
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398465.roa
File: AS398465.roa (raw, json)
Hash identifier: xgGy6iphM1lMKzejJN4LmKLsZ2Jl7GBKX7EYNh15xdk=
Subject key identifier: 3E:D9:90:67:6C:B1:40:83:28:8D:5E:C3:DC:D8:73:DE:77:4F:6E:D0
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 03FFB8FC53CF2487228D0DA249644E8048DDDF85
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398465.roa
Signing time: Wed 01 Apr 2026 10:03:10 +0000
ROA not before: Wed 01 Apr 2026 09:58:10 +0000
ROA not after: Wed 31 Mar 2027 10:03:10 +0000
asID: 398465
IP address blocks: 104.234.38.0/24 maxlen: 24
104.234.39.0/24 maxlen: 24
104.234.73.0/24 maxlen: 24
104.234.83.0/24 maxlen: 24
104.234.104.0/24 maxlen: 24
104.234.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Apr 2026 09:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ff:b8:fc:53:cf:24:87:22:8d:0d:a2:49:64:4e:80:48:dd:df:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Apr 1 09:58:10 2026 GMT
Not After : Mar 31 10:03:10 2027 GMT
Subject: CN=3ED990676CB14083288D5EC3DCD873DE774F6ED0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:66:4f:33:7a:37:91:57:fd:25:47:39:af:
a9:de:43:e1:35:df:6e:c4:fe:f0:87:52:4c:3f:f0:
a9:32:50:ab:e7:ea:51:82:76:9f:cd:05:8f:27:4f:
1c:49:6f:27:f9:16:a1:49:87:2a:27:a9:92:f9:fb:
5f:6e:a3:90:21:6b:0d:9d:90:4b:91:88:2b:07:36:
5b:1b:97:8e:da:5f:84:2f:be:25:37:0f:a1:8a:a8:
af:c3:59:d1:ac:24:02:1a:2a:d4:a7:20:7f:8e:b7:
c5:ad:18:35:cc:4a:58:63:d2:d7:fc:1c:fd:1d:b7:
da:9f:fe:b8:40:bd:24:12:22:a9:c6:31:c2:c7:dc:
27:a9:93:30:53:d7:97:ba:3e:a2:53:60:d4:6e:51:
80:c7:d8:2d:cc:52:ae:cb:05:b1:4e:26:20:2b:25:
b0:16:c0:19:22:bc:eb:61:50:d2:70:04:32:c7:a9:
d4:5d:f8:c1:d5:7d:29:0d:0f:9d:d7:45:83:50:96:
82:02:7f:b2:b8:92:49:6e:4c:51:bd:0a:fb:6e:8d:
57:d2:7b:0a:7d:ce:86:71:2f:85:3f:95:4e:ba:d2:
58:a1:d7:45:08:12:16:ef:16:90:c4:5a:4f:ec:66:
f1:cc:12:7c:58:87:c1:89:a6:81:a7:63:bf:ed:15:
f0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:90:67:6C:B1:40:83:28:8D:5E:C3:DC:D8:73:DE:77:4F:6E:D0
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.38.0/23
104.234.73.0/24
104.234.83.0/24
104.234.104.0/24
104.234.184.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:3e:ed:ed:9c:5e:38:cb:ef:09:fc:8d:87:6a:1c:d4:f5:82:
90:05:d0:87:e5:05:80:c2:c4:65:97:04:53:4c:27:b0:57:03:
b3:9d:a9:c8:c6:b3:c9:34:4a:3b:b9:93:4e:fd:bf:ec:4c:5a:
aa:cb:7e:67:88:c7:36:54:99:fc:2a:28:95:10:aa:a1:0a:65:
56:f9:fb:71:4e:93:69:c3:74:3e:e1:c3:3a:30:59:b5:af:f6:
5e:72:03:1f:e0:b0:8f:fb:26:fa:f8:cd:e6:7a:34:47:64:b0:
81:12:a7:79:b2:4b:b8:96:eb:76:8d:b7:0f:c1:48:79:70:73:
ba:3b:6e:1a:85:8c:ce:90:06:92:9e:ba:6c:4c:90:2b:02:75:
10:a2:be:80:6b:be:9d:59:3d:be:4f:39:33:bb:54:9c:df:93:
33:50:41:b5:72:d4:5b:c7:71:ae:a4:f9:4f:f9:a7:b7:7e:c7:
b6:5b:f8:b5:56:85:de:b5:5b:5d:1c:6f:83:07:f6:d3:d7:4f:
ab:11:17:16:86:a5:98:28:d3:5b:eb:6e:ab:e2:68:af:2d:fe:
34:cf:18:1a:f5:db:7c:d3:b4:e1:68:47:09:12:31:db:b9:7a:
8e:ad:a5:ee:eb:8c:5b:5e:63:71:a5:bf:8e:5b:8e:26:8e:c5:
de:d7:6b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:29:03 2026 by rpki-client