
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219068.roa
File: AS219068.roa (raw, json)
Hash identifier: wH3BQQWumJB/5VNBSbwTNV6Ve52QmtppkUg3aFusqI4=
Subject key identifier: 46:5C:80:50:74:53:BB:B2:C0:07:C4:66:9A:DD:1A:09:8F:28:F9:4D
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 12FA76B18CA87F937966640531B2AE4EE6FFBC47
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219068.roa
Signing time: Fri 21 Aug 2026 06:08:10 +0000
ROA not before: Fri 21 Aug 2026 06:03:10 +0000
ROA not after: Fri 20 Aug 2027 06:08:10 +0000
asID: 219068
IP address blocks: 40.27.218.0/24 maxlen: 24
40.27.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 06:48:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:fa:76:b1:8c:a8:7f:93:79:66:64:05:31:b2:ae:4e:e6:ff:bc:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Aug 21 06:03:10 2026 GMT
Not After : Aug 20 06:08:10 2027 GMT
Subject: CN=465C80507453BBB2C007C4669ADD1A098F28F94D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:97:a6:74:a3:43:e1:1a:39:8c:21:91:0f:
af:52:f4:c7:e0:43:df:af:03:b5:2d:a8:d3:44:d3:
11:61:8a:5c:7d:4a:8f:d2:c3:85:e0:d0:1c:93:0e:
ae:05:63:d9:a1:5f:6c:dc:7e:82:3c:98:92:2d:52:
a0:83:35:ec:50:06:c7:0a:1b:2f:56:3e:92:8c:67:
18:32:fd:52:2f:e8:99:bf:ad:ac:fc:2a:f4:ad:be:
6d:0d:37:05:84:fd:63:c0:e4:43:81:b8:87:d7:62:
8d:bb:e9:0c:cf:f8:ec:a5:a0:7f:7c:9f:ef:6c:fc:
5e:6e:97:aa:c9:1b:90:60:06:cf:33:92:eb:80:42:
c2:6c:d0:65:bd:c1:be:da:b1:4c:0c:b3:d0:6a:a4:
52:90:55:25:aa:20:f1:c9:6a:0a:38:f9:f8:78:5b:
e8:c6:f3:08:05:b8:84:92:e0:ff:b9:2f:88:96:bc:
20:47:4c:c5:7a:9f:3c:45:fe:cc:db:37:bb:2d:61:
b6:0d:44:2b:a3:8e:e1:49:85:31:68:ce:cf:47:cf:
5f:31:bf:25:b8:2d:8d:14:38:19:a7:7f:c5:99:c5:
a2:75:92:1b:e5:f6:f7:d9:cf:c7:7a:8f:09:a3:a8:
3d:36:df:cf:95:3a:a4:5d:23:39:43:2c:f9:82:fe:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:80:50:74:53:BB:B2:C0:07:C4:66:9A:DD:1A:09:8F:28:F9:4D
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219068.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.218.0/24
40.27.228.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a3:b9:11:37:f1:28:92:b1:37:21:89:dc:ce:e5:6e:19:18:
19:7b:75:fe:d8:eb:78:30:bb:46:5d:d4:12:9c:29:89:41:ce:
9e:15:6b:80:62:27:86:65:03:d6:d5:49:45:0f:77:33:98:86:
05:29:d3:78:2c:14:05:96:8e:c4:0b:53:65:c0:40:2a:0b:bd:
5d:a7:a1:40:f2:23:75:83:59:3b:83:21:58:c0:32:3e:58:da:
28:3e:52:af:c4:a2:e2:d5:b1:59:b1:6f:1b:7d:f2:78:d5:a5:
32:c9:78:87:c2:90:f6:d1:30:4d:06:72:2d:79:70:68:80:0c:
16:2c:50:1f:f4:04:ba:a5:bd:84:39:7f:2c:78:a9:95:41:66:
c3:6a:4a:2a:db:62:f8:24:db:98:45:3d:e7:a9:3e:bd:8b:bd:
94:99:02:72:c5:d3:9d:a2:0f:75:58:00:71:8d:ca:b4:7d:c5:
c4:32:19:fe:d4:f5:b7:ea:9e:2f:9a:f7:ca:a2:df:0e:03:9f:
bc:e3:52:5a:5c:2f:9c:80:a4:27:25:b9:e5:0a:40:3c:47:f1:
53:53:7f:c2:ce:17:37:60:91:36:7e:fa:c8:d4:8c:fc:5c:b5:
6a:24:97:48:fa:e1:8f:9a:48:e2:28:74:1a:78:d3:a8:22:f5:
61:cf:33:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 10:35:14 2026 by rpki-client