:34:82:BB:B3:88:36:26:63:88:EC:E1:48:DE:D1:AE
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 21C3A4C94FE9447D70DD0EB1DAE81A3A6F66B376
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397045.roa
Signing time: Tue 13 May 2025 07:00:39 +0000
ROA not before: Tue 13 May 2025 06:55:39 +0000
ROA not after: Tue 12 May 2026 07:00:39 +0000
asID: 397045
IP address blocks: 67.210.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Nov 2025 05:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c3:a4:c9:4f:e9:44:7d:70:dd:0e:b1:da:e8:1a:3a:6f:66:b3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: May 13 06:55:39 2025 GMT
Not After : May 12 07:00:39 2026 GMT
Subject: CN=BF6B04206C3482BBB38836266388ECE148DED1AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:da:a3:5e:58:9a:49:77:ae:95:23:ef:19:92:
ba:20:9e:48:5d:73:48:39:47:6f:36:bb:63:74:d0:
dc:de:24:16:4c:5b:9d:b6:04:69:4c:c2:e5:4b:63:
f4:e4:63:e4:ce:65:39:cc:46:0d:c8:a9:b0:e1:32:
4b:a1:fc:e7:87:bc:0d:7a:e5:dd:fc:f2:ce:7c:1f:
ca:46:08:4f:39:40:4e:0f:9d:5f:fb:86:c5:6c:c7:
94:81:4f:e2:05:51:9f:a0:b2:43:de:c8:0b:fd:28:
2b:28:d8:a1:2d:c9:bb:41:85:a5:a7:9b:2d:6b:a3:
f0:64:3f:b4:8d:06:37:be:a2:3c:42:f1:b4:5d:83:
27:df:70:80:83:8f:1b:32:60:59:97:cd:9c:5b:cf:
91:24:1b:d9:a4:75:e0:f9:91:59:38:77:c7:e4:52:
8d:f7:ec:21:00:4d:5d:fb:36:1e:b5:1c:5b:be:09:
93:bc:e2:da:e1:6f:56:e6:04:a8:31:ca:1d:a0:57:
ba:26:ae:84:a9:e9:4a:ac:d0:93:9d:1b:23:b2:f7:
af:3f:83:c6:39:f0:ae:34:7c:7c:fc:a7:db:37:42:
3e:1b:d5:d8:54:d3:a1:a6:72:60:9e:db:d7:59:1b:
71:c2:61:ad:19:cd:7b:2a:28:c0:02:4b:fc:73:90:
57:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6B:04:20:6C:34:82:BB:B3:88:36:26:63:88:EC:E1:48:DE:D1:AE
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS397045.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.210.98.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:af:49:2a:44:6c:18:f7:02:38:61:78:8d:0f:ad:e6:9f:56:
11:54:7c:ad:3a:9f:d3:1f:80:b4:ae:11:8b:c5:90:b9:fd:df:
3b:7b:e8:4b:24:44:50:9d:e8:c9:64:78:a2:24:c6:47:4d:cd:
94:1c:d5:64:46:f6:3c:1e:c4:c9:df:3b:38:28:82:b8:6f:18:
cb:fc:c7:8d:59:1c:c0:20:a8:45:52:08:82:9f:02:c6:48:39:
a1:cb:b0:db:4c:b6:73:15:91:7a:e4:9f:ad:3f:bd:37:ba:72:
e2:f4:25:b1:8a:93:92:50:06:10:0b:6c:77:be:7b:d3:4a:07:
66:39:8f:42:6a:b6:df:62:9c:76:1a:2d:25:73:48:c7:d9:52:
d9:aa:94:9f:35:45:07:21:83:d0:d3:49:61:14:ca:14:9b:d6:
53:1d:da:7c:44:aa:42:a1:59:a7:6a:5a:4f:38:81:2b:ac:9c:
52:f8:62:98:7e:e6:cd:a2:46:ff:0e:1c:ab:a1:a4:5d:cf:34:
3e:3f:a5:9e:e4:52:6b:f1:8a:37:43:de:bf:a9:8e:fe:fe:7a:
78:13:b2:58:d5:a0:7e:86:6f:7c:f6:f3:df:a2:70:c2:9c:2d:
0a:ff:c5:a7:26:10:42:0f:93:7a:28:40:8d:d3:07:c8:88:07:
70:2c:6f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:24:21 2025 by rpki-client