
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402671.roa
File: AS402671.roa (raw, json)
Hash identifier: 9yALl2v2ImMopP0LtcaCBT+kAGhVe8sZMCdbMJS9dHw=
Subject key identifier: 33:7B:81:51:81:6B:E8:46:A0:9C:15:A3:E4:0E:DD:8F:18:76:D6:02
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 13B70756B9D01E79AC0EF4067D2129C63E587604
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402671.roa
Signing time: Sat 03 Oct 2026 14:46:20 +0000
ROA not before: Sat 03 Oct 2026 14:41:20 +0000
ROA not after: Sat 02 Oct 2027 14:46:20 +0000
asID: 402671
IP address blocks: 40.223.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 14:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b7:07:56:b9:d0:1e:79:ac:0e:f4:06:7d:21:29:c6:3e:58:76:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Oct 3 14:41:20 2026 GMT
Not After : Oct 2 14:46:20 2027 GMT
Subject: CN=337B8151816BE846A09C15A3E40EDD8F1876D602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:10:da:dc:ab:01:bf:ca:75:9b:d9:f4:cb:f8:
2e:aa:0c:bd:0b:29:64:04:2d:45:cd:00:ac:81:16:
b7:81:58:42:c4:66:96:b3:04:34:c7:0c:a7:7a:4d:
1b:74:de:2b:0e:93:ae:45:57:2f:70:d1:4d:4c:05:
8f:32:ea:46:b4:bf:31:76:34:e4:1d:47:c3:8f:3f:
3f:58:80:0c:e9:9d:2b:de:47:f1:19:30:bd:e6:16:
60:12:7d:1c:e7:7a:8f:09:64:5b:a5:38:63:75:8c:
be:18:27:c2:09:bd:51:7e:d7:d0:07:3f:93:8e:d7:
63:c3:b8:fa:cb:8d:80:b5:ad:22:fc:4b:b3:4b:5e:
cc:32:74:c3:4a:de:cb:ae:5f:c0:25:10:b1:90:15:
c9:ea:b3:d2:26:78:17:b4:22:28:01:2a:8f:ee:3d:
30:bb:8a:d8:4b:f0:51:7c:22:9b:f8:41:43:cb:c4:
63:3e:11:81:0a:b7:1b:9b:4a:42:b9:ba:75:44:c1:
6a:2c:d3:f5:86:15:c1:3f:d2:1d:13:cb:ca:8c:19:
e4:33:d5:fe:ac:6a:87:30:e8:0c:63:c3:ff:ef:78:
61:47:f2:2a:64:5e:79:36:52:9c:72:a7:e7:92:61:
ff:03:de:98:a0:43:62:b4:11:af:fd:78:23:e5:82:
1f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7B:81:51:81:6B:E8:46:A0:9C:15:A3:E4:0E:DD:8F:18:76:D6:02
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.223.247.0/24
Signature Algorithm: sha256WithRSAEncryption
53:44:cd:67:09:b4:d7:3e:e9:19:ab:27:c1:c2:fc:51:96:a1:
90:92:3b:d9:9d:f3:fb:78:0a:52:13:c0:bd:b4:b2:42:a4:3b:
a0:76:c2:b8:06:5c:5a:d6:b8:2c:dc:7c:c6:9e:7c:e3:ee:d1:
80:3a:f6:97:b2:4c:e7:e4:5d:0f:86:b7:82:0b:d8:de:9e:c8:
28:4b:66:98:78:d2:13:53:51:d2:56:02:47:ea:24:e9:eb:75:
a4:91:69:a3:e4:0f:b0:b8:21:81:a0:94:03:cc:4b:db:df:b0:
54:2f:e3:d5:ae:59:81:d5:5e:cb:74:6e:cb:4c:6f:d4:e2:f5:
d0:83:11:3c:23:5c:e7:b3:93:e5:77:1a:b3:b1:d4:ff:4e:8f:
72:26:f8:d5:3d:f7:0b:0c:88:11:bd:fa:60:55:64:a7:2b:1e:
13:20:4a:a7:e6:36:f5:71:d8:6d:d9:e8:6a:d0:64:56:f5:17:
35:80:6f:65:8d:a0:b8:af:a9:b1:ec:ad:01:9c:b1:c0:08:d6:
7e:a5:51:d8:aa:cf:6e:c0:f5:8d:8c:21:9f:8a:4b:46:49:87:
09:be:ae:8d:5b:e2:32:ca:f2:b5:5b:4b:15:7c:77:9f:70:e0:
e5:4c:57:7a:74:b8:a9:82:d9:0c:ba:61:0f:ef:3a:9d:97:94:
67:0e:9f:0e
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUE7cHVrnQHnmsDvQGfSEpxj5YdgQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMDAzMTQ0MTIwWhcNMjcxMDAyMTQ0NjIw
WjAzMTEwLwYDVQQDEygzMzdCODE1MTgxNkJFODQ2QTA5QzE1QTNFNDBFREQ4RjE4
NzZENjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRDa3KsBv8p1
m9n0y/guqgy9CylkBC1FzQCsgRa3gVhCxGaWswQ0xwynek0bdN4rDpOuRVcvcNFN
TAWPMupGtL8xdjTkHUfDjz8/WIAM6Z0r3kfxGTC95hZgEn0c53qPCWRbpThjdYy+
GCfCCb1RftfQBz+Tjtdjw7j6y42Ata0i/EuzS17MMnTDSt7Lrl/AJRCxkBXJ6rPS
JngXtCIoASqP7j0wu4rYS/BRfCKb+EFDy8RjPhGBCrcbm0pCubp1RMFqLNP1hhXB
P9IdE8vKjBnkM9X+rGqHMOgMY8P/73hhR/IqZF55NlKccqfnkmH/A96YoENitBGv
/Xgj5YIffQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDN7gVGBa+hGoJwVo+QO3Y8Y
dtYCMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzQwMjY3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACjf9zANBgkqhkiG9w0BAQsFAAOC
AQEAU0TNZwm01z7pGasnwcL8UZahkJI72Z3z+3gKUhPAvbSyQqQ7oHbCuAZcWta4
LNx8xp584+7RgDr2l7JM5+RdD4a3ggvY3p7IKEtmmHjSE1NR0lYCR+ok6et1pJFp
o+QPsLghgaCUA8xL29+wVC/j1a5ZgdVey3Ruy0xv1OL10IMRPCNc57OT5Xcas7HU
/06Pcib41T33CwyIEb36YFVkpyseEyBKp+Y29XHYbdnoatBkVvUXNYBvZY2guK+p
seytAZyxwAjWfqVR2KrPbsD1jYwhn4pLRkmHCb6ujVviMsrytVtLFXx3n3Dg5UxX
enS4qYLZDLphD+86nZeUZw6fDg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 07:57:52 2026 by rpki-client