
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
File: AS396120.roa (raw, json)
Hash identifier: +42obopcV8IreyGwsGpjnbbwi0DLZT36rt0PG3tFnVQ=
Subject key identifier: 90:53:CE:8B:0E:2E:AA:B9:9B:DC:83:65:5A:0D:F6:5B:4F:55:78:E7
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 4B557C28CACF752183D4C95FAF486D112226A644
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
Signing time: Thu 21 May 2026 02:36:51 +0000
ROA not before: Thu 21 May 2026 02:31:51 +0000
ROA not after: Thu 20 May 2027 02:36:51 +0000
asID: 396120
IP address blocks: 40.183.111.0/24 maxlen: 24
40.223.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 03 Jun 2026 13:19:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:55:7c:28:ca:cf:75:21:83:d4:c9:5f:af:48:6d:11:22:26:a6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: May 21 02:31:51 2026 GMT
Not After : May 20 02:36:51 2027 GMT
Subject: CN=9053CE8B0E2EAAB99BDC83655A0DF65B4F5578E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:27:09:02:6b:67:8a:a0:bc:2d:62:f5:19:78:
2a:97:a8:7e:d7:80:70:a2:c7:c3:f6:d2:10:c5:6e:
af:63:09:23:15:97:89:0b:0c:c5:87:dd:71:d7:28:
2b:64:c0:4a:b4:d8:43:ad:7d:19:0e:d9:d7:5d:1c:
ae:cd:6c:3c:4e:a7:d4:9f:ad:a9:d9:64:d5:f5:bc:
63:c9:70:08:ee:01:b1:7f:f4:91:c2:22:b7:dd:77:
19:9f:ce:cb:dc:98:1c:7a:6d:0e:9e:6a:01:fc:ce:
48:56:4d:33:ab:7a:85:3d:44:54:43:6d:4b:35:3d:
48:ff:76:77:ed:85:77:85:d7:5d:b4:9b:e8:ac:75:
1b:f9:bf:cd:1f:b9:45:d8:06:4f:5d:8e:b2:e9:54:
68:3f:25:6a:34:1d:dd:1d:b0:62:f9:18:57:fb:4c:
11:b7:45:00:17:e7:e8:79:7b:cb:92:96:11:e3:1a:
84:41:b2:dc:58:cd:9a:c8:c5:70:03:88:5b:00:39:
60:90:9e:5f:56:3c:67:9b:94:7a:20:86:ab:65:16:
71:bb:f1:d6:9a:7d:37:76:f9:91:6a:de:45:16:90:
ff:74:1d:d8:af:38:17:73:67:30:76:aa:76:14:13:
a0:11:6a:e3:b5:56:45:a1:12:0a:9b:ac:f8:11:3c:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:53:CE:8B:0E:2E:AA:B9:9B:DC:83:65:5A:0D:F6:5B:4F:55:78:E7
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS396120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.183.111.0/24
40.223.14.0/23
Signature Algorithm: sha256WithRSAEncryption
38:8a:06:a0:ee:be:e5:47:78:3a:3e:05:87:fd:e6:3a:4b:c2:
2e:79:e9:15:dc:fe:00:4f:5e:84:ab:18:4b:c6:ae:c8:03:33:
be:78:29:72:4e:14:d3:4b:b6:11:39:80:f2:2c:5c:ac:dd:bb:
14:68:9e:f4:0c:93:ad:39:ff:9e:8b:6d:22:b7:d5:1b:4b:6e:
9d:e9:fa:81:68:28:be:15:49:c1:b5:85:fc:55:fc:c6:6a:99:
f5:8e:8b:3a:ec:fa:8e:db:1d:a4:92:e8:50:5f:e6:8b:ac:8c:
d0:e4:cb:7e:ec:ac:c4:9a:53:11:18:78:eb:9b:43:f6:3c:0a:
78:0b:bc:73:35:ad:2e:bc:fd:21:86:9b:2d:f3:f4:7b:7b:68:
7e:0a:5e:e3:5a:d2:83:f3:8a:84:5e:77:d1:ed:c3:92:0e:89:
b4:07:8a:bb:7e:25:61:a6:b9:32:d3:d2:ec:5e:b0:bf:89:e0:
46:ba:f9:f2:c4:68:f7:57:21:bc:98:c9:1d:a7:79:3a:e3:32:
63:6e:ab:77:bd:d4:83:7b:f0:9a:02:ef:16:66:89:53:88:17:
f3:94:ee:df:c0:3d:b4:86:d5:37:d3:80:50:46:9b:ae:81:1b:
43:67:4f:8f:00:76:34:d8:9a:6f:cf:be:32:0a:3d:4f:c2:be:
be:1f:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:24:54 2026 by rpki-client