
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402047.roa
File: AS402047.roa (raw, json)
Hash identifier: uZdp/gEecbNdnElzr++MfZx6a1TaknyrBSgCp02zp0A=
Subject key identifier: 74:C3:38:8C:72:C1:6A:80:34:AE:17:28:C0:C4:06:88:71:49:B8:F3
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 13C43475CB9C0127B3B142B1F372FB5E78FB465E
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402047.roa
Signing time: Fri 20 Mar 2026 11:05:35 +0000
ROA not before: Fri 20 Mar 2026 11:00:35 +0000
ROA not after: Fri 19 Mar 2027 11:05:35 +0000
asID: 402047
IP address blocks: 104.234.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:c4:34:75:cb:9c:01:27:b3:b1:42:b1:f3:72:fb:5e:78:fb:46:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Mar 20 11:00:35 2026 GMT
Not After : Mar 19 11:05:35 2027 GMT
Subject: CN=74C3388C72C16A8034AE1728C0C406887149B8F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:1e:81:9d:1c:e2:47:c0:c5:dc:8e:47:3c:
70:43:f1:de:4c:86:1b:cc:a7:88:e4:1c:2a:73:df:
dc:2e:81:47:49:fa:78:28:a1:83:d8:55:3c:71:a6:
c7:0a:52:03:39:24:01:7d:d6:f7:2b:0e:d3:79:4e:
b8:e2:4c:5d:dd:c1:ea:58:dc:76:c7:cf:ea:48:30:
e4:9d:54:7d:cc:b8:d7:30:2d:f1:70:28:4c:be:94:
95:10:bf:df:7d:2b:6a:e7:75:d9:4a:7c:f6:03:df:
38:44:d8:b5:f1:23:ee:52:39:e2:25:4d:0c:76:ff:
30:50:0c:ef:e5:ef:bd:4b:32:16:7b:45:2a:16:55:
a8:03:9b:7e:dd:f5:38:ff:a4:14:77:98:39:54:d2:
b3:c3:f3:4f:b2:5e:86:34:ba:e2:16:7b:f9:ef:52:
5c:4a:f4:10:52:41:76:ce:14:94:f0:d6:98:d7:ec:
96:66:3c:16:8f:77:5b:1a:e6:1a:7a:dc:a0:96:59:
90:c2:65:07:7b:13:a6:9f:e9:82:83:dc:ba:f3:b8:
ad:14:46:04:75:0c:65:bf:e4:29:9e:70:de:f7:06:
93:c4:59:ff:9a:c5:e8:cc:3a:88:48:da:93:a2:2c:
df:33:1e:80:fc:d4:0b:12:24:3c:4a:9d:5a:18:96:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C3:38:8C:72:C1:6A:80:34:AE:17:28:C0:C4:06:88:71:49:B8:F3
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402047.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.29.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f2:f6:64:a2:3f:c6:56:e0:69:ab:4f:a4:de:5d:cf:9d:1b:
7c:cb:07:1a:5d:52:ca:8f:f8:31:9a:95:af:c0:e7:a1:97:c8:
ef:84:22:53:1c:97:ca:d5:be:de:8e:cd:8e:ad:55:d9:d4:2d:
1d:68:fc:03:ed:7a:eb:63:8b:db:bb:9e:7f:65:5c:93:6a:ad:
1b:d4:be:7e:cb:0c:98:b6:7a:ce:8f:f9:b6:57:f5:07:3d:96:
d1:58:7b:34:bb:8f:70:00:ba:4e:f8:f1:b8:81:b1:05:f7:03:
58:68:6c:61:8f:1e:af:ea:4c:fd:f6:37:9f:58:80:b9:e3:28:
1a:e6:0c:3f:54:c9:8a:93:a2:e5:ad:ea:9e:11:07:4b:6f:30:
c1:41:9f:b8:12:af:3b:85:80:d1:04:74:0e:91:0c:5a:00:ce:
9c:11:94:d8:ef:93:bd:79:ba:e1:e8:a6:cb:3e:36:d9:b2:19:
80:f9:0e:ef:1e:d6:dc:4e:db:8b:da:3a:a7:9d:cd:bb:55:d5:
e3:b3:52:14:9a:56:f8:cd:b3:d0:13:65:68:1c:6f:ca:f6:c8:
89:f4:b7:04:b2:28:66:a4:dc:71:22:31:c0:01:38:93:f1:9c:
8b:cb:b6:dc:08:c5:15:52:79:e2:68:69:dd:74:56:2d:a8:bb:
99:58:5d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:33 2026 by rpki-client