
$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS25198.roa
File: AS25198.roa (raw, json)
Hash identifier: O3nhDfg4YlSZPG5pC8DgW8/pJ3k43/QA1JagbSErRk0=
Subject key identifier: AE:05:FD:E9:5A:04:7F:A5:AA:26:08:E2:59:29:03:34:9A:9C:30:7D
Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial: 49A850CA29EC2519433D2B2D31306760C16BB668
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS25198.roa
Signing time: Thu 18 Jun 2026 07:08:58 +0000
ROA not before: Thu 18 Jun 2026 07:03:58 +0000
ROA not after: Thu 17 Jun 2027 07:08:58 +0000
asID: 25198
IP address blocks: 216.75.150.0/24 maxlen: 24
216.75.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 23 Jun 2026 17:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a8:50:ca:29:ec:25:19:43:3d:2b:2d:31:30:67:60:c1:6b:b6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Validity
Not Before: Jun 18 07:03:58 2026 GMT
Not After : Jun 17 07:08:58 2027 GMT
Subject: CN=AE05FDE95A047FA5AA2608E2592903349A9C307D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:4b:8b:e9:2b:57:e1:11:d1:b7:04:6a:d1:
57:71:b2:ed:af:ea:a0:83:4f:54:dd:91:77:fd:4d:
c3:8b:37:bb:5b:cc:43:29:b6:ec:56:a2:01:57:af:
8a:bc:06:5f:f6:69:4e:fd:7b:e0:7f:de:a4:70:6d:
51:c6:e1:af:d2:71:22:2a:73:4f:7b:9c:65:1c:f9:
88:0b:13:eb:36:0c:d2:65:5d:c8:99:e5:5b:67:df:
b2:d2:4e:d8:ad:ef:02:43:d8:eb:7c:eb:38:4b:01:
61:cd:0b:c3:43:b1:fe:ed:25:d7:8d:5b:eb:3f:93:
d1:61:3a:b6:f0:41:f5:54:01:6d:de:62:81:7c:65:
bc:23:f3:f2:bc:ef:e7:ca:f6:15:68:81:73:c4:d5:
ef:9b:60:38:f5:ee:b1:d6:1f:7e:d6:64:a7:d5:42:
70:97:5a:02:4b:df:d9:d5:8f:08:8c:89:16:17:56:
12:e0:75:d5:89:d3:d2:9f:97:17:90:44:58:8e:dd:
37:a1:32:61:f1:d5:50:26:ec:41:5b:b7:b7:7e:d0:
e4:fe:25:56:7e:72:19:84:d4:56:89:b2:04:04:c5:
b4:be:c5:d8:f2:1b:51:13:a6:61:64:8b:6a:49:f7:
93:e4:ea:20:a4:d6:e9:dc:a2:59:76:3e:f5:bc:64:
d1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:FD:E9:5A:04:7F:A5:AA:26:08:E2:59:29:03:34:9A:9C:30:7D
X509v3 Authority Key Identifier:
keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS25198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.75.150.0/24
216.75.157.0/24
Signature Algorithm: sha256WithRSAEncryption
48:45:4c:79:e0:83:f2:ae:38:42:e2:86:28:5b:de:5e:87:18:
fc:cd:2e:e4:d8:f7:cc:4f:f8:08:cf:f2:54:65:cf:03:9b:31:
34:85:bd:7c:df:59:d8:e7:f1:2c:69:a3:7d:6a:a3:ae:4c:8c:
b6:ee:8f:26:28:ab:38:24:bf:b4:7e:48:4f:bb:51:81:e6:f4:
68:30:00:f6:e7:b2:2b:14:72:c8:13:07:f3:6c:29:3a:91:f0:
87:10:05:16:f9:41:89:74:4d:c8:b7:d4:cb:c0:59:bf:30:55:
b8:06:4b:44:73:e7:bb:c6:2c:57:68:3b:84:9f:b8:10:bc:57:
80:bc:62:b1:41:35:b6:79:7f:0e:71:fe:35:07:ef:03:d1:09:
eb:59:63:67:d9:97:86:f1:6f:e7:26:5d:77:56:9b:d2:6f:53:
ad:37:a1:07:44:b3:9d:05:a5:04:3f:94:c5:11:6a:bf:3d:0e:
7c:50:62:03:d1:02:9c:45:f2:57:9d:3f:a4:ea:b9:89:13:6d:
5b:34:4c:f7:12:92:1f:af:57:37:af:65:2d:77:8d:31:d1:4e:
18:be:8e:72:15:8d:1b:89:1a:66:9e:39:86:30:55:c8:2b:16:
cd:f8:83:0d:eb:ed:b5:97:15:1a:65:2b:9e:af:a6:9f:65:b0:
59:9a:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 20:03:22 2026 by rpki-client