
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
File: AS400890.roa (raw, json)
Hash identifier: GujJ4VebFEeluugdhgBsurlI/H4bBjL/2cIZLVGJZAw=
Subject key identifier: 39:C1:72:88:26:E4:2A:0C:12:1B:87:0D:61:5A:CF:C9:09:14:6B:BA
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 35BF4E05F49BD2DD36BF3B55964C155A026440F3
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
Signing time: Thu 02 Apr 2026 23:35:55 +0000
ROA not before: Thu 02 Apr 2026 23:30:55 +0000
ROA not after: Thu 01 Apr 2027 23:35:55 +0000
asID: 400890
IP address blocks: 157.254.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 01:22:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:bf:4e:05:f4:9b:d2:dd:36:bf:3b:55:96:4c:15:5a:02:64:40:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Apr 2 23:30:55 2026 GMT
Not After : Apr 1 23:35:55 2027 GMT
Subject: CN=39C1728826E42A0C121B870D615ACFC909146BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:07:5e:40:c8:14:ef:be:42:16:d2:62:90:
d7:85:6e:3d:c1:16:c2:14:67:17:80:fd:b3:27:18:
91:56:08:96:c2:24:a4:e3:ed:5e:48:1f:bb:fe:c1:
31:1e:1c:a2:99:c4:f6:81:2f:36:8b:79:59:c6:8b:
62:d7:07:ec:c9:9f:9e:6c:fe:bd:fe:d5:59:25:5a:
02:78:60:d9:81:ac:8c:fd:76:5b:a1:de:d6:55:98:
11:56:ce:3b:e8:5f:ab:c0:28:41:4b:14:79:45:f7:
cc:ea:fe:39:ae:a8:60:1d:ac:a3:1b:3f:1a:18:0a:
42:5b:4b:bf:ba:4c:5c:85:22:6b:8e:7e:cb:60:e6:
2b:64:35:7c:51:24:60:9b:0f:89:d4:a6:60:1f:ee:
12:96:75:35:a8:f1:2d:43:27:4e:63:3e:97:28:7c:
e3:6f:b9:9a:77:d7:af:07:ef:71:f6:c0:d6:e4:d5:
9e:fa:0f:12:e2:05:5f:6a:ec:e1:b2:55:65:53:52:
79:5c:63:dc:11:b6:b1:e7:7c:d6:22:0d:a8:17:f5:
ea:86:3a:da:c6:2b:69:32:2d:98:32:aa:6c:67:e6:
0c:ce:6b:a1:50:e3:2f:15:b9:5d:ac:6c:54:de:9f:
e7:77:0a:d2:0c:4b:fa:05:cf:dd:ab:be:f7:e7:64:
0a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C1:72:88:26:E4:2A:0C:12:1B:87:0D:61:5A:CF:C9:09:14:6B:BA
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400890.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.229.0/24
Signature Algorithm: sha256WithRSAEncryption
61:54:ed:85:4b:5d:0a:82:55:67:ac:fa:b6:4a:74:a8:4b:55:
83:3f:c4:2a:23:59:d4:34:e7:a4:a2:78:f5:7b:e1:61:e3:5f:
b2:f9:66:9c:ac:52:bd:4c:01:4b:d0:e8:68:91:7d:fb:48:98:
d4:b8:69:68:db:e2:42:e9:18:23:f2:76:31:63:de:38:dd:f0:
2b:85:a4:35:82:72:fc:a2:05:c3:ca:e3:b9:67:f6:0b:b9:f6:
91:a2:2d:17:df:84:53:42:7e:a1:0f:28:70:0a:ba:be:36:a8:
96:2c:61:ea:e2:f9:cb:0f:be:47:fc:9e:0c:4c:02:ed:9a:9b:
34:99:c3:25:f8:1d:6e:83:ea:2f:f5:e1:cb:73:69:08:aa:7c:
b3:0f:98:0b:2d:07:66:8c:ce:2e:33:f6:7f:86:bd:f6:30:3d:
25:1b:a2:7d:4d:bd:b8:38:ec:21:ff:95:7d:df:a4:c1:d9:c5:
f1:c0:6a:ef:ec:eb:65:13:5a:9f:b4:e2:67:25:74:2c:e5:fb:
16:1a:5d:3d:a0:9b:65:b4:b7:22:ad:3a:48:0b:63:6c:a1:20:
1c:01:b2:e3:7f:7b:84:1b:81:9d:bb:a2:d2:fb:4f:31:b2:21:
ae:3e:73:24:6d:61:63:ad:40:a9:5f:c1:ba:71:49:74:67:d3:
d1:b2:c7:fe
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUNb9OBfSb0t02vztVlkwVWgJkQPMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDAyMjMzMDU1WhcNMjcwNDAxMjMzNTU1
WjAzMTEwLwYDVQQDEygzOUMxNzI4ODI2RTQyQTBDMTIxQjg3MEQ2MTVBQ0ZDOTA5
MTQ2QkJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBIHXkDIFO++
QhbSYpDXhW49wRbCFGcXgP2zJxiRVgiWwiSk4+1eSB+7/sExHhyimcT2gS82i3lZ
xoti1wfsyZ+ebP69/tVZJVoCeGDZgayM/XZbod7WVZgRVs476F+rwChBSxR5RffM
6v45rqhgHayjGz8aGApCW0u/ukxchSJrjn7LYOYrZDV8USRgmw+J1KZgH+4SlnU1
qPEtQydOYz6XKHzjb7mad9evB+9x9sDW5NWe+g8S4gVfauzhslVlU1J5XGPcEbax
53zWIg2oF/XqhjraxitpMi2YMqpsZ+YMzmuhUOMvFbldrGxU3p/ndwrSDEv6Bc/d
q77352QKrQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDnBcogm5CoMEhuHDWFaz8kJ
FGu6MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzQwMDg5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+5TANBgkqhkiG9w0BAQsFAAOC
AQEAYVTthUtdCoJVZ6z6tkp0qEtVgz/EKiNZ1DTnpKJ49XvhYeNfsvlmnKxSvUwB
S9DoaJF9+0iY1LhpaNviQukYI/J2MWPeON3wK4WkNYJy/KIFw8rjuWf2C7n2kaIt
F9+EU0J+oQ8ocAq6vjaolixh6uL5yw++R/yeDEwC7ZqbNJnDJfgdboPqL/Xhy3Np
CKp8sw+YCy0HZozOLjP2f4a99jA9JRuifU29uDjsIf+Vfd+kwdnF8cBq7+zrZRNa
n7TiZyV0LOX7FhpdPaCbZbS3Iq06SAtjbKEgHAGy4397hBuBnbui0vtPMbIhrj5z
JG1hY61AqV/BunFJdGfT0bLH/g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:13:19 2026 by rpki-client