
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: eSCyo4XnbtbISZmR6tbumyOCqxEZvy66mDBDrjO4QXs=
Subject key identifier: 61:3D:9A:53:00:D3:3A:C0:F6:4F:37:2F:67:FB:5E:FC:A5:57:97:16
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 75CE7D1C30132F6A31EE09B3137CFA839640B0CC
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa
Signing time: Tue 03 Mar 2026 13:50:17 +0000
ROA not before: Tue 03 Mar 2026 13:45:17 +0000
ROA not after: Tue 02 Mar 2027 13:50:17 +0000
asID: 2914
IP address blocks: 40.27.2.0/24 maxlen: 24
40.183.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Mar 2026 08:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ce:7d:1c:30:13:2f:6a:31:ee:09:b3:13:7c:fa:83:96:40:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Mar 3 13:45:17 2026 GMT
Not After : Mar 2 13:50:17 2027 GMT
Subject: CN=613D9A5300D33AC0F64F372F67FB5EFCA5579716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:5a:c4:90:38:a0:92:e8:e5:40:f5:f0:2d:
ef:a5:d0:c8:32:f1:d9:14:f5:ea:d0:ca:fc:a9:49:
4f:85:55:24:32:5f:4c:91:4a:c9:ac:31:bd:bf:44:
52:5c:9f:4e:33:4f:6a:0b:6a:4f:8d:8c:4d:22:05:
a4:93:13:05:46:77:11:b0:db:e2:9c:2d:3b:d5:3b:
8e:59:05:cf:e9:b8:72:9c:da:6b:42:f2:30:77:47:
83:8c:97:04:f8:a8:99:e5:10:d3:f0:b5:fd:cf:24:
3b:26:78:5f:a8:9e:31:cc:e8:aa:c3:c4:09:2a:63:
dd:91:9e:de:f1:5c:91:31:7f:2a:d3:fb:ca:cf:45:
29:3a:ca:9b:76:a7:9d:68:75:e5:6d:b2:40:c8:49:
a6:59:7a:01:7d:1c:7d:45:53:aa:72:fa:9f:fa:11:
51:c8:f6:40:e2:04:73:eb:dc:d9:9a:59:f6:ff:38:
e5:0c:91:ba:bb:07:d9:e6:db:b0:aa:81:06:a9:47:
1d:06:dd:49:75:6f:97:3b:5d:d8:90:39:7c:9a:31:
2d:91:13:07:6d:7f:9d:f0:8f:cf:14:db:f5:99:f5:
1c:75:89:e7:b0:94:46:08:77:d8:3d:67:f7:e1:0c:
01:fc:ae:1b:ae:9f:0c:cb:8d:b7:fb:b9:cf:81:9a:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:9A:53:00:D3:3A:C0:F6:4F:37:2F:67:FB:5E:FC:A5:57:97:16
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.2.0/24
40.183.96.0/24
Signature Algorithm: sha256WithRSAEncryption
13:17:95:d5:06:24:0a:77:2e:ea:0d:aa:ee:e3:1c:af:ed:55:
f1:1c:ab:b5:cd:ae:5e:e2:2d:26:59:6d:0c:8e:03:1f:65:0e:
64:f1:96:61:c7:90:a9:9f:b3:b5:24:98:a8:50:49:a3:38:57:
3f:50:be:83:66:b3:de:c5:c9:c8:81:7e:7b:82:70:44:31:6d:
3c:0a:9a:5b:8f:fb:0b:3e:21:6b:f5:06:d7:c8:1e:15:71:09:
da:ca:9a:b2:17:c4:1a:33:5c:54:d5:66:3f:f2:41:92:ed:a5:
51:1a:1b:7d:de:74:8f:4e:a0:ee:eb:8b:76:87:c0:b5:d5:71:
fe:a9:6b:56:ab:da:bb:35:a3:be:e0:83:49:5c:dc:f1:61:e7:
e5:51:19:e8:47:27:47:83:03:40:7d:bf:3c:70:88:16:46:87:
8e:57:df:71:04:22:69:cc:fe:96:f7:f3:60:53:7f:35:e9:5e:
af:90:72:7f:6c:90:92:4d:51:7f:ce:6f:e5:79:f9:9b:33:08:
32:92:30:21:ae:9d:f8:5b:4b:cb:62:6c:aa:5e:a7:4f:fc:24:
1a:c9:dd:cf:93:ed:33:c5:f6:2c:62:ea:54:5d:9c:79:ed:70:
cf:5b:4d:7f:d6:11:40:d8:66:98:de:78:0b:af:07:02:6e:b9:
09:ad:18:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:24:47 2026 by rpki-client