
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
File: AS174.roa (raw, json)
Hash identifier: 8zDOZ+D7ZSfwlSa86vlBW1DjJ95Zdf9pR//uW15rhZ0=
Subject key identifier: 03:46:68:F4:20:63:32:39:29:1D:F6:F8:53:EA:6A:78:09:64:C5:5C
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 6207052C4EAE76C2A2883A1E39873868FBB1484A
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
Signing time: Wed 28 Jan 2026 13:33:42 +0000
ROA not before: Wed 28 Jan 2026 13:28:42 +0000
ROA not after: Wed 27 Jan 2027 13:33:42 +0000
asID: 174
IP address blocks: 104.234.12.0/24 maxlen: 24
104.234.247.0/24 maxlen: 24
206.53.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 18:43:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:07:05:2c:4e:ae:76:c2:a2:88:3a:1e:39:87:38:68:fb:b1:48:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jan 28 13:28:42 2026 GMT
Not After : Jan 27 13:33:42 2027 GMT
Subject: CN=034668F420633239291DF6F853EA6A780964C55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:2b:6c:93:05:20:56:4a:a5:61:da:20:6e:
55:2c:17:b9:31:76:62:5a:ac:56:40:6b:16:8e:3e:
aa:18:05:9f:95:f1:c1:fb:c8:a5:bf:43:f8:84:75:
75:37:03:9c:55:cb:fe:02:b3:24:84:12:87:9e:51:
f6:79:cf:de:13:77:f1:ee:99:9f:09:86:cc:a5:64:
ea:54:98:80:26:4b:25:6c:e4:f1:b7:1b:be:6c:6f:
a2:48:09:c0:7c:3f:76:18:3a:2c:3f:25:6f:93:ac:
8c:92:00:6c:37:51:da:42:1b:8c:f3:f6:3c:0b:1e:
f6:f7:6d:17:b2:4f:b5:43:31:5d:be:d2:bd:9a:d4:
1d:bc:ba:18:ab:7e:d3:a0:49:85:32:ee:f0:77:a3:
3c:68:77:78:39:b1:ab:5a:e3:84:cf:09:d2:c3:7b:
72:74:cf:3b:bf:a5:23:66:88:9f:a5:f1:10:dc:97:
02:42:f6:b1:21:4f:0f:12:99:7c:77:ba:97:60:18:
9f:12:8a:cc:92:ba:62:31:b1:7f:8c:df:a2:82:99:
c7:c8:b9:5d:f0:bc:3b:58:5c:8d:f5:bb:49:68:a2:
96:49:82:0b:6c:56:e8:76:41:ee:04:90:1d:84:14:
e3:a2:80:1b:aa:1f:ce:c1:80:d6:0f:ce:98:72:20:
fe:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:68:F4:20:63:32:39:29:1D:F6:F8:53:EA:6A:78:09:64:C5:5C
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS174.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.12.0/24
104.234.247.0/24
206.53.58.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:08:f9:01:5b:0e:27:4c:3b:e7:b3:47:df:73:e2:a2:6c:f5:
13:ce:dc:0b:e7:71:ff:c5:2a:97:db:9b:ee:2f:f5:c9:80:d2:
a3:dc:12:70:c6:35:a6:df:07:84:3b:a8:27:30:89:f3:19:db:
d1:30:67:f2:f1:ba:b8:f6:e6:69:a4:fa:26:a8:cb:57:e2:87:
db:ba:b0:1a:81:b4:28:10:de:da:fa:54:f9:a1:0b:0b:13:82:
d5:f7:eb:cf:32:ea:b7:5f:73:82:ae:cb:02:ae:65:4e:73:a3:
77:14:c8:32:ab:56:65:49:10:04:60:10:97:37:8f:a3:93:a7:
50:01:e3:a6:dc:9b:47:13:8d:e5:6b:86:d2:0e:1f:2b:a9:88:
4b:d2:9d:b5:7e:7a:69:69:aa:ea:01:65:46:02:d8:3d:7d:9e:
85:96:f7:a2:23:e2:91:ce:7b:40:34:6f:bb:10:3e:0d:5a:a2:
41:00:92:db:58:ea:96:6c:5f:f9:2c:19:e3:54:59:f3:dc:68:
f0:c3:1c:f0:46:d3:a3:68:cf:6b:d1:99:5e:dd:a7:92:2f:17:
47:b1:be:a2:45:0d:77:6e:2d:df:02:c9:2d:e5:fe:e3:6a:1c:
cc:82:4f:3f:66:4b:2e:2a:29:4f:60:9b:de:97:16:90:4c:d6:
0c:6a:60:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:24:54 2026 by rpki-client