
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa
File: AS209888.roa (raw, json)
Hash identifier: ouAbli/TThftejeFJnYd94PS7j5LNtwHpUnBFxi4oL8=
Subject key identifier: 52:53:68:18:C0:35:4F:B9:33:1E:23:98:CE:A7:AC:64:27:4D:5E:CB
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 7FAB4D6D42B3DAE0614BA246A3FBC312BDBEE1C0
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa
Signing time: Wed 06 May 2026 08:58:21 +0000
ROA not before: Wed 06 May 2026 08:53:21 +0000
ROA not after: Wed 05 May 2027 08:58:21 +0000
asID: 209888
IP address blocks: 40.27.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 13 May 2026 15:56:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ab:4d:6d:42:b3:da:e0:61:4b:a2:46:a3:fb:c3:12:bd:be:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: May 6 08:53:21 2026 GMT
Not After : May 5 08:58:21 2027 GMT
Subject: CN=52536818C0354FB9331E2398CEA7AC64274D5ECB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:7c:1f:e1:0e:71:89:36:06:4b:3f:62:c1:
7e:9b:4e:66:d1:13:2a:90:3b:c7:c7:0c:30:7b:39:
4d:a5:76:8a:a9:49:4b:0f:41:af:d5:96:08:86:ac:
09:27:50:bc:fd:66:77:95:15:40:c7:33:cd:e6:f6:
d1:fc:ac:df:e3:06:1d:f9:2f:59:cd:c5:2d:2f:fc:
1d:fb:9f:b0:7e:2a:38:29:62:74:27:bc:f7:5e:20:
1c:f8:ec:1f:e6:2d:cd:e4:8e:7d:71:48:ca:d8:ab:
ae:9e:64:b3:cf:e7:2c:ba:0d:4b:01:8b:e9:b1:b2:
1e:7b:07:b9:54:6f:3a:68:5e:83:a1:a6:60:e5:39:
9a:11:f4:ba:ab:a3:c7:7a:e3:5f:06:cb:2a:b8:47:
7a:d8:8e:c0:88:de:fe:6e:84:fe:da:1c:31:ec:dd:
b2:3f:9a:56:63:b7:65:17:fb:20:79:d0:83:c3:b8:
86:bf:c2:62:7d:ba:65:c3:20:d7:1d:1e:24:00:21:
49:cb:08:ca:9d:eb:69:5f:d0:51:23:74:ea:aa:5f:
c9:ab:21:49:ea:4e:bf:49:30:bc:8e:ae:d4:9d:79:
4c:fa:1e:21:5a:73:d7:2d:be:96:e6:03:c7:51:21:
f0:73:a9:fc:71:ba:4c:35:ab:0c:58:20:d7:5d:50:
a0:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:53:68:18:C0:35:4F:B9:33:1E:23:98:CE:A7:AC:64:27:4D:5E:CB
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.113.0/24
Signature Algorithm: sha256WithRSAEncryption
95:95:d5:ae:03:87:10:e7:69:2e:b0:f0:8d:83:b4:6a:a8:b2:
ff:98:78:fb:1d:14:31:ee:08:06:19:ed:a9:ed:c7:c0:e4:95:
a3:11:c1:bd:8c:19:73:7c:19:88:96:bc:07:8a:ef:87:ea:7e:
a5:a9:4a:c4:e0:ce:90:3a:ac:da:fb:56:75:31:69:bb:fa:d6:
47:18:1c:03:61:2d:f3:e8:40:52:fa:a6:b7:79:62:5d:a9:e4:
45:65:d4:fb:59:99:73:59:63:c6:35:e1:93:80:73:20:a3:29:
19:4d:76:0c:06:0a:b1:20:cd:6b:f1:b6:f0:d0:ed:25:36:e4:
6d:11:64:1c:1c:b3:58:dc:ff:d1:e7:08:36:d4:88:86:a8:d4:
b0:b0:3c:35:02:37:97:04:2d:1c:e7:b0:fd:83:c3:f5:08:be:
83:26:14:ff:4d:0e:79:2a:12:38:f0:6b:63:bd:74:e0:8d:cf:
cd:1f:33:c8:a2:6a:94:00:d0:8d:a0:dd:ac:2d:7c:da:e1:3b:
b6:32:31:88:ab:60:f4:8b:17:e6:e8:09:b1:1a:7d:1d:4e:44:
eb:72:a8:45:c2:10:a7:05:36:0a:f2:ae:c8:d7:20:32:b0:a7:
f3:ea:ec:ec:a3:ac:dc:eb:42:fb:f2:98:63:b0:4d:79:ee:29:
09:04:ba:65
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUf6tNbUKz2uBhS6JGo/vDEr2+4cAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTA2MDg1MzIxWhcNMjcwNTA1MDg1ODIx
WjAzMTEwLwYDVQQDEyg1MjUzNjgxOEMwMzU0RkI5MzMxRTIzOThDRUE3QUM2NDI3
NEQ1RUNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx058H+EOcYk2
Bks/YsF+m05m0RMqkDvHxwwwezlNpXaKqUlLD0Gv1ZYIhqwJJ1C8/WZ3lRVAxzPN
5vbR/Kzf4wYd+S9ZzcUtL/wd+5+wfio4KWJ0J7z3XiAc+Owf5i3N5I59cUjK2Kuu
nmSzz+csug1LAYvpsbIeewe5VG86aF6DoaZg5TmaEfS6q6PHeuNfBssquEd62I7A
iN7+boT+2hwx7N2yP5pWY7dlF/sgedCDw7iGv8JifbplwyDXHR4kACFJywjKnetp
X9BRI3Tqql/JqyFJ6k6/STC8jq7UnXlM+h4hWnPXLb6W5gPHUSHwc6n8cbpMNasM
WCDXXVCgYwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFJTaBjANU+5Mx4jmM6nrGQn
TV7LMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbcTANBgkqhkiG9w0BAQsFAAOC
AQEAlZXVrgOHEOdpLrDwjYO0aqiy/5h4+x0UMe4IBhntqe3HwOSVoxHBvYwZc3wZ
iJa8B4rvh+p+palKxODOkDqs2vtWdTFpu/rWRxgcA2Et8+hAUvqmt3liXankRWXU
+1mZc1ljxjXhk4BzIKMpGU12DAYKsSDNa/G28NDtJTbkbRFkHByzWNz/0ecINtSI
hqjUsLA8NQI3lwQtHOew/YPD9Qi+gyYU/00OeSoSOPBrY7104I3PzR8zyKJqlADQ
jaDdrC182uE7tjIxiKtg9IsX5ugJsRp9HU5E63KoRcIQpwU2CvKuyNcgMrCn8+rs
7KOs3OtC+/KYY7BNee4pCQS6ZQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:12:04 2026 by rpki-client