
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395886.roa
File: AS395886.roa (raw, json)
Hash identifier: JWb3QJDgn3mbyf1s4HnGQ5yTMZyXgpgUA6uj+1dEHk4=
Subject key identifier: 0D:D1:80:FC:65:11:63:91:14:A7:C9:41:C8:EC:46:AC:47:21:97:7D
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 334B1DC2E3C923C1625D5C4FFF8DD28F0151DE3D
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395886.roa
Signing time: Tue 07 Jul 2026 05:35:47 +0000
ROA not before: Tue 07 Jul 2026 05:30:47 +0000
ROA not after: Tue 06 Jul 2027 05:35:47 +0000
asID: 395886
IP address blocks: 104.234.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 11:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:4b:1d:c2:e3:c9:23:c1:62:5d:5c:4f:ff:8d:d2:8f:01:51:de:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 7 05:30:47 2026 GMT
Not After : Jul 6 05:35:47 2027 GMT
Subject: CN=0DD180FC6511639114A7C941C8EC46AC4721977D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1d:d7:73:f0:52:8b:68:ea:21:9c:b7:e8:44:
09:65:4f:73:15:af:1e:3c:bd:56:09:ff:da:44:96:
1d:87:2d:43:d1:e1:25:c1:8c:2c:4b:c4:e9:ac:f8:
f6:51:b4:a3:1f:95:be:d9:a4:ab:31:1d:e9:0b:a3:
4f:43:84:d0:df:f2:7b:ba:73:02:f7:bd:55:d4:c0:
1d:0f:85:13:c5:dd:08:a4:9a:51:7a:86:fe:96:7b:
b1:20:07:f6:a5:28:d0:00:d2:12:ce:27:98:a3:e6:
17:df:7d:c2:6a:96:d6:cc:60:ab:b3:48:c8:f3:e8:
35:1b:03:37:60:e7:c0:8b:27:10:8f:bd:d3:41:72:
4f:04:fb:97:3e:1e:7c:c4:9c:cc:2c:3e:31:be:84:
06:cf:11:72:dd:cf:34:8e:4b:52:1f:c6:c0:d9:49:
fd:f5:6b:74:40:88:50:ca:92:15:dd:7a:d9:3a:4c:
ec:50:01:5d:ad:c2:32:15:80:15:45:e0:3e:21:ff:
64:3d:0f:f8:16:89:5c:87:fd:0b:3b:fa:ba:31:9a:
85:77:2f:81:d9:c2:b8:fc:d4:47:a6:e1:53:3b:2f:
87:df:05:54:83:56:d7:03:43:b7:25:40:2a:0c:61:
25:43:37:21:66:7b:ab:49:94:33:31:d8:66:a8:a7:
ce:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D1:80:FC:65:11:63:91:14:A7:C9:41:C8:EC:46:AC:47:21:97:7D
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.172.0/24
Signature Algorithm: sha256WithRSAEncryption
44:6a:b2:c0:f6:b2:c3:0b:3a:be:0a:ef:4c:5c:2d:fa:49:ad:
02:14:9d:0b:bc:44:56:ec:b0:bc:b1:fd:9a:0d:fe:72:f5:0c:
a8:2f:55:b1:34:fa:82:9f:e8:72:6c:2d:64:56:59:17:2f:68:
22:4d:e6:64:21:bd:66:0a:91:c8:ca:89:25:fd:2b:cc:7b:44:
4b:c0:7d:f9:46:94:97:8f:19:a0:eb:4a:06:02:13:af:f2:12:
74:49:b3:cb:15:fb:46:89:9f:28:14:69:b5:11:6a:e7:fa:d6:
dd:7d:fc:31:7e:9c:f9:bd:86:a0:be:28:b9:eb:e4:00:c8:ad:
0e:3c:e7:69:a8:e6:02:7b:b0:fb:28:fb:24:6b:bd:10:66:aa:
19:29:b5:bc:86:d9:cc:09:97:3c:bf:f0:a7:15:f8:06:5f:f5:
26:69:a2:19:3c:5b:91:d2:c0:9d:3c:cf:7a:78:64:1c:ab:ff:
de:81:cf:f4:a3:9a:8d:e7:1f:39:93:bc:48:ba:34:cc:f6:fa:
83:63:bc:a7:f0:28:6c:17:f9:69:95:12:bc:64:ca:5a:0c:9c:
4c:82:9a:81:62:9c:e8:35:d7:dd:ca:d0:0e:d4:cd:dc:82:88:
20:d7:1d:95:61:6b:7e:19:c4:b9:f8:2a:12:74:4c:88:b0:b7:
7d:e1:1b:d3
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUM0sdwuPJI8FiXVxP/43SjwFR3j0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNzA3MDUzMDQ3WhcNMjcwNzA2MDUzNTQ3
WjAzMTEwLwYDVQQDEygwREQxODBGQzY1MTE2MzkxMTRBN0M5NDFDOEVDNDZBQzQ3
MjE5NzdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyx3Xc/BSi2jq
IZy36EQJZU9zFa8ePL1WCf/aRJYdhy1D0eElwYwsS8TprPj2UbSjH5W+2aSrMR3p
C6NPQ4TQ3/J7unMC971V1MAdD4UTxd0IpJpReob+lnuxIAf2pSjQANISzieYo+YX
333CapbWzGCrs0jI8+g1GwM3YOfAiycQj73TQXJPBPuXPh58xJzMLD4xvoQGzxFy
3c80jktSH8bA2Un99Wt0QIhQypIV3XrZOkzsUAFdrcIyFYAVReA+If9kPQ/4Folc
h/0LO/q6MZqFdy+B2cK4/NRHpuFTOy+H3wVUg1bXA0O3JUAqDGElQzchZnurSZQz
MdhmqKfOWwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA3RgPxlEWORFKfJQcjsRqxH
IZd9MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzM5NTg4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqrDANBgkqhkiG9w0BAQsFAAOC
AQEARGqywPaywws6vgrvTFwt+kmtAhSdC7xEVuywvLH9mg3+cvUMqC9VsTT6gp/o
cmwtZFZZFy9oIk3mZCG9ZgqRyMqJJf0rzHtES8B9+UaUl48ZoOtKBgITr/ISdEmz
yxX7RomfKBRptRFq5/rW3X38MX6c+b2GoL4ouevkAMitDjznaajmAnuw+yj7JGu9
EGaqGSm1vIbZzAmXPL/wpxX4Bl/1JmmiGTxbkdLAnTzPenhkHKv/3oHP9KOajecf
OZO8SLo0zPb6g2O8p/AobBf5aZUSvGTKWgycTIKagWKc6DXX3crQDtTN3IKIINcd
lWFrfhnEufgqEnRMiLC3feEb0w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 09:47:07 2026 by rpki-client