
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197256.roa
File: AS197256.roa (raw, json)
Hash identifier: zijQ9x7m5ePPmggNmre97v19au0P+mSKcmgCRmx5sSA=
Subject key identifier: F1:3B:E9:83:A7:51:A6:13:78:8A:AC:72:20:61:ED:7E:61:5E:45:CA
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 3DF3B70A1A1BBF0C437589D3812FAC1F37EA9ADE
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197256.roa
Signing time: Sat 22 Aug 2026 17:34:20 +0000
ROA not before: Sat 22 Aug 2026 17:29:20 +0000
ROA not after: Sat 21 Aug 2027 17:34:20 +0000
asID: 197256
IP address blocks: 104.234.29.0/24 maxlen: 24
104.234.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f3:b7:0a:1a:1b:bf:0c:43:75:89:d3:81:2f:ac:1f:37:ea:9a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 22 17:29:20 2026 GMT
Not After : Aug 21 17:34:20 2027 GMT
Subject: CN=F13BE983A751A613788AAC722061ED7E615E45CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a7:aa:02:70:84:78:25:f9:27:24:c3:af:b5:
90:e6:f4:6b:55:c2:aa:97:c2:ff:50:a3:cf:36:cd:
dc:70:1d:ff:62:79:2b:38:5b:d6:0f:6b:2a:cd:1f:
f4:d8:a2:50:58:f1:91:03:c5:bb:7e:8a:d3:80:4d:
ee:08:61:58:f6:96:51:ec:44:65:d9:61:23:65:d1:
5d:2a:e1:e6:9c:52:5a:db:73:c2:15:5d:ba:d9:b2:
fe:45:61:a7:f4:90:a8:15:1e:fd:67:62:02:49:42:
5e:fe:f1:fa:d7:95:89:27:3a:b7:89:42:f3:70:e7:
a3:94:96:2d:c6:79:4c:5f:ef:55:42:02:2d:eb:ba:
8d:40:06:ae:9f:ad:58:5d:18:be:1e:2d:eb:c3:0e:
5f:ee:8b:4f:2c:e4:2c:95:1c:af:2a:d6:c3:6f:7f:
a2:a5:03:4f:a8:91:61:54:69:51:52:b9:56:80:ef:
73:e3:30:57:c0:3e:89:37:82:8a:66:f7:8e:c9:ba:
66:c1:bf:28:ec:fc:69:fa:ee:25:4a:e3:aa:79:0d:
fb:4d:10:2e:c7:4b:fe:fb:ae:ee:5a:4a:a0:82:0a:
3b:d2:5b:09:fa:a5:ab:88:26:5d:32:de:9b:c2:21:
41:89:d4:31:28:9d:f0:3a:1d:40:0f:db:67:eb:1c:
9e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:E9:83:A7:51:A6:13:78:8A:AC:72:20:61:ED:7E:61:5E:45:CA
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS197256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.29.0/24
104.234.58.0/24
Signature Algorithm: sha256WithRSAEncryption
51:48:e1:99:6d:b0:96:b4:91:70:81:db:83:47:bb:88:80:f5:
58:ac:bd:74:e1:14:ac:a3:c0:19:11:55:8f:ba:8b:f2:24:58:
69:f8:9e:cf:fa:ad:3d:89:89:d1:39:86:51:a2:f8:36:79:c1:
7a:f8:5e:1f:1f:9d:b0:98:6e:ed:84:3a:4a:b9:0f:21:28:3a:
c6:2b:5d:5f:ba:36:a5:a9:3a:74:bf:cb:df:3d:9c:c4:71:a5:
a3:36:50:e8:69:e8:0c:0f:ee:3e:15:eb:8c:6e:6b:f5:81:32:
29:04:e2:14:d7:d7:7a:dd:37:7c:1b:25:57:24:af:42:09:74:
4e:60:9f:72:92:84:ef:0a:62:71:d2:fd:49:f0:b5:34:c3:83:
e7:42:1e:25:ac:c9:47:b8:f5:59:51:25:26:3a:f0:97:ba:37:
4a:d5:5d:55:58:54:25:e9:b9:c9:16:c9:b3:19:8b:40:30:b9:
c5:7d:59:36:f6:a4:fe:2e:aa:4d:04:96:a0:bf:05:db:8e:23:
10:cc:dd:1d:74:48:f0:60:98:e8:ce:df:e2:15:ed:01:71:dd:
79:92:8c:1f:e9:81:50:8e:bd:82:ba:4d:29:01:c1:4c:97:98:
18:ae:9d:1c:77:b0:6d:d2:d9:10:c8:8d:fc:90:73:fc:dc:65:
f6:95:e6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:38 2026 by rpki-client