
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
File: AS4826.roa (raw, json)
Hash identifier: IVbVhkCOP790nyQJW1F600CrG5krJontwMVUJ1j+h7w=
Subject key identifier: C8:FC:83:5A:F8:F0:5F:27:21:23:A7:7C:77:80:6D:1B:41:DA:68:9C
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 72D24E2E6D51F1635661D8BA246317A2A965DE34
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
Signing time: Tue 01 Sep 2026 14:36:20 +0000
ROA not before: Tue 01 Sep 2026 14:31:20 +0000
ROA not after: Tue 31 Aug 2027 14:36:20 +0000
asID: 4826
IP address blocks: 40.27.160.0/22 maxlen: 24
40.27.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 10:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:d2:4e:2e:6d:51:f1:63:56:61:d8:ba:24:63:17:a2:a9:65:de:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Sep 1 14:31:20 2026 GMT
Not After : Aug 31 14:36:20 2027 GMT
Subject: CN=C8FC835AF8F05F272123A77C77806D1B41DA689C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:94:a7:f8:d8:40:6d:cd:26:81:3e:e2:fa:e2:
18:6c:c0:16:79:53:61:c4:ce:b8:27:91:fd:eb:97:
7d:38:03:d1:de:d3:09:8d:e7:90:be:d1:b5:f9:ce:
82:cb:3e:d8:43:50:f4:cb:6c:60:7e:30:35:85:9f:
3f:53:87:d7:50:2a:08:e6:fe:a2:8b:6d:6e:fd:4d:
9c:ee:9e:7e:20:77:83:15:15:85:ae:ab:8b:eb:c7:
63:c8:8e:ab:ec:ed:0c:48:35:a6:6a:d8:5b:d9:a2:
7a:8d:35:91:4a:96:20:90:e3:89:84:ee:d8:f7:86:
5c:50:95:62:51:e3:53:28:e5:bd:25:17:0a:e3:b0:
41:0e:50:d6:7a:7e:15:a5:e2:9b:db:e4:b7:99:38:
33:11:db:0f:c5:ec:0a:12:7a:ab:84:70:02:9c:e0:
6e:09:49:ac:ad:ed:c8:9d:1f:d7:4b:fc:75:19:fa:
92:f9:d1:4f:30:03:11:7c:f8:a1:2a:93:99:57:c2:
8d:37:68:1b:d6:b5:4f:c3:0a:4c:a4:b6:31:8c:43:
d0:c5:b7:df:ec:57:9f:5f:57:80:10:97:7b:be:e9:
13:7d:35:53:09:88:45:00:2a:92:12:29:bf:e5:59:
63:08:5a:2e:de:72:12:0a:5c:b6:97:07:1a:fa:97:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FC:83:5A:F8:F0:5F:27:21:23:A7:7C:77:80:6D:1B:41:DA:68:9C
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS4826.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.27.160.0/22
40.27.196.0/22
Signature Algorithm: sha256WithRSAEncryption
17:20:8b:ad:13:48:06:7a:ba:7c:8d:4a:af:4a:dd:5f:5b:c2:
70:53:e3:06:76:19:61:61:36:50:56:5d:d3:cb:ed:85:2b:65:
d2:7e:4c:4f:6b:03:2b:30:9e:2d:22:38:b6:ce:40:67:f1:01:
c4:76:7f:e5:7c:85:da:c9:5e:e3:af:2f:b1:33:7e:ad:ec:7f:
cc:71:e2:38:34:60:6f:01:8f:8a:87:28:c9:9a:16:7d:31:f9:
2a:f5:81:fb:ca:29:1b:40:77:e4:b0:66:3f:07:36:b9:66:4d:
8c:89:c9:98:14:c4:a4:86:fa:5e:4f:ab:91:1b:6b:66:a4:b4:
2e:c6:2e:cc:81:06:3f:34:6e:35:f8:06:dc:b7:51:4f:87:41:
b5:ed:30:9b:f1:83:a2:ea:c2:c5:19:ca:b1:fe:68:d4:83:b9:
e3:bf:a5:de:f8:c2:79:8f:58:aa:00:1c:3c:20:ba:6f:34:7a:
34:f1:1a:b2:6e:13:32:24:c3:c9:cf:c6:78:9b:3c:e2:2e:dc:
fa:cb:9e:fa:98:72:98:fa:0f:d2:b0:a3:63:4c:ba:15:fd:d7:
72:7f:90:a5:a6:06:e2:03:ce:fa:de:25:d4:ee:4c:3a:29:61:
78:a9:fe:2d:f7:71:30:86:61:f1:cc:cc:31:0a:c6:3d:76:23:
53:84:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:59 2026 by rpki-client