
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9848.roa
File: AS9848.roa (raw, json)
Hash identifier: YfjDSpw2+S1KdjlaivHCBD1UFO14UvPxD8L+cHS8Pmo=
Subject key identifier: 89:2B:02:6F:38:68:CE:82:A5:D9:1A:D4:25:13:EA:C7:85:D7:DD:63
Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial: 429BB7709C7EAA2281926DE0DB76B5476B3AE17A
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9848.roa
Signing time: Wed 02 Sep 2026 05:50:49 +0000
ROA not before: Wed 02 Sep 2026 05:45:49 +0000
ROA not after: Wed 01 Sep 2027 05:50:49 +0000
asID: 9848
IP address blocks: 40.223.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 10:37:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:9b:b7:70:9c:7e:aa:22:81:92:6d:e0:db:76:b5:47:6b:3a:e1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Validity
Not Before: Sep 2 05:45:49 2026 GMT
Not After : Sep 1 05:50:49 2027 GMT
Subject: CN=892B026F3868CE82A5D91AD42513EAC785D7DD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:76:e0:9a:c3:6f:f4:ad:f9:94:9a:15:73:
e5:4c:e9:79:b0:f7:13:84:33:d5:d2:33:17:26:7c:
37:c3:64:a2:dd:80:2d:f1:1c:bc:9c:21:1e:17:c1:
a3:3a:4a:f2:08:82:a8:91:61:95:6d:e3:76:71:53:
e7:18:0b:de:2b:cf:ba:99:02:85:90:1d:20:7e:d2:
bf:f4:b0:b4:b1:d0:86:c0:1f:4b:44:6e:6f:51:46:
a6:76:26:54:d2:52:20:32:f3:c1:73:be:14:2e:a5:
c7:76:b0:8b:78:c7:b1:83:f0:6c:e3:03:b8:37:3b:
55:97:47:bd:98:a5:0d:58:51:35:68:db:f8:6b:23:
7a:82:1d:56:7b:fb:c7:86:a5:35:b4:9e:22:06:3a:
0d:0f:22:32:0a:96:91:95:05:24:57:a3:be:7f:23:
bb:6c:c7:1f:eb:0f:39:3c:84:b2:a9:7d:4b:e1:f2:
cf:e7:df:d6:ed:e6:af:b5:35:5a:33:f9:26:83:75:
c8:84:f1:60:c0:e1:d5:b4:22:3a:d5:c0:de:80:67:
9e:14:77:fe:79:03:db:ee:b7:08:97:f3:55:3c:1a:
da:d4:25:66:3c:1b:23:ef:5d:f6:89:97:f5:36:dc:
ab:6f:48:28:85:35:29:61:83:3e:69:e3:18:6d:2b:
8a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2B:02:6F:38:68:CE:82:A5:D9:1A:D4:25:13:EA:C7:85:D7:DD:63
X509v3 Authority Key Identifier:
keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9848.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
40.223.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:0b:03:5d:82:61:32:2e:28:2c:a1:df:8a:60:14:3a:0e:22:
e3:8b:d7:e9:d4:0a:af:04:8a:66:dc:9f:22:23:fe:a5:bd:12:
e6:1d:1d:48:a2:83:df:e4:b5:0b:9e:9e:17:5c:46:19:68:2f:
b0:ca:41:2c:d1:99:2c:84:fa:ca:cc:7c:8c:3a:a6:b2:d5:3c:
6c:d8:3e:43:44:bf:06:de:d9:7f:16:37:12:7b:59:d6:ab:72:
6f:57:81:02:19:85:5b:47:39:ef:2c:8f:1d:68:c9:a3:2a:a8:
df:fa:40:fc:23:aa:eb:df:60:68:42:47:fb:92:8f:8c:d3:61:
4a:89:da:69:0c:17:98:ff:d5:c1:8e:e5:9d:71:63:b7:0b:88:
60:db:2b:6e:0d:14:73:67:64:78:b2:e5:66:1a:f4:c5:61:11:
3c:52:c6:33:63:69:fd:4f:5e:aa:12:40:06:98:3e:0f:83:9e:
5c:a4:e9:04:be:69:94:53:a1:50:29:ba:e6:4f:27:e4:62:22:
66:da:68:04:26:2e:2c:54:14:6a:02:be:e7:1b:87:a3:96:67:
37:ac:aa:62:3e:34:ff:fc:7a:d3:9a:7c:53:27:dc:ae:5e:08:
4c:c1:30:a1:2e:e0:68:fd:01:e6:9c:18:07:5f:ae:71:65:83:
92:9c:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:26 2026 by rpki-client