
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401322.roa
File: AS401322.roa (raw, json)
Hash identifier: Ty9fosd5dENKBLoD2Ah1ecL+ANChDc3I6LEhQJjUjCU=
Subject key identifier: 0C:B9:DC:29:21:ED:FB:D2:80:DA:92:13:9B:A1:29:AC:5D:79:54:E5
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 5E461837B36B8401B857490210637CC3ED8A6564
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401322.roa
Signing time: Thu 26 Mar 2026 04:33:28 +0000
ROA not before: Thu 26 Mar 2026 04:28:28 +0000
ROA not after: Thu 25 Mar 2027 04:33:28 +0000
asID: 401322
IP address blocks: 157.254.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:56:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:46:18:37:b3:6b:84:01:b8:57:49:02:10:63:7c:c3:ed:8a:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 26 04:28:28 2026 GMT
Not After : Mar 25 04:33:28 2027 GMT
Subject: CN=0CB9DC2921EDFBD280DA92139BA129AC5D7954E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:72:f2:17:52:85:c7:ec:29:4f:f5:6e:ea:
27:d6:da:27:85:ac:59:21:38:43:9d:67:49:be:f5:
2a:64:43:54:4a:de:9c:70:93:1a:32:12:b1:82:c4:
00:16:02:00:12:47:7d:8b:f6:3a:98:01:b8:f5:49:
77:d8:68:31:13:5d:09:c5:4a:7d:56:3a:60:a0:3e:
94:a5:b1:3c:32:95:f7:30:58:9d:77:ea:48:93:42:
02:46:52:c9:9f:3e:53:ab:8f:85:33:78:cd:59:35:
bf:61:84:7f:20:78:54:79:b1:f1:94:c4:fd:ed:af:
ab:47:2c:2d:ad:75:83:44:c1:55:1b:ef:bc:f1:76:
11:78:26:0d:ee:b6:97:0a:e3:ce:ac:7b:ef:18:94:
e3:d7:a3:96:03:71:26:93:f5:58:8b:79:63:8e:08:
37:ee:ec:bd:c3:6d:0c:81:8b:0b:f7:f1:e5:f3:1a:
b5:e5:82:b1:ee:ae:31:0c:30:9b:44:f0:af:87:fe:
5c:fa:f6:73:a8:fd:76:b5:d7:23:27:45:47:34:9b:
57:a6:36:96:80:c6:32:8d:9a:70:b9:80:2c:cd:e1:
ff:16:54:10:a5:24:6f:70:33:6f:96:1c:f9:e0:b8:
19:f6:5e:01:48:6b:31:1d:d5:e3:db:13:be:c3:90:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B9:DC:29:21:ED:FB:D2:80:DA:92:13:9B:A1:29:AC:5D:79:54:E5
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401322.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.152.0/24
Signature Algorithm: sha256WithRSAEncryption
90:8e:c1:03:85:96:9a:87:da:06:4c:17:57:d2:7b:61:0e:a0:
a1:44:f6:cc:99:17:fa:2c:f4:c2:6d:3c:38:67:55:0c:80:c4:
42:0d:24:ef:9c:47:8e:fd:2a:62:df:7b:a3:d5:1b:6e:9f:a2:
35:99:e9:d1:03:8d:00:f6:12:7d:37:3e:7e:10:26:0a:3b:9b:
cf:03:0b:09:47:f1:59:f9:b9:cb:c8:6d:9b:e3:8c:2f:a7:d7:
5b:73:b6:c3:70:99:93:a2:17:6e:58:6c:af:c5:3f:7d:db:79:
b2:ed:f3:47:03:0b:54:0c:7e:e0:7b:9c:f8:04:e2:54:8f:7a:
28:82:25:65:8a:4c:f6:ea:b6:a4:ec:ea:eb:ca:ff:42:42:67:
f2:8e:d0:6a:c8:a4:ff:8a:e5:56:88:22:68:a5:d4:f8:79:83:
83:27:74:f5:2f:6e:8b:49:8f:98:25:08:3c:ba:77:60:40:56:
6a:39:05:b5:06:dd:01:dc:8e:37:09:80:fc:49:bb:e2:17:49:
94:4a:31:88:7d:41:35:ee:e4:7a:87:52:eb:6e:e6:ee:d0:14:
ed:e8:4c:08:0a:c1:1b:6f:3b:d9:52:92:ba:3d:0a:af:85:13:
87:a2:02:38:92:3b:3a:9f:6d:f1:a9:7d:30:74:f6:ea:e4:1f:
44:a7:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:29:41 2026 by rpki-client