
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa
File: AS2914.roa (raw, json)
Hash identifier: u3QpAcqUjliVFaxyBfA1Hg/1jw1rjN+PXk2m9Y4Qwf8=
Subject key identifier: 18:D3:41:94:5F:FF:DA:76:90:29:65:86:D0:80:18:9E:A5:25:48:DF
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 23E8BBF1D5C548A871BF9BDF5530EEB5EB8405A7
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa
Signing time: Wed 01 Jul 2026 12:11:01 +0000
ROA not before: Wed 01 Jul 2026 12:06:01 +0000
ROA not after: Wed 30 Jun 2027 12:11:01 +0000
asID: 2914
IP address blocks: 40.27.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Jul 2026 19:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e8:bb:f1:d5:c5:48:a8:71:bf:9b:df:55:30:ee:b5:eb:84:05:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Jul 1 12:06:01 2026 GMT
Not After : Jun 30 12:11:01 2027 GMT
Subject: CN=18D341945FFFDA7690296586D080189EA52548DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ba:61:70:3b:fb:a5:10:85:d9:74:f3:96:75:
78:c8:ef:7c:60:99:e9:5e:85:e1:b6:c0:74:51:50:
cd:e8:d9:f2:2f:08:bc:ac:27:99:37:78:9a:d5:eb:
0b:f0:cf:03:3d:b4:bf:b1:13:bd:5d:16:08:fc:05:
7b:2b:f0:57:f6:43:4b:c8:55:5c:dd:3e:ce:8f:5d:
36:5c:d9:7f:68:d4:fb:6e:4b:b0:c4:4c:98:93:c8:
ca:85:9c:6f:89:31:91:9a:3e:b6:53:77:10:c2:a1:
f0:c7:e7:09:36:3b:9a:2c:9e:fe:85:b0:42:1f:33:
ae:64:2e:01:91:fd:31:e4:23:ef:d5:ae:da:13:22:
bd:9d:93:84:49:01:34:61:b5:b7:db:f3:91:da:20:
a0:45:4e:cc:d6:87:00:dd:d0:b7:00:ad:b6:41:b4:
db:78:7a:6a:44:f1:e9:01:54:ea:d4:d6:1b:96:4f:
97:c3:c1:01:6b:8e:e4:4e:bb:d8:67:76:9d:59:4b:
90:ca:57:7b:8d:2e:0f:bc:66:eb:92:7c:4e:e2:73:
10:f4:1c:77:03:5a:da:19:b7:d2:6e:2f:46:9b:0a:
55:da:ae:69:1d:58:91:b5:fb:cb:bd:7a:2e:0f:84:
eb:a9:cb:99:d0:45:b6:17:f6:1b:54:2b:80:61:cd:
7f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:41:94:5F:FF:DA:76:90:29:65:86:D0:80:18:9E:A5:25:48:DF
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.58.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f9:a7:81:7d:f0:51:7e:d5:b4:8b:b5:93:fe:b7:82:66:c5:
9c:ec:4f:65:f1:36:9e:dd:32:84:0c:22:8a:06:70:64:c1:94:
7a:df:f2:ed:e0:74:39:dc:98:b1:71:59:37:ae:45:2a:89:27:
21:da:d0:60:9f:a8:d4:b3:b5:d9:af:f0:92:93:d1:5e:6b:ad:
f1:f9:79:4e:a8:9f:af:6e:d6:c3:7e:1f:6b:92:68:36:5d:cb:
65:b3:82:89:8d:a3:d9:a6:da:66:c7:21:46:9e:ee:69:64:7b:
7c:69:63:a8:20:2b:c6:d8:14:f3:c9:f9:3c:3e:62:f0:da:b6:
2b:45:f4:86:d6:9c:a8:d0:fa:76:ba:62:e2:ac:b6:88:d0:0a:
50:ef:0e:66:cf:63:9c:19:a0:15:e2:62:31:28:51:0c:63:5d:
35:3f:ec:56:62:ae:c3:b6:e2:13:e3:22:dc:18:6b:cb:6d:1a:
d6:29:2a:b9:65:5e:64:e0:bf:2d:f4:b3:d9:cb:1e:ff:dc:16:
f0:c1:b8:cd:d0:3e:3f:05:df:7f:7e:5a:de:b9:9f:7a:05:80:
c5:a8:46:8c:1e:b7:22:c6:b8:cd:e7:43:6f:e5:87:72:5c:2d:
ed:2a:45:2c:36:a2:2e:f1:9d:41:f9:73:0d:a3:50:1d:38:c9:
f1:c4:6c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:31:56 2026 by rpki-client