
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395470.roa
File: AS395470.roa (raw, json)
Hash identifier: EheTW+JbypyHTEK66FESsMcVUxFMj68StikG66w7zbw=
Subject key identifier: 8D:00:F1:6F:C8:78:06:2F:70:CE:61:9B:CD:BA:25:5A:40:44:0E:AE
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 562452C70DE76BA9488BE18F45E26ED3D9C70EC5
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395470.roa
Signing time: Fri 17 Apr 2026 08:48:38 +0000
ROA not before: Fri 17 Apr 2026 08:43:38 +0000
ROA not after: Fri 16 Apr 2027 08:48:38 +0000
asID: 395470
IP address blocks: 104.234.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 09:33:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:24:52:c7:0d:e7:6b:a9:48:8b:e1:8f:45:e2:6e:d3:d9:c7:0e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 17 08:43:38 2026 GMT
Not After : Apr 16 08:48:38 2027 GMT
Subject: CN=8D00F16FC878062F70CE619BCDBA255A40440EAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:06:e7:dc:44:44:56:4d:f2:14:4f:74:2d:70:
1f:85:63:b9:dc:2e:c9:7b:cc:23:b0:cc:c3:86:df:
1e:e7:0e:c3:a7:90:f1:5e:12:76:24:e3:75:93:88:
59:e0:7e:ed:e8:c0:0f:36:6e:20:41:44:21:4f:94:
78:d4:ce:ab:aa:be:f3:15:6e:e3:2c:f4:7a:68:a1:
1d:66:dd:41:15:7a:6f:2b:31:1f:7b:be:19:3e:f1:
9a:ea:6e:0e:ac:20:d4:d4:b2:8d:8a:57:13:f3:f4:
e2:59:84:27:c6:65:a7:42:1c:4c:46:4a:a5:14:0f:
84:ac:02:d9:bc:ba:83:49:54:a9:d8:b7:cd:5d:2a:
0b:de:59:c1:9e:41:74:26:6b:73:94:6a:e7:c4:2c:
c6:f9:18:62:4c:82:4a:2f:16:79:16:03:3e:54:4b:
7d:19:bb:2c:54:6d:bd:c9:20:3a:ed:f0:48:d8:f6:
fb:33:1f:e3:4c:39:ae:1c:7b:2c:45:3b:c2:c5:01:
53:19:3e:38:83:a1:da:25:6a:cc:2f:07:d0:53:2b:
86:e1:b5:c0:a1:5d:79:01:7e:d8:2d:9c:62:0d:a7:
f8:ff:00:6d:a2:c8:1d:24:92:a5:be:df:cd:26:ae:
8a:08:9a:c0:f5:dd:fd:b3:96:66:49:b5:65:a2:a1:
19:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:00:F1:6F:C8:78:06:2F:70:CE:61:9B:CD:BA:25:5A:40:44:0E:AE
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.71.0/24
Signature Algorithm: sha256WithRSAEncryption
92:30:f1:c3:b1:75:ca:0a:bb:db:85:aa:49:a1:c7:26:c5:ca:
bf:4c:a4:7b:e7:bb:74:50:6e:1b:02:46:43:c2:b3:11:10:7b:
61:20:f3:ec:4f:e3:b9:c7:81:0a:5e:91:b0:23:ce:90:10:1d:
d3:9a:a9:8a:0f:7a:4a:62:2d:1c:36:4b:09:88:8e:1a:c9:55:
f3:50:b8:b9:37:58:8d:65:3d:39:78:98:40:03:42:d8:a6:87:
fb:df:ef:c3:2c:5e:90:91:d4:83:5d:08:46:a6:b5:d1:a8:75:
3a:cc:71:85:4d:f9:ba:c8:a7:04:04:d1:75:21:5c:49:7b:2a:
fe:2c:f1:6e:b1:6f:8a:08:17:92:86:d6:2b:e0:13:7a:22:52:
2f:a9:b6:bf:d7:81:9c:73:7f:0c:6e:fe:99:ff:a2:df:9f:0f:
4d:e0:50:2f:06:21:72:b4:dd:23:90:de:18:21:0c:fc:43:f1:
0f:37:4e:38:cf:50:d8:23:de:bf:5c:b0:42:ce:78:c0:90:08:
4d:18:03:3b:fe:04:08:aa:ba:4f:b1:c4:74:17:a5:42:4b:a6:
21:41:4e:6b:e4:0a:28:ef:ac:d9:7f:81:4b:2d:6b:fc:2a:55:
51:6f:0f:26:12:b2:d7:82:a5:6f:f1:c2:39:66:d6:47:ab:ac:
46:17:a7:86
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUViRSxw3na6lIi+GPReJu09nHDsUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDE3MDg0MzM4WhcNMjcwNDE2MDg0ODM4
WjAzMTEwLwYDVQQDEyg4RDAwRjE2RkM4NzgwNjJGNzBDRTYxOUJDREJBMjU1QTQw
NDQwRUFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wbn3EREVk3y
FE90LXAfhWO53C7Je8wjsMzDht8e5w7Dp5DxXhJ2JON1k4hZ4H7t6MAPNm4gQUQh
T5R41M6rqr7zFW7jLPR6aKEdZt1BFXpvKzEfe74ZPvGa6m4OrCDU1LKNilcT8/Ti
WYQnxmWnQhxMRkqlFA+ErALZvLqDSVSp2LfNXSoL3lnBnkF0JmtzlGrnxCzG+Rhi
TIJKLxZ5FgM+VEt9GbssVG29ySA67fBI2Pb7Mx/jTDmuHHssRTvCxQFTGT44g6Ha
JWrMLwfQUyuG4bXAoV15AX7YLZxiDaf4/wBtosgdJJKlvt/NJq6KCJrA9d39s5Zm
SbVloqEZlQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFI0A8W/IeAYvcM5hm826JVpA
RA6uMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5NTQ3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqRzANBgkqhkiG9w0BAQsFAAOC
AQEAkjDxw7F1ygq724WqSaHHJsXKv0yke+e7dFBuGwJGQ8KzERB7YSDz7E/juceB
Cl6RsCPOkBAd05qpig96SmItHDZLCYiOGslV81C4uTdYjWU9OXiYQANC2KaH+9/v
wyxekJHUg10IRqa10ah1OsxxhU35usinBATRdSFcSXsq/izxbrFviggXkobWK+AT
eiJSL6m2v9eBnHN/DG7+mf+i358PTeBQLwYhcrTdI5DeGCEM/EPxDzdOOM9Q2CPe
v1ywQs54wJAITRgDO/4ECKq6T7HEdBelQkumIUFOa+QKKO+s2X+BSy1r/CpVUW8P
JhKy14Klb/HCOWbWR6usRhenhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:28 2026 by rpki-client