
$ rpki-client -vvvf rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS402288.roa
File: AS402288.roa (raw, json)
Hash identifier: Q7QbYqOXgGG5wHh4/I9AMun/JqYqU1TD+GFrbzjWc2Q=
Subject key identifier: E7:67:2B:77:F4:FA:BD:AB:8D:C0:9D:20:03:13:56:A7:E4:42:9D:32
Certificate issuer: /CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Certificate serial: 1E1FE0C96FBF08EB6BF64317DF654C3956812039
Authority key identifier: 4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS402288.roa
Signing time: Thu 29 Oct 2026 17:12:33 +0000
ROA not before: Thu 29 Oct 2026 17:07:33 +0000
ROA not after: Thu 28 Oct 2027 17:12:33 +0000
asID: 402288
IP address blocks: 199.235.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 16:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1f:e0:c9:6f:bf:08:eb:6b:f6:43:17:df:65:4c:39:56:81:20:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e
Validity
Not Before: Oct 29 17:07:33 2026 GMT
Not After : Oct 28 17:12:33 2027 GMT
Subject: CN=E7672B77F4FABDAB8DC09D20031356A7E4429D32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:23:f8:00:e4:34:98:aa:97:93:94:ec:50:
7f:f8:19:92:1d:d8:2c:1d:01:c6:c2:e6:88:1f:9d:
7a:e8:74:31:02:35:9f:da:05:ef:03:fe:e0:9f:b4:
9c:0a:02:1f:f4:99:17:fc:0c:01:8b:a5:09:df:a3:
1f:28:8b:12:be:62:fa:25:62:81:05:ca:0e:b3:64:
56:62:1c:e8:de:f0:dc:91:39:1e:bc:52:3a:f9:87:
dd:d6:78:c1:1e:24:ab:ec:78:0a:ba:42:57:9f:cf:
d2:92:bb:2d:e2:ee:de:a5:d5:63:05:56:53:a0:18:
f5:e8:87:2d:f6:e8:7a:1c:f3:f6:2b:fb:b3:2e:0f:
1e:6c:22:10:f3:fd:d5:15:a8:b1:30:7c:31:7a:a9:
0d:74:fe:8f:3f:81:0e:8e:83:23:cc:35:86:ba:0f:
93:41:79:c3:52:c2:41:13:44:23:b5:31:b3:3d:72:
c9:53:b7:7e:ff:9c:fa:cd:97:c4:ee:50:3b:fa:68:
7f:a7:bb:f7:60:d8:2b:d1:7a:0f:87:3e:be:a4:f7:
26:b9:4f:4c:db:05:0d:35:9c:95:76:14:70:f6:5e:
37:37:f5:90:b8:00:db:7d:04:24:7e:86:dd:b8:a4:
69:bb:be:0f:84:ab:69:5d:79:92:64:2f:46:63:93:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:67:2B:77:F4:FA:BD:AB:8D:C0:9D:20:03:13:56:A7:E4:42:9D:32
X509v3 Authority Key Identifier:
keyid:4E:09:C4:E6:D1:48:40:E8:4F:16:4C:FA:34:D8:4B:58:70:51:BC:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/4E09C4E6D14840E84F164CFA34D84B587051BCEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/6ed4cc54-f7f6-48e1-9e48-f71449e49dc8/d27b3d179c43bdfab00c8f3d202efc8afd0a1a673d2df3334e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/bab5d59282bb4b2ebfed9a7a30231955/0/AS402288.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.235.128.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b1:b8:75:23:e6:a9:03:60:07:c9:5a:d9:3a:2e:d3:67:01:
9c:c8:92:2a:ac:e7:c2:c6:7f:3d:24:b7:94:3d:18:67:ab:9a:
83:23:9f:66:80:10:09:32:07:c6:62:a6:f2:b6:5d:92:d0:d1:
e8:9c:cd:2f:06:8b:05:17:e5:83:3c:2f:62:ff:ec:06:06:19:
f6:da:d0:96:db:3c:1d:51:64:7f:d2:fb:2e:b7:de:78:e6:81:
cc:75:d5:d1:4a:5f:d8:55:6b:38:c1:77:a9:55:bf:30:f5:6e:
48:b4:0b:ed:18:e2:56:7f:60:ea:6d:42:9d:35:54:16:3a:18:
7e:30:80:82:5e:26:5a:d1:3e:24:3c:6d:0e:3d:06:67:6c:08:
bc:f6:c0:9a:92:91:ed:4f:90:77:20:6f:12:b3:6a:19:18:e5:
13:7d:0d:e6:21:24:eb:58:bb:9d:f2:f7:be:a6:a4:a4:19:47:
4a:76:3c:f6:3c:2a:86:b3:90:ee:50:81:41:5e:7a:f8:d6:a7:
85:03:01:e3:3b:e5:2b:74:1f:3f:70:1d:b8:5c:97:28:76:38:
6f:a8:21:a7:78:7b:cd:06:5e:e7:c5:a7:69:df:f8:a5:ec:c4:
30:82:56:1b:6e:0e:c3:0b:95:3e:c9:78:72:b6:49:9e:3f:6e:
42:12:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:14 2026 by rpki-client