
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: 4PZlT/Lq7eSGtqqRYjKAGLyMYjgbxFJwuPuk5NnQQrY=
Subject key identifier: 9D:7B:A5:C8:14:95:2C:BE:59:EA:A9:07:8A:9F:22:B8:2D:53:50:D7
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 6A4A1C973B80E0B1C2BF92877CDFE0F9759B7074
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
Signing time: Mon 08 Jun 2026 07:03:32 +0000
ROA not before: Mon 08 Jun 2026 06:58:32 +0000
ROA not after: Mon 07 Jun 2027 07:03:32 +0000
asID: 9304
IP address blocks: 157.254.27.0/24 maxlen: 24
157.254.49.0/24 maxlen: 24
157.254.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 20:48:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:4a:1c:97:3b:80:e0:b1:c2:bf:92:87:7c:df:e0:f9:75:9b:70:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jun 8 06:58:32 2026 GMT
Not After : Jun 7 07:03:32 2027 GMT
Subject: CN=9D7BA5C814952CBE59EAA9078A9F22B82D5350D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:a0:42:ce:18:49:7f:90:2f:50:5b:12:92:
da:88:8d:63:c8:67:40:02:a8:42:b2:95:0d:51:83:
04:81:a5:46:a2:8c:46:cc:a3:04:58:f6:35:5a:f4:
03:6d:4e:bf:3e:d4:e7:fa:9d:db:e9:c4:d1:5f:d7:
7f:e0:ac:7d:af:0b:55:f0:77:2e:22:f9:43:70:dd:
8a:fc:22:65:88:32:d5:39:14:df:fb:25:9f:06:e5:
3a:e6:49:a1:2f:2d:62:28:7d:19:c3:bb:4e:9e:f8:
2e:0d:64:76:aa:91:e9:a7:e3:d4:cd:68:a7:a4:0e:
71:8d:62:1e:77:4b:8a:eb:04:02:18:9b:fc:7b:b1:
78:86:c1:1d:12:c2:a7:fb:68:5a:93:10:1c:33:f9:
93:26:21:07:9c:e1:5c:06:ee:e0:b5:27:d4:9b:63:
28:14:0c:4b:c7:2a:57:24:9e:3e:a2:57:70:6d:09:
01:f0:b2:92:05:1a:d2:84:71:39:ae:c2:45:97:f3:
e6:b1:fb:0c:3d:e4:72:10:86:24:7f:af:1d:78:d7:
fe:f6:80:7a:13:fb:e7:68:0e:93:ad:78:97:12:7e:
c8:9f:81:93:25:13:ae:fc:e8:6a:2b:c3:13:d3:5f:
a1:fd:6b:49:61:56:8d:01:cb:d8:00:95:60:bb:d9:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7B:A5:C8:14:95:2C:BE:59:EA:A9:07:8A:9F:22:B8:2D:53:50:D7
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.27.0/24
157.254.49.0/24
157.254.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:22:60:e0:93:d3:75:1e:5a:68:2b:ae:c0:09:9a:f3:85:2a:
f4:ec:c6:67:8a:bc:5f:42:09:c8:c9:ca:36:3f:66:f1:c6:d1:
fc:2e:bb:59:e1:73:c0:a2:a3:3b:7b:3d:85:1e:92:9a:a8:b6:
79:15:55:28:d7:be:a9:cc:50:31:49:ff:92:46:63:b2:8b:c9:
10:7b:b8:14:95:3d:03:20:b5:cb:cb:2d:61:14:b1:c9:2b:c5:
0f:c1:49:f5:40:5f:ed:e2:ee:1a:5c:6d:87:8d:da:ed:9f:8c:
b8:28:31:6b:01:fd:bb:d9:9a:c2:b2:df:d2:1f:34:83:0c:19:
69:f6:a9:e1:5d:a8:eb:57:b6:4f:91:cc:e9:c0:2c:ee:43:22:
d2:c4:98:70:9d:de:de:07:49:3e:b0:ed:42:e6:b4:7e:5a:6a:
07:f7:b2:2c:76:46:87:9f:7c:6c:88:26:40:89:11:ad:ee:a0:
27:32:cd:0f:5f:73:71:14:79:db:12:f1:1b:1e:5b:b4:57:c7:
0c:8c:e7:ee:61:91:aa:b2:b0:d9:52:58:b8:2e:c2:88:b5:9e:
c8:dd:c0:04:25:92:46:cf:2a:10:dc:95:e3:c0:02:d6:9e:f7:
05:ab:8d:7f:41:bd:f6:a5:e4:05:46:59:07:80:20:e4:63:dd:
0c:9c:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:38:14 2026 by rpki-client