
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401661.roa
File: AS401661.roa (raw, json)
Hash identifier: WrxGAvuVnNN/0Lwz+vxoFqqgz7AMiIs7R2SFGpFXbpk=
Subject key identifier: BE:A2:34:3F:53:CE:09:19:B2:19:AD:32:AF:14:B1:8E:B2:B3:D8:EE
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3116D848E2D5DEDBCC1DE222CAC2F9505EDF12F5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401661.roa
Signing time: Mon 09 Nov 2026 17:50:50 +0000
ROA not before: Mon 09 Nov 2026 17:45:50 +0000
ROA not after: Mon 08 Nov 2027 17:50:50 +0000
asID: 401661
IP address blocks: 104.234.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Nov 2026 03:48:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:16:d8:48:e2:d5:de:db:cc:1d:e2:22:ca:c2:f9:50:5e:df:12:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Nov 9 17:45:50 2026 GMT
Not After : Nov 8 17:50:50 2027 GMT
Subject: CN=BEA2343F53CE0919B219AD32AF14B18EB2B3D8EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:44:ab:37:e8:0f:71:24:f8:7b:2c:96:f6:
37:7b:90:fa:36:87:78:9a:67:8d:c7:22:2b:3c:7f:
61:af:8d:80:69:cb:aa:df:52:0c:d6:cf:d7:b6:0b:
c4:c5:23:12:aa:80:47:9a:75:5c:c3:46:fc:07:02:
81:63:16:c4:4a:12:6c:b0:7d:44:f2:4a:dd:94:43:
f0:02:8c:cb:b9:42:f4:3b:8a:d8:67:3e:37:57:cb:
92:eb:9d:ef:c5:75:1e:c6:d9:94:98:b3:c0:a5:ab:
55:fc:f4:77:77:3d:c2:3f:2b:c7:61:c5:b3:80:83:
62:2c:de:61:f4:19:05:81:ad:0a:31:43:f8:a7:d1:
d6:86:eb:1c:4d:24:14:9f:c2:07:36:e0:c5:6f:2a:
e5:9c:cc:4b:d9:90:e0:07:0d:b3:83:47:7a:c0:8a:
a2:0e:82:30:2e:95:57:81:0a:c1:94:d1:48:9d:c1:
16:c6:1b:79:95:d3:c0:f3:6d:43:37:7d:7b:10:3f:
4d:86:f8:7e:00:6c:e8:98:ed:a1:cb:fd:96:9c:84:
1a:56:e9:72:24:0b:58:1f:66:02:4d:24:04:ea:be:
c0:87:f9:dd:f2:5f:d3:68:cd:04:38:d7:a8:62:45:
f9:15:7b:c6:1b:0b:22:50:16:04:e9:40:e9:70:91:
51:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A2:34:3F:53:CE:09:19:B2:19:AD:32:AF:14:B1:8E:B2:B3:D8:EE
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401661.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.112.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:49:65:2e:44:0e:6c:3d:a0:74:9c:eb:53:5f:09:22:8f:07:
4e:df:50:fd:4c:2d:0c:8a:53:c4:cb:41:f5:c1:28:52:d2:b2:
b9:10:3e:9b:28:ba:85:8b:ce:4d:3f:41:82:54:bf:6f:c1:b9:
e0:2e:84:d6:4d:6c:09:e5:35:b3:cd:e5:67:85:f3:9c:e8:61:
16:a6:fa:61:c7:c2:18:18:2b:f6:ff:ff:2b:1c:77:8c:d2:b9:
fc:e6:8b:b3:99:5b:4a:61:11:ec:f5:87:f4:b2:14:ed:26:4f:
63:80:05:82:fe:02:23:83:08:19:fe:55:84:2c:fb:03:f6:54:
6c:ca:d7:23:2d:ad:e8:19:8b:a4:97:36:2a:0a:cf:60:ce:bf:
66:73:ee:c8:24:34:63:df:7d:56:db:b9:16:86:f9:b3:f7:35:
4f:c9:66:fb:0f:a9:06:4b:20:d6:a4:f7:15:88:64:c6:95:6c:
69:a4:d1:a1:57:3e:f7:bc:35:a2:72:26:4f:ff:9b:95:2e:0e:
42:7d:99:4d:79:26:9d:ea:74:e0:85:f7:5c:a3:ab:14:53:52:
fb:f9:1d:f9:25:d9:73:83:34:0c:33:b0:c4:ab:c2:4c:86:e5:
ea:d8:de:13:c5:c7:4f:d1:5b:c9:ae:fb:b6:72:07:b0:d7:7e:
86:88:58:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 08:20:37 2026 by rpki-client