
$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402817.roa
File: AS402817.roa (raw, json)
Hash identifier: eUvavRa/uCLEr4hP8N3IK2GTq0ZoEmPFu90YyvF3qf0=
Subject key identifier: 7E:13:DF:35:60:A0:61:47:51:5F:57:AE:31:E9:25:6D:DB:7B:54:61
Certificate issuer: /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial: 30A1B1E519DC3C33A810846DDBBBD77CAD5A0776
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402817.roa
Signing time: Mon 02 Nov 2026 19:25:34 +0000
ROA not before: Mon 02 Nov 2026 19:20:34 +0000
ROA not after: Mon 01 Nov 2027 19:25:34 +0000
asID: 402817
IP address blocks: 207.180.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 10 Nov 2026 21:44:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:a1:b1:e5:19:dc:3c:33:a8:10:84:6d:db:bb:d7:7c:ad:5a:07:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Validity
Not Before: Nov 2 19:20:34 2026 GMT
Not After : Nov 1 19:25:34 2027 GMT
Subject: CN=7E13DF3560A06147515F57AE31E9256DDB7B5461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:56:35:03:65:19:b7:12:5e:6e:32:58:7c:ec:
1d:50:38:6f:0d:75:de:8c:8e:9f:77:a5:91:c3:ce:
43:7b:09:17:20:81:07:68:3f:42:f5:ae:d9:a4:8e:
09:a4:a2:99:c7:b5:21:b1:13:20:e5:b1:51:a0:80:
10:cc:8a:6e:b6:95:ce:30:e6:5a:7c:fb:a7:13:32:
f8:5b:09:0d:66:98:3c:9e:50:79:7d:5f:9c:ee:bd:
4f:12:6d:c3:06:57:46:34:23:f1:f8:8d:be:03:c9:
f3:52:5e:18:5e:17:a1:3f:00:6a:e0:05:13:9f:a5:
51:73:e7:64:2a:47:5e:d6:66:49:6e:b9:c5:8f:99:
1b:33:c1:ae:47:94:3a:c5:46:9c:a0:81:b2:b5:90:
fc:db:be:47:32:30:e6:00:05:9e:f5:bd:92:af:64:
41:4d:7e:e6:28:3e:9d:ae:5d:8c:7e:9b:86:9b:b8:
85:21:71:4b:13:49:60:9e:91:10:2c:e1:55:3e:8c:
b8:bc:11:34:77:db:32:cc:d9:30:4f:96:42:e2:be:
cf:42:e9:e1:36:f4:64:3c:f0:18:8a:3e:8f:bd:23:
25:37:d1:bf:70:46:7d:db:bc:b6:12:95:0b:5a:99:
70:c8:15:ce:9c:49:3f:20:51:91:78:81:20:24:82:
53:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:DF:35:60:A0:61:47:51:5F:57:AE:31:E9:25:6D:DB:7B:54:61
X509v3 Authority Key Identifier:
keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS402817.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
207.180.21.0/24
Signature Algorithm: sha256WithRSAEncryption
06:c5:b7:10:50:80:94:9c:55:1a:4c:37:82:fb:fa:46:66:b7:
06:cd:33:08:50:0e:6e:63:26:d1:f0:83:dd:95:30:a0:88:6a:
6c:ee:c6:72:61:6c:a5:df:d5:ac:44:4c:81:9e:a7:5e:0b:a2:
39:36:3a:3f:48:0d:c6:06:2a:bc:9b:d2:6b:a7:d2:1a:a4:4c:
ee:7a:89:d7:78:04:6b:22:3e:61:5d:f2:c2:e5:29:b8:b8:44:
a2:71:c4:40:96:84:56:46:cc:45:75:5d:ec:03:10:e3:50:99:
45:a7:46:61:01:56:da:cc:9d:bc:39:49:9b:2f:0b:10:8d:8e:
a6:e9:ca:cd:cd:8e:41:aa:c8:a3:2a:04:03:d5:0e:fc:14:52:
1f:76:75:96:41:b8:2e:57:ed:6e:b9:46:cd:16:e2:51:d4:64:
f4:3f:d6:ef:1a:89:9d:41:43:0a:e1:cf:12:a9:3f:ac:f3:af:
af:28:46:8a:b3:d7:eb:08:da:bf:50:e0:ea:77:b9:38:87:8b:
1c:37:4e:a2:31:45:0b:7d:05:76:03:d5:7d:64:c8:90:cf:10:
e0:63:2c:27:8a:9b:66:cf:f9:c7:6d:fc:28:88:6b:0f:29:23:
9a:9e:f5:95:27:ee:f6:fd:f7:87:af:8a:31:f0:c4:6c:0c:8c:
d1:6c:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:50:38 2026 by rpki-client