
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218910.roa
File: AS218910.roa (raw, json)
Hash identifier: AkumYeCnzItAX9CJNPa/McdisK2CF96oPliwDOw8KPU=
Subject key identifier: F2:8F:F7:2B:74:CD:88:E7:7F:39:C2:7B:68:01:F8:63:A0:79:FD:1F
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 127A1FF41EA637F10C690E4DDA1E9596DFEC306D
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218910.roa
Signing time: Fri 02 Oct 2026 12:45:39 +0000
ROA not before: Fri 02 Oct 2026 12:40:39 +0000
ROA not after: Fri 01 Oct 2027 12:45:39 +0000
asID: 218910
IP address blocks: 40.223.80.0/24 maxlen: 24
40.223.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7a:1f:f4:1e:a6:37:f1:0c:69:0e:4d:da:1e:95:96:df:ec:30:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Oct 2 12:40:39 2026 GMT
Not After : Oct 1 12:45:39 2027 GMT
Subject: CN=F28FF72B74CD88E77F39C27B6801F863A079FD1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:e7:9f:a4:23:9f:c5:3c:d4:c2:1e:91:6a:
f8:b2:d0:29:21:0d:b9:60:c2:66:0b:0e:09:d5:17:
50:67:49:0f:8e:38:e0:9d:e3:0a:e7:c0:d6:44:d8:
d9:96:b5:f9:8f:09:d2:02:5f:63:d9:54:ce:9e:41:
be:f6:f2:5e:98:a1:7a:a6:47:08:75:cc:06:7a:4e:
a1:6b:69:52:66:a6:50:16:ae:d6:b3:c7:f6:27:fd:
07:fe:69:f2:3e:75:6e:70:cf:11:1c:7e:16:5b:65:
6d:4b:5f:c6:33:f1:f8:a8:b5:bf:d9:77:62:d1:55:
02:57:dd:cb:5b:94:f1:30:39:3a:3d:6a:bd:d3:6d:
de:53:56:2f:57:9a:e2:15:b6:5d:6f:c2:19:f9:eb:
43:5a:4a:10:34:12:d2:50:44:1f:cf:51:81:b5:42:
f5:2a:16:93:11:05:82:d5:e4:de:7f:49:9f:a0:6e:
5e:c2:26:3a:47:b0:9d:45:dc:e5:b4:da:fd:1f:8a:
2f:9d:ea:a7:0d:4f:8a:e3:ec:f2:22:ea:1d:8f:14:
41:68:17:de:76:3c:57:36:7b:95:10:d9:ee:c4:25:
82:31:b7:a6:75:48:69:38:c0:9d:b8:b5:9e:20:b7:
57:0d:75:6e:9a:e4:fd:a8:95:40:e0:e2:f6:55:d2:
82:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8F:F7:2B:74:CD:88:E7:7F:39:C2:7B:68:01:F8:63:A0:79:FD:1F
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218910.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.223.80.0/24
40.223.188.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2c:2a:1e:32:19:a0:af:88:2b:2c:bb:19:45:7c:62:6b:1d:
86:81:f7:30:59:aa:b2:b2:f6:af:f0:7e:58:8d:7d:62:7f:c7:
6c:0f:78:e1:bd:28:8a:ef:6f:84:af:cb:ce:c2:0a:0f:06:ad:
40:5c:9f:13:af:68:8f:81:a2:49:9f:41:d7:4c:76:52:c4:a7:
88:ab:0c:69:b7:65:f8:6c:82:64:bd:93:40:18:c5:f3:17:db:
f8:7c:fe:2d:c8:05:41:78:8c:f8:37:0e:a1:5d:c7:4c:bd:8c:
96:e0:c6:25:a1:0d:37:3c:37:5b:1d:5d:4d:20:29:ba:ad:2f:
d4:7d:61:c5:c0:43:76:3c:bc:a3:de:54:d2:a8:72:ab:0d:b9:
b0:11:b1:d8:db:4c:7f:4e:96:fb:f2:2b:68:eb:1b:66:54:b4:
07:e5:87:af:ea:fc:17:ab:53:37:cf:4d:da:4e:5e:8a:20:6b:
90:d8:06:3e:e4:35:ab:3d:fd:bb:64:a0:69:bb:89:d6:42:73:
3f:e0:82:a3:41:b2:9a:98:13:ba:ba:8a:8e:c3:08:b3:fc:18:
11:31:c4:5b:77:75:66:a2:71:b9:4e:09:b9:49:71:0c:3a:8e:
97:56:47:3a:e7:ca:a4:4a:21:e8:69:84:5f:a0:15:cb:0d:b4:
24:0d:45:5a
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgIUEnof9B6mN/EMaQ5N2h6Vlt/sMG0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMDAyMTI0MDM5WhcNMjcxMDAxMTI0NTM5
WjAzMTEwLwYDVQQDEyhGMjhGRjcyQjc0Q0Q4OEU3N0YzOUMyN0I2ODAxRjg2M0Ew
NzlGRDFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYbnn6Qjn8U8
1MIekWr4stApIQ25YMJmCw4J1RdQZ0kPjjjgneMK58DWRNjZlrX5jwnSAl9j2VTO
nkG+9vJemKF6pkcIdcwGek6ha2lSZqZQFq7Ws8f2J/0H/mnyPnVucM8RHH4WW2Vt
S1/GM/H4qLW/2Xdi0VUCV93LW5TxMDk6PWq9023eU1YvV5riFbZdb8IZ+etDWkoQ
NBLSUEQfz1GBtUL1KhaTEQWC1eTef0mfoG5ewiY6R7CdRdzltNr9H4ovneqnDU+K
4+zyIuodjxRBaBfedjxXNnuVENnuxCWCMbemdUhpOMCduLWeILdXDXVumuT9qJVA
4OL2VdKCAQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFPKP9yt0zYjnfznCe2gB+GOg
ef0fMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzIxODkxMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACjfUAMEACjfvDANBgkqhkiG9w0B
AQsFAAOCAQEAZiwqHjIZoK+IKyy7GUV8YmsdhoH3MFmqsrL2r/B+WI19Yn/HbA94
4b0oiu9vhK/LzsIKDwatQFyfE69oj4GiSZ9B10x2UsSniKsMabdl+GyCZL2TQBjF
8xfb+Hz+LcgFQXiM+DcOoV3HTL2MluDGJaENNzw3Wx1dTSApuq0v1H1hxcBDdjy8
o95U0qhyqw25sBGx2NtMf06W+/IraOsbZlS0B+WHr+r8F6tTN89N2k5eiiBrkNgG
PuQ1qz39u2SgabuJ1kJzP+CCo0GympgTurqKjsMIs/wYETHEW3d1ZqJxuU4JuUlx
DDqOl1ZHOufKpEoh6GmEX6AVyw20JA1FWg==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:56:22 2026 by rpki-client