
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
File: AS209854.roa (raw, json)
Hash identifier: 8sDSbwL3hyyVLWeGtNtNzZ0Rtt7win1+lrV2dz7VUfo=
Subject key identifier: 68:04:14:56:91:D8:D0:52:59:04:37:93:0B:7B:C4:0B:C9:17:91:8D
Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial: 400B1CB7605AD43F8B7106444D13FCA35B760C87
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
Signing time: Sat 19 Sep 2026 06:36:20 +0000
ROA not before: Sat 19 Sep 2026 06:31:20 +0000
ROA not after: Sat 18 Sep 2027 06:36:20 +0000
asID: 209854
IP address blocks: 216.246.29.0/24 maxlen: 24
216.246.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 12:39:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0b:1c:b7:60:5a:d4:3f:8b:71:06:44:4d:13:fc:a3:5b:76:0c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Validity
Not Before: Sep 19 06:31:20 2026 GMT
Not After : Sep 18 06:36:20 2027 GMT
Subject: CN=6804145691D8D052590437930B7BC40BC917918D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:35:2f:18:e8:75:a8:76:3f:fb:4f:0e:96:03:
82:3a:c9:bf:f7:5c:7b:9c:fc:3e:50:17:7c:33:5b:
e6:f3:98:34:1a:8f:82:34:08:80:11:4f:27:a7:49:
b9:6e:74:4d:6d:b0:64:31:2f:de:41:9c:99:ec:40:
6f:a0:40:e3:4d:11:f9:50:56:be:eb:13:92:1e:8a:
4a:46:aa:34:2c:5f:4c:c2:6b:74:89:4b:57:43:ea:
a9:7e:26:48:21:e2:68:2b:c5:f8:27:8f:55:b5:9f:
a6:7f:5a:5a:a7:4f:26:58:7a:a9:74:d3:96:71:38:
b9:ea:fd:e6:96:48:37:88:31:85:6a:dd:71:73:81:
6d:67:33:1f:9b:77:27:6d:4f:b8:bd:33:62:d4:d2:
8f:0b:cb:68:39:44:09:6e:db:65:11:ff:1b:a9:91:
83:75:4d:c1:9f:cd:72:08:08:ee:61:15:02:08:84:
a3:ba:e4:e4:b3:5e:9b:8e:fb:6b:a4:d4:ea:32:40:
33:59:6b:65:13:05:ba:ea:5d:b3:54:0d:25:39:b1:
d0:6b:85:58:ed:2e:2d:ce:63:c2:b3:c4:a8:a0:8c:
f1:a0:b9:00:1b:9c:06:6a:e4:53:8e:9e:92:2e:6d:
af:ff:10:ca:73:c0:6e:8c:26:a1:84:9a:5c:f4:0b:
51:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:04:14:56:91:D8:D0:52:59:04:37:93:0B:7B:C4:0B:C9:17:91:8D
X509v3 Authority Key Identifier:
keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS209854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.246.29.0/24
216.246.31.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a9:5e:b1:e6:8f:9f:7d:5a:16:70:3d:25:41:31:47:9d:04:
52:b1:c6:da:be:89:23:92:3c:3c:9b:62:15:73:96:0e:0a:55:
06:b3:a8:ad:44:a9:1d:49:b4:37:d3:db:49:b1:a1:83:94:bc:
a0:7f:d9:11:31:88:19:49:da:02:dd:cf:88:92:d1:7d:9f:30:
54:d6:b1:94:e7:9e:ee:7d:db:4a:89:92:a1:b9:96:6b:88:a0:
eb:fe:b6:b2:2f:4c:de:da:9b:ed:95:2c:6a:6a:5a:3d:94:0c:
4f:a4:ca:0c:e6:7e:3b:10:d1:ea:1b:2e:21:47:13:7e:f9:0d:
2f:f2:65:8c:47:30:8d:51:01:ec:14:76:b7:30:34:ef:fd:f6:
b5:24:84:ab:2d:cb:4c:3d:06:eb:52:40:de:9a:42:17:f9:59:
46:ff:01:4b:9c:70:28:0a:01:87:04:ff:05:b2:46:58:bd:ff:
8c:19:87:b4:37:92:98:3e:96:5f:b5:70:dd:98:25:36:b7:80:
ba:07:17:f9:34:cb:d9:20:d6:e7:1f:65:53:fa:d8:7f:67:93:
7c:3a:ac:41:9b:fa:3e:1d:93:98:29:d8:b7:ca:ec:c4:15:ec:
e5:70:39:17:a9:b8:de:53:65:77:1c:b1:23:6a:a3:a5:fc:09:
a1:82:36:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:20:12 2026 by rpki-client