
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
File: AS212669.roa (raw, json)
Hash identifier: DvkzCTP1Cle+iCbwbFSoabCX9q7oqH3dNN7orykJOVA=
Subject key identifier: 0C:B6:B4:CB:01:92:ED:97:34:B3:04:28:75:7B:45:FB:B5:F1:99:9E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1678FED7072F41FD91F61D648BD505F6FD21ACD4
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
Signing time: Tue 17 Mar 2026 16:35:54 +0000
ROA not before: Tue 17 Mar 2026 16:30:54 +0000
ROA not after: Tue 16 Mar 2027 16:35:54 +0000
asID: 212669
IP address blocks: 104.234.230.0/24 maxlen: 24
104.234.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 01:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:78:fe:d7:07:2f:41:fd:91:f6:1d:64:8b:d5:05:f6:fd:21:ac:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 17 16:30:54 2026 GMT
Not After : Mar 16 16:35:54 2027 GMT
Subject: CN=0CB6B4CB0192ED9734B30428757B45FBB5F1999E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:6c:cd:c9:6c:b1:52:70:34:da:a4:e7:9a:
b5:63:ca:62:5e:ca:10:46:82:98:ee:cd:27:3d:07:
e3:3a:b2:96:f1:67:c1:60:c1:9e:5d:8d:9d:26:5e:
16:9f:bb:d1:d4:45:e3:14:c6:1a:a8:ef:77:aa:22:
26:c4:4c:45:3f:d2:16:e3:34:e4:ad:9a:3d:1f:ba:
bd:7a:21:ea:66:7a:3b:c7:48:1b:71:ac:11:6d:73:
2b:c7:c8:d1:89:67:dd:83:22:47:82:be:8f:09:6c:
ab:95:5b:45:55:29:71:2d:fc:6b:a5:77:a1:b4:28:
4b:9b:f8:83:72:06:18:c9:ad:b7:42:b3:19:e5:7b:
48:e6:fd:16:3c:65:5d:2a:69:1a:f6:3f:99:a4:ea:
d7:fc:57:c3:b6:cc:9b:d3:a1:82:d7:8a:d4:62:a1:
62:d4:1f:0c:08:b0:e9:c6:16:3e:6c:1e:9e:fe:f5:
9e:2d:e6:ed:32:f3:03:ef:ee:ad:9c:d0:9c:aa:a1:
75:ec:4e:39:c1:a3:af:62:0d:d6:53:ed:ed:50:3f:
f3:51:de:63:6c:5e:98:58:6b:1a:9e:9b:38:5b:37:
24:61:e2:26:09:16:ba:92:f3:3a:2e:3a:67:c7:73:
88:3b:04:a6:02:da:29:d2:66:6b:7f:a1:15:64:d0:
a9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B6:B4:CB:01:92:ED:97:34:B3:04:28:75:7B:45:FB:B5:F1:99:9E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212669.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.230.0/24
104.234.255.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ed:09:50:00:3e:9a:ba:b3:a8:56:64:2e:12:6b:a1:54:d5:
ea:39:95:db:07:14:2d:12:2d:16:28:17:18:51:3a:e1:dc:a7:
42:43:48:d2:71:34:91:ef:ba:92:97:fe:58:ab:8b:5c:85:2b:
1b:7c:b4:de:47:ba:55:a9:2a:64:dc:fd:93:97:08:0f:67:6c:
01:28:67:f0:5b:0f:03:9e:4f:98:a9:15:24:56:20:eb:e8:2c:
b0:99:b1:64:cb:51:df:a4:8d:8b:5c:93:c7:36:e5:25:16:cc:
65:3d:77:67:84:91:21:23:75:f6:1b:4d:f9:9b:9b:2a:0b:9c:
d4:d5:73:cf:96:9d:52:69:73:4a:55:a3:0e:f1:cf:0d:d1:eb:
3a:fc:ca:d9:64:09:64:a0:14:74:35:da:e4:5c:17:b0:fc:96:
0c:bc:1f:3d:84:1b:4d:95:8d:de:15:c7:7b:3f:08:80:31:ec:
93:ef:c4:cf:3d:23:3f:4e:fa:95:44:7a:67:90:bf:69:df:a9:
69:1a:40:19:be:f5:b1:3f:e5:74:f1:93:b3:6a:4c:e7:c9:b0:
87:d7:cf:ba:3c:c8:1f:8c:42:e0:3c:01:c3:0a:82:63:7f:51:
62:8f:4d:46:7d:12:54:8e:33:c7:43:9e:03:38:ca:86:e4:ae:
ac:2f:72:58
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUFnj+1wcvQf2R9h1ki9UF9v0hrNQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzE3MTYzMDU0WhcNMjcwMzE2MTYzNTU0
WjAzMTEwLwYDVQQDEygwQ0I2QjRDQjAxOTJFRDk3MzRCMzA0Mjg3NTdCNDVGQkI1
RjE5OTlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRlszclssVJw
NNqk55q1Y8piXsoQRoKY7s0nPQfjOrKW8WfBYMGeXY2dJl4Wn7vR1EXjFMYaqO93
qiImxExFP9IW4zTkrZo9H7q9eiHqZno7x0gbcawRbXMrx8jRiWfdgyJHgr6PCWyr
lVtFVSlxLfxrpXehtChLm/iDcgYYya23QrMZ5XtI5v0WPGVdKmka9j+ZpOrX/FfD
tsyb06GC14rUYqFi1B8MCLDpxhY+bB6e/vWeLebtMvMD7+6tnNCcqqF17E45waOv
Yg3WU+3tUD/zUd5jbF6YWGsanps4WzckYeImCRa6kvM6Ljpnx3OIOwSmAtop0mZr
f6EVZNCp3wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFAy2tMsBku2XNLMEKHV7Rfu1
8ZmeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxMjY2OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjq5gMEAGjq/zANBgkqhkiG9w0B
AQsFAAOCAQEAuO0JUAA+mrqzqFZkLhJroVTV6jmV2wcULRItFigXGFE64dynQkNI
0nE0ke+6kpf+WKuLXIUrG3y03ke6VakqZNz9k5cID2dsAShn8FsPA55PmKkVJFYg
6+gssJmxZMtR36SNi1yTxzblJRbMZT13Z4SRISN19htN+ZubKguc1NVzz5adUmlz
SlWjDvHPDdHrOvzK2WQJZKAUdDXa5FwXsPyWDLwfPYQbTZWN3hXHez8IgDHsk+/E
zz0jP076lUR6Z5C/ad+paRpAGb71sT/ldPGTs2pM58mwh9fPujzIH4xC4DwBwwqC
Y39RYo9NRn0SVI4zx0OeAzjKhuSurC9yWA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:22:18 2026 by rpki-client