
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209854.roa
File: AS209854.roa (raw, json)
Hash identifier: PbRPmS2HKGs/IYbPMhPiukCA27wLsHHERrynIJm7lhQ=
Subject key identifier: 9C:E5:79:AA:E1:A8:52:7D:54:14:F6:05:DB:95:FD:26:A0:6F:B5:71
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 366F332EF19EB18721078C5EC4C36C2318F05B21
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209854.roa
Signing time: Wed 18 Mar 2026 15:35:54 +0000
ROA not before: Wed 18 Mar 2026 15:30:54 +0000
ROA not after: Wed 17 Mar 2027 15:35:54 +0000
asID: 209854
IP address blocks: 192.228.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 04:39:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6f:33:2e:f1:9e:b1:87:21:07:8c:5e:c4:c3:6c:23:18:f0:5b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Mar 18 15:30:54 2026 GMT
Not After : Mar 17 15:35:54 2027 GMT
Subject: CN=9CE579AAE1A8527D5414F605DB95FD26A06FB571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:34:11:97:f9:f4:34:14:e5:eb:42:2a:25:
8d:c8:c0:bc:c4:6e:c3:83:cc:da:11:33:d5:ff:40:
7d:fb:4a:ce:bb:4d:cb:13:75:90:9d:c0:c9:d2:87:
bf:2a:da:8e:30:2e:4e:98:b3:0d:6a:f1:0d:63:b8:
91:2b:ec:f5:32:8b:ad:da:ba:f8:e5:3f:43:f1:6f:
3d:ca:b9:34:ac:bc:2f:34:10:52:24:e1:29:1e:fb:
d2:be:a8:57:a4:0e:dc:67:a0:c4:05:dd:7d:2d:2c:
bb:4e:13:ad:ec:af:53:30:e8:cb:6a:16:1f:2a:95:
cd:45:23:66:6a:59:44:a3:95:58:c6:cd:13:ac:c0:
b6:7e:82:09:1d:61:b3:0a:a9:b2:8b:d8:f3:db:9d:
f7:48:c8:db:e5:b3:53:2b:f7:90:46:39:c8:6c:74:
ce:e7:0b:f8:2a:da:a2:24:e5:22:7b:0c:f7:10:88:
57:6f:6a:82:c1:67:c6:97:85:6e:cf:67:3b:50:ff:
45:82:8b:c6:6a:24:bd:ff:a6:67:c7:f1:17:55:a2:
91:23:ad:d6:95:f0:93:9c:4e:85:af:10:cb:b1:24:
c1:57:2a:22:18:d8:b2:68:dd:a2:b7:6b:6b:18:b4:
df:64:bf:4e:d3:9b:f2:1f:1c:ac:75:8b:4e:0a:9d:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E5:79:AA:E1:A8:52:7D:54:14:F6:05:DB:95:FD:26:A0:6F:B5:71
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209854.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.228.119.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:01:8e:e0:46:04:2b:04:9f:2d:c5:76:3a:b1:a7:73:bb:7f:
66:d8:46:b7:c5:0d:d8:16:16:00:21:c4:fa:5a:b3:44:c5:e6:
8b:f3:67:c5:85:9e:62:4e:2b:aa:b6:18:65:20:e3:1b:31:c7:
88:98:7b:ab:0c:6f:12:9d:32:a5:0f:48:dc:63:5d:02:c1:02:
05:0d:69:af:d7:b2:ca:11:84:e7:ae:97:be:22:c2:25:8a:e9:
b4:48:36:bb:28:10:f2:cd:9c:16:5f:06:1e:1f:40:3b:19:99:
20:bc:fd:83:bb:50:85:4e:5c:81:a9:30:d1:ef:46:b1:76:1f:
f7:e4:0e:e7:07:9a:c5:25:48:3d:4d:bd:a2:ed:57:19:00:27:
29:f1:9e:23:0f:68:d2:83:64:b5:f9:8e:dd:9d:42:b4:43:8c:
34:46:1f:bc:2d:78:ae:4b:e3:ce:83:a8:fe:38:d2:ff:e8:29:
d6:6e:ee:c3:88:a0:6b:0a:31:70:e3:da:d2:4e:fd:16:60:94:
35:43:11:34:c5:1d:d4:13:c8:95:fa:80:cf:d0:f8:7b:85:ed:
52:da:e0:1c:6e:1c:a0:93:93:dc:4d:cd:21:1a:4c:60:45:d4:
dd:30:68:2e:77:28:c0:b6:2e:1d:0b:b2:85:c3:57:ec:e4:42:
e3:ce:0b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:01:46 2026 by rpki-client