
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS135598.roa
File: AS135598.roa (raw, json)
Hash identifier: Qk8GWfflZYQt/9xG2U4QYt/xB0mTCo+r/bLLXZoduuk=
Subject key identifier: 00:2B:25:81:B6:1C:B7:A8:60:53:8D:E7:8A:CF:96:A2:F1:48:5F:71
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 40FEAC503BEAE45B7B4E82155F5F89C3E94D549F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS135598.roa
Signing time: Wed 21 Oct 2026 02:32:14 +0000
ROA not before: Wed 21 Oct 2026 02:27:14 +0000
ROA not after: Wed 20 Oct 2027 02:32:14 +0000
asID: 135598
IP address blocks: 104.234.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 09:52:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:fe:ac:50:3b:ea:e4:5b:7b:4e:82:15:5f:5f:89:c3:e9:4d:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Oct 21 02:27:14 2026 GMT
Not After : Oct 20 02:32:14 2027 GMT
Subject: CN=002B2581B61CB7A860538DE78ACF96A2F1485F71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:a4:d3:2d:74:19:e6:67:01:ea:45:30:60:
d3:0b:21:28:f0:e1:74:1c:c8:7b:6f:33:d2:69:ae:
19:40:5f:6c:9f:ab:ea:ae:5d:c4:77:0b:44:78:61:
44:56:aa:9f:3f:b9:ef:ba:bc:05:9d:58:ac:13:f0:
3c:5b:7f:de:e8:06:ae:d5:e2:2c:57:fa:43:2d:8f:
62:4f:f5:11:77:6e:79:54:77:0a:4f:f7:f4:0e:0c:
33:5e:5d:49:40:96:1b:8f:57:07:ea:c7:4e:c5:15:
0f:0c:bb:70:98:72:66:d2:26:61:02:3e:41:51:43:
22:97:b0:d1:df:c9:ca:a0:cd:17:58:89:aa:0f:df:
5a:86:ea:af:e5:42:ae:b4:b6:1c:0e:94:6f:85:5e:
9b:c9:e4:51:75:ae:62:ef:d8:9c:6e:49:d5:63:a0:
c4:ef:a9:cd:5f:6b:cb:f4:25:52:2f:40:94:1b:48:
6f:c0:96:51:d4:49:67:a9:21:da:e1:37:eb:1d:0c:
5a:f2:94:6c:8e:4b:e9:01:74:e6:6c:af:e6:83:7b:
0f:ea:57:d7:17:dd:b2:e4:86:e3:f0:85:62:b4:3c:
ee:12:98:d8:07:a9:e9:a8:1c:ff:00:41:15:39:de:
79:52:3e:cc:c5:6e:f0:b0:b9:5f:d8:bf:99:fc:00:
d2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2B:25:81:B6:1C:B7:A8:60:53:8D:E7:8A:CF:96:A2:F1:48:5F:71
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS135598.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.167.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:71:83:99:bc:73:32:42:38:ca:6a:a4:77:89:47:0d:31:1a:
2a:58:78:27:b1:60:c0:8b:74:3b:0d:9b:d0:8a:9f:fe:76:d7:
7e:c6:c8:99:d3:e6:9e:ca:d3:1d:82:6a:df:96:34:7e:ec:c3:
f1:54:00:b6:be:e0:52:51:53:3f:27:7f:a2:2f:42:3b:29:0e:
0e:45:e8:b0:e3:e7:5d:cf:c6:f4:a4:ef:4f:89:5e:2c:54:a2:
b5:55:72:c0:87:f9:31:bb:50:28:25:2d:6f:24:57:c2:c5:f2:
e1:e7:9c:dc:de:de:44:03:c6:18:1f:f3:31:07:f3:20:8c:3a:
b0:fe:85:be:c3:f8:4e:dd:f0:ff:a7:12:6e:db:e7:f4:a4:d3:
4a:7e:81:07:23:16:3c:dc:f9:e5:47:8c:fd:6b:dd:04:f1:73:
5e:92:06:15:e7:a9:57:e5:22:9f:e9:07:71:4a:45:8a:50:7a:
80:bf:a6:6f:37:30:32:24:ef:25:1f:09:92:51:48:93:c6:bd:
b7:cc:96:38:eb:70:b7:6d:a0:6e:0e:ee:bf:9a:62:30:db:99:
5a:57:8c:9b:63:58:73:c4:7b:93:74:66:ee:cb:d0:d2:79:a5:
77:c8:cf:e5:92:59:26:e4:03:b0:9b:9c:43:ab:f8:1f:6b:56:
61:9c:75:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:56:01 2026 by rpki-client