
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395839.roa
File: AS395839.roa (raw, json)
Hash identifier: LfIxSRrEqfXrQLJVsa/10uOiXEfAfTKKslqM+sjdHjk=
Subject key identifier: 89:98:69:33:6B:DA:8B:F3:AA:51:14:2D:F0:FD:99:13:57:96:9E:D9
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 1D6765D061AF0AF482165D7B110528336EF795F3
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395839.roa
Signing time: Wed 12 Aug 2026 09:58:44 +0000
ROA not before: Wed 12 Aug 2026 09:53:44 +0000
ROA not after: Wed 11 Aug 2027 09:58:44 +0000
asID: 395839
IP address blocks: 40.27.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 10:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:67:65:d0:61:af:0a:f4:82:16:5d:7b:11:05:28:33:6e:f7:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Aug 12 09:53:44 2026 GMT
Not After : Aug 11 09:58:44 2027 GMT
Subject: CN=899869336BDA8BF3AA51142DF0FD991357969ED9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bf:98:3d:92:1b:e5:a5:8d:5f:54:d5:3f:9d:
7c:c3:d2:10:4b:95:d6:45:7a:76:91:76:ff:e9:74:
a3:42:68:22:42:f5:3a:31:29:3a:f4:63:4c:6d:a7:
46:41:e1:ed:b6:c7:d0:8a:71:35:1a:0c:83:9c:41:
19:c0:9a:13:c3:7a:d3:30:55:59:7d:53:f7:b3:5b:
ce:be:37:ac:4e:80:d5:3d:61:68:5a:11:c9:b4:15:
54:ac:3b:27:4a:be:0a:d8:28:94:9b:ef:75:37:74:
7f:67:43:bb:17:85:fb:aa:ef:25:e9:22:56:01:f9:
c6:1b:9c:de:45:ba:a9:aa:79:11:10:d1:57:2c:14:
28:b1:42:a5:47:cf:4b:8a:d2:0e:70:29:23:f2:cc:
a0:78:17:07:82:2e:95:0e:19:61:2a:50:07:d5:6b:
82:5f:36:26:99:45:83:14:70:5d:0d:3c:06:b5:99:
20:d9:56:43:7c:65:59:30:17:5d:75:f4:06:ff:a4:
99:08:0e:79:e1:54:2b:4c:89:20:72:ed:cb:b7:fb:
90:a8:fd:aa:07:c5:8d:d7:e7:1b:34:94:25:f7:b0:
1d:74:ab:74:e5:f4:33:92:6d:c6:e0:c2:41:39:81:
96:28:8c:01:96:d7:9a:84:04:d5:cb:46:b2:c3:2f:
cf:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:98:69:33:6B:DA:8B:F3:AA:51:14:2D:F0:FD:99:13:57:96:9E:D9
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS395839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.2.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ff:d4:07:be:cc:9b:98:ca:1f:8a:6c:c8:eb:11:f8:3a:e2:
9f:fa:94:46:b5:d9:27:e2:07:04:6b:95:48:0e:df:d2:61:cd:
86:84:8d:b0:0c:bd:ec:07:76:2a:94:1d:58:3f:6b:e1:d1:c2:
d3:13:7b:69:41:df:90:a3:b8:0f:ed:81:50:e3:6f:d5:01:d1:
c6:06:c5:2c:fe:86:87:2c:c1:85:2a:66:e0:db:ec:62:cb:20:
1b:17:1d:2b:0e:63:5a:55:9f:47:89:5c:d0:d7:1b:5f:37:7e:
67:15:f6:63:30:36:8b:de:dd:1d:8b:cf:38:63:68:53:c0:c3:
f7:4e:6a:d3:a2:7e:72:21:93:16:c3:06:3b:5a:d1:2a:34:42:
a5:da:17:77:f7:16:98:96:e2:16:4b:47:a6:82:b6:89:9c:a5:
a0:58:ae:7a:95:69:97:e7:c9:f6:0f:09:fc:79:1a:08:ae:28:
6b:6b:2f:68:b2:17:fd:87:b0:af:89:d7:04:ac:49:22:66:aa:
37:35:fa:5a:bc:a8:d3:fa:7a:da:c0:6a:6a:c7:5c:76:ab:1f:
22:db:a8:f3:a1:b7:62:82:60:be:af:f5:b8:1d:1b:50:ce:f1:
bd:79:6a:0d:13:a6:fd:27:ec:43:fe:0b:a6:0a:89:5f:f9:e6:
68:79:4b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 16:28:57 2026 by rpki-client