
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
File: AS19437.roa (raw, json)
Hash identifier: PZXbtRWCUKu5XK8IZFTz2KiTWjvCFk8GuYG8QvkiZaE=
Subject key identifier: 10:13:43:03:7C:28:CD:DB:57:3D:C8:B2:65:59:02:9B:70:1A:54:F0
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 1A37A69F6040722602225056C3FCC78D8C610A67
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
Signing time: Thu 03 Sep 2026 00:36:20 +0000
ROA not before: Thu 03 Sep 2026 00:31:20 +0000
ROA not after: Thu 02 Sep 2027 00:36:20 +0000
asID: 19437
IP address blocks: 104.234.162.0/24 maxlen: 24
104.234.166.0/24 maxlen: 24
104.234.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 11:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:37:a6:9f:60:40:72:26:02:22:50:56:c3:fc:c7:8d:8c:61:0a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Sep 3 00:31:20 2026 GMT
Not After : Sep 2 00:36:20 2027 GMT
Subject: CN=101343037C28CDDB573DC8B26559029B701A54F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:74:c7:fb:53:f9:bc:58:2d:c0:dd:c4:0a:4a:
53:41:e4:b5:7f:d6:66:a7:1b:c1:5f:b1:d3:2c:d2:
28:78:58:fa:a5:fe:6f:94:97:5d:ca:ba:4a:a1:af:
f8:a5:a7:1e:9d:5e:15:af:db:dc:e3:e8:19:76:35:
8f:d7:2d:b5:ff:61:49:28:aa:a5:b3:5d:1a:54:8a:
26:87:d9:be:1d:b9:74:1d:03:bc:f9:9b:e7:c8:eb:
db:7a:96:2c:d0:f3:76:b8:d1:54:d5:03:9b:2c:46:
00:bc:32:57:9c:01:eb:61:4e:62:c7:0f:da:e0:57:
2b:80:ae:6f:b0:59:85:3b:a8:1d:65:f9:d8:48:12:
92:ee:c4:13:b5:14:13:ca:31:0e:a6:2b:0a:74:6c:
c4:cb:12:30:08:89:ea:3b:28:42:36:07:3b:aa:a6:
68:3c:6d:53:a9:0e:5f:8e:ed:f5:16:c2:f1:53:d3:
b0:ae:90:68:37:42:5a:ec:13:10:95:40:c0:5e:ec:
17:65:2f:aa:18:bb:be:b0:e1:31:c1:23:0e:bb:1a:
82:fb:ec:1f:25:f9:0e:e4:ca:22:45:0e:dc:5b:5c:
8c:32:4e:40:b8:2f:21:3f:2f:ac:6d:f2:e1:dd:49:
93:e7:a0:37:20:6a:89:5e:e2:84:f0:fa:58:a1:d1:
bc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:13:43:03:7C:28:CD:DB:57:3D:C8:B2:65:59:02:9B:70:1A:54:F0
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.162.0/24
104.234.166.0/24
104.234.213.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:e3:e1:77:fe:3a:b2:0a:2b:a0:45:ac:fb:fe:65:32:73:4d:
bf:94:b0:b5:67:f5:e6:86:be:bd:06:dc:b4:07:a1:f3:7c:7a:
86:b6:e0:a1:6a:ac:9a:4d:53:92:8e:9a:ac:4f:87:c3:0b:e6:
92:42:17:3c:01:62:56:a7:8d:c3:d2:71:01:91:00:54:ae:7e:
c4:72:67:8d:f9:b0:00:bf:54:fd:94:c2:3d:83:f7:91:22:de:
0e:7b:24:f8:c1:2b:b4:57:5c:96:18:8c:c5:c7:a2:e0:81:eb:
a7:fc:d5:da:f0:ae:b8:cf:d5:8d:43:51:fe:ff:80:bc:27:ae:
1f:d3:67:6b:c4:7a:74:ca:67:5c:f6:3c:20:1b:33:88:ee:58:
a3:bf:ce:bd:cd:d6:1e:9e:70:b6:6f:b4:19:89:9c:34:8b:14:
6d:ba:36:f9:35:93:02:bc:0d:3f:5a:30:be:5b:90:d8:48:57:
64:d5:43:e8:0a:1b:71:db:2c:01:37:e4:97:df:3c:ed:8a:9a:
33:33:d8:af:06:d3:f9:26:7f:57:14:8f:02:0d:93:34:d6:70:
e5:ed:41:ed:87:58:fa:27:fa:91:d4:81:32:f4:82:d3:8f:5e:
ed:41:10:0e:55:4a:45:1e:ab:72:1e:74:07:c7:3b:e4:21:d5:
50:09:21:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:42:59 2026 by rpki-client