
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219427.roa
File: AS219427.roa (raw, json)
Hash identifier: /fHXvSYVy0otni9gFN8ye5m3iiblE0NEJtYiZLhr6ng=
Subject key identifier: 2C:93:EF:AD:29:8F:E8:04:C1:6A:1F:C0:07:F7:37:E0:D8:F7:7F:1E
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 32804A214874D9EB1F5ECF2C04F526C0B054FB78
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219427.roa
Signing time: Sat 29 Aug 2026 13:05:05 +0000
ROA not before: Sat 29 Aug 2026 13:00:05 +0000
ROA not after: Sat 28 Aug 2027 13:05:05 +0000
asID: 219427
IP address blocks: 104.234.1.0/24 maxlen: 24
104.234.123.0/24 maxlen: 24
104.234.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:80:4a:21:48:74:d9:eb:1f:5e:cf:2c:04:f5:26:c0:b0:54:fb:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Aug 29 13:00:05 2026 GMT
Not After : Aug 28 13:05:05 2027 GMT
Subject: CN=2C93EFAD298FE804C16A1FC007F737E0D8F77F1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a4:92:47:b5:17:5b:44:9c:de:fb:fe:c6:d9:
0b:f8:74:0e:ec:1e:ff:53:02:d4:d4:0a:f6:cd:bf:
44:af:cd:6b:69:a1:01:b0:f2:2f:59:9e:e1:ba:27:
23:5e:d4:db:be:d1:89:06:ab:78:75:75:aa:96:98:
59:4d:6c:55:17:16:cb:65:f5:6c:db:65:a9:d6:a0:
84:b7:41:7c:8a:49:2b:23:3f:db:51:71:56:07:84:
ac:d0:41:ef:61:d1:cc:76:56:b3:ef:36:ef:1c:ce:
3c:fc:dd:96:29:d1:70:d3:61:d1:16:5d:71:1d:b4:
61:7a:10:7a:ea:ff:be:ea:60:b9:83:83:0d:a9:83:
60:91:ac:6e:cc:19:ab:fa:20:a4:10:46:46:be:0a:
3e:17:04:a9:3e:0d:e6:9f:f8:3a:4c:7c:23:57:f3:
3b:be:ce:b0:85:8f:4b:2b:40:1a:01:c6:02:05:99:
f6:21:cd:00:07:6b:5d:be:93:88:3e:a5:2d:03:02:
ae:fc:30:f5:34:89:95:4a:78:d8:6a:0f:40:c1:14:
c5:a6:00:21:88:30:dc:42:be:9a:98:e5:ee:99:a4:
56:a4:a6:e4:27:38:4a:e3:f0:00:89:9d:fd:e7:8a:
0c:3a:46:2b:99:e1:8f:da:90:58:10:4b:e0:73:41:
65:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:93:EF:AD:29:8F:E8:04:C1:6A:1F:C0:07:F7:37:E0:D8:F7:7F:1E
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS219427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.1.0/24
104.234.123.0/24
104.234.157.0/24
Signature Algorithm: sha256WithRSAEncryption
57:b2:ec:b0:a7:a5:04:78:d2:da:42:3b:97:03:ae:dd:fd:cc:
99:ac:4c:5f:7f:77:65:2f:97:12:25:09:3e:1d:17:2c:0e:49:
78:b8:3b:02:b2:11:cb:19:72:e2:ab:74:31:2c:94:b4:af:3e:
57:ea:7c:20:b0:02:c5:b9:90:1f:02:c5:df:bb:0f:ca:6f:0d:
c8:53:2b:02:c4:6f:08:5a:7e:b5:4b:52:16:93:08:7d:06:d8:
97:8d:6c:93:e2:38:7a:50:40:71:ee:c2:c5:10:b3:ff:5c:1d:
a4:42:7f:ef:34:06:3b:be:94:56:0b:93:38:7c:e6:00:b3:5d:
a1:92:2e:62:6f:78:60:3f:08:b3:f6:6a:dc:f2:40:23:25:23:
ec:a4:dc:ab:22:7e:bf:3b:54:2e:48:75:10:29:29:28:ec:66:
46:44:25:78:47:45:42:23:23:ee:e0:5b:bb:82:dd:64:66:b5:
c4:44:ef:76:f2:f0:20:bb:ba:93:6c:05:75:65:f4:45:70:cd:
7f:55:11:cd:4d:41:5c:e9:73:75:83:1c:d6:a5:5d:61:be:6a:
fc:fa:92:36:24:09:a1:d6:15:e6:a5:c5:0e:a1:05:84:fe:84:
28:9a:e9:75:58:cd:67:f6:55:0c:19:a8:89:75:05:41:b9:b8:
32:8b:5c:cb
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUMoBKIUh02esfXs8sBPUmwLBU+3gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwODI5MTMwMDA1WhcNMjcwODI4MTMwNTA1
WjAzMTEwLwYDVQQDEygyQzkzRUZBRDI5OEZFODA0QzE2QTFGQzAwN0Y3MzdFMEQ4
Rjc3RjFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaSSR7UXW0Sc
3vv+xtkL+HQO7B7/UwLU1Ar2zb9Er81raaEBsPIvWZ7huicjXtTbvtGJBqt4dXWq
lphZTWxVFxbLZfVs22Wp1qCEt0F8ikkrIz/bUXFWB4Ss0EHvYdHMdlaz7zbvHM48
/N2WKdFw02HRFl1xHbRhehB66v++6mC5g4MNqYNgkaxuzBmr+iCkEEZGvgo+FwSp
Pg3mn/g6THwjV/M7vs6whY9LK0AaAcYCBZn2Ic0AB2tdvpOIPqUtAwKu/DD1NImV
SnjYag9AwRTFpgAhiDDcQr6amOXumaRWpKbkJzhK4/AAiZ3954oMOkYrmeGP2pBY
EEvgc0FlvwIDAQABo4ICizCCAocwHQYDVR0OBBYEFCyT760pj+gEwWofwAf3N+DY
938eMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzIxOTQyNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqAQMEAGjqewMEAGjqnTANBgkq
hkiG9w0BAQsFAAOCAQEAV7LssKelBHjS2kI7lwOu3f3MmaxMX393ZS+XEiUJPh0X
LA5JeLg7ArIRyxly4qt0MSyUtK8+V+p8ILACxbmQHwLF37sPym8NyFMrAsRvCFp+
tUtSFpMIfQbYl41sk+I4elBAce7CxRCz/1wdpEJ/7zQGO76UVguTOHzmALNdoZIu
Ym94YD8Is/Zq3PJAIyUj7KTcqyJ+vztULkh1ECkpKOxmRkQleEdFQiMj7uBbu4Ld
ZGa1xETvdvLwILu6k2wFdWX0RXDNf1URzU1BXOlzdYMc1qVdYb5q/PqSNiQJodYV
5qXFDqEFhP6EKJrpdVjNZ/ZVDBmoiXUFQbm4Motcyw==
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:37 2026 by rpki-client