
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
File: AS400529.roa (raw, json)
Hash identifier: X9uAz0OT1A+1COQV7ZHOymf8BZQFeY0TjwTRGQLmZCs=
Subject key identifier: FE:47:95:46:D3:06:5E:73:D9:39:A4:2F:D9:39:81:8D:3E:E4:D8:BA
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7A2E45053F3A521EAE034F5A3C5A5D4A7957BB20
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
Signing time: Fri 13 Mar 2026 00:06:02 +0000
ROA not before: Fri 13 Mar 2026 00:01:02 +0000
ROA not after: Fri 12 Mar 2027 00:06:02 +0000
asID: 400529
IP address blocks: 104.234.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 01:26:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2e:45:05:3f:3a:52:1e:ae:03:4f:5a:3c:5a:5d:4a:79:57:bb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 13 00:01:02 2026 GMT
Not After : Mar 12 00:06:02 2027 GMT
Subject: CN=FE479546D3065E73D939A42FD939818D3EE4D8BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:be:11:70:a2:70:54:dd:10:d0:c9:4b:0f:ce:
49:a5:c2:df:6a:73:fc:c0:a4:75:57:44:69:5a:8a:
b7:47:57:bf:bb:05:d9:8f:c0:40:9b:84:3e:5b:b2:
35:63:c4:86:33:37:16:35:5d:78:b5:ba:6a:6c:a8:
10:95:25:4c:25:19:3b:f1:11:53:fd:46:66:d1:81:
15:10:b2:62:52:3d:9a:48:8f:8c:00:39:98:cf:d1:
17:5e:9a:0d:2d:9c:1b:8d:12:f0:07:f1:d5:63:00:
1f:ed:3f:b4:b6:ae:e4:30:3b:d7:6b:ae:f8:13:77:
9a:b1:58:67:3e:3c:1f:cb:42:7a:b4:5c:18:6e:41:
a9:6a:b6:fd:59:0e:a5:6f:e4:8a:71:1c:4d:88:80:
2a:e7:db:1d:a8:01:b5:50:d0:c8:6f:75:da:04:ea:
34:95:45:09:95:32:db:a9:59:c1:44:30:c8:91:6d:
d6:dc:f1:2c:48:4e:7b:07:2e:6a:8a:90:7a:c7:e9:
a1:24:13:e0:11:15:fe:c0:17:4f:b5:25:b2:8c:b4:
db:7f:99:8f:14:8b:0e:6b:7c:18:7d:94:19:7a:72:
94:3d:74:7b:64:08:d8:fd:0d:52:90:c5:52:99:19:
16:11:4b:8d:43:20:68:ed:14:e1:7e:2b:b5:83:20:
bc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:47:95:46:D3:06:5E:73:D9:39:A4:2F:D9:39:81:8D:3E:E4:D8:BA
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.220.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ad:00:55:ce:66:7e:9f:4f:29:47:87:dd:5b:18:58:b7:3f:
5f:f2:4f:ed:fa:c5:b7:60:17:01:2d:11:18:24:ba:ca:87:ac:
a1:72:4f:01:28:04:6a:2c:53:77:e4:10:c2:b5:5c:dd:17:55:
ed:5e:3f:39:2d:df:16:10:9e:eb:1c:e8:18:ec:d3:7c:72:d5:
5c:31:33:98:d0:6a:cb:c0:0f:60:1e:f5:f6:1d:77:0d:f6:19:
bb:a3:30:3f:25:b4:dc:44:17:b1:c0:1a:35:4c:3e:88:b0:f2:
6d:f1:96:7c:5a:29:4b:4b:e2:a1:e9:8f:49:63:08:82:e8:89:
ab:62:29:a2:61:d5:62:39:af:34:24:e7:9d:f3:54:b9:9e:30:
77:5a:5e:35:f0:54:f8:a8:b1:8c:35:82:18:d2:6d:c9:3c:07:
5d:df:36:03:b0:0b:ba:97:5f:e6:76:8c:8f:4c:da:7e:c3:ca:
bf:c1:df:07:ae:aa:ad:cd:8f:92:cc:b8:66:6b:3c:16:38:8a:
e5:2b:89:17:be:4c:93:c4:b5:92:8b:0c:a9:40:10:97:e1:ec:
d9:23:f7:95:b9:a3:c6:8a:60:32:71:a4:a4:99:8f:1a:b0:ac:
a2:28:b4:68:21:cf:a7:92:d4:c3:52:d5:83:c3:b5:1d:c1:a0:
c2:84:77:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:45:19 2026 by rpki-client