
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138719.roa
File: AS138719.roa (raw, json)
Hash identifier: x5NcyG+nBJXTbFUmvKia9a8bygKsewdhUUuf9Nd2LOI=
Subject key identifier: 14:3F:51:61:27:E9:F1:8A:8C:90:D1:52:6C:BA:7C:4A:09:16:EA:B6
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 2EDF6BF2706E506B9BD045C32505542A671AA536
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138719.roa
Signing time: Mon 27 Jul 2026 07:29:49 +0000
ROA not before: Mon 27 Jul 2026 07:24:49 +0000
ROA not after: Mon 26 Jul 2027 07:29:49 +0000
asID: 138719
IP address blocks: 23.226.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 08:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:df:6b:f2:70:6e:50:6b:9b:d0:45:c3:25:05:54:2a:67:1a:a5:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jul 27 07:24:49 2026 GMT
Not After : Jul 26 07:29:49 2027 GMT
Subject: CN=143F516127E9F18A8C90D1526CBA7C4A0916EAB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:61:db:09:55:8d:a3:14:51:50:d2:c5:f8:
1a:3b:6b:f9:bb:9e:37:b3:2a:a4:51:4a:19:12:2b:
ed:76:7e:9b:8b:2a:2e:0d:b7:82:d0:10:de:81:df:
5d:87:68:1b:85:f1:96:a7:7d:c3:71:bd:dc:8c:d7:
1f:00:8a:a5:38:62:c7:f4:f0:62:2d:b9:3c:1c:59:
cf:02:59:e9:97:fd:98:ad:1c:ed:04:6d:00:1c:96:
bd:dc:a4:fe:f7:6d:2e:6d:2e:6c:2d:e9:3d:2a:72:
16:d1:42:9a:00:7a:2c:64:24:9d:e6:56:bd:96:13:
8e:0f:6f:1c:ab:f4:d6:e6:ea:76:0c:15:85:e0:20:
b6:77:50:db:5c:03:97:d4:6d:15:50:20:8c:3b:72:
84:38:d7:b2:25:27:94:9d:a6:2c:b3:09:a5:0a:c3:
95:01:93:6e:d5:b1:2d:b4:8a:6d:86:ee:d4:66:1d:
c8:12:c1:25:25:1b:10:7b:bb:23:a5:8f:25:bd:79:
81:21:5d:5a:f7:13:92:6b:d1:11:66:e8:0c:00:e9:
6e:4f:0f:33:a3:05:23:cf:5b:9e:f0:0f:78:cc:f8:
4e:ee:7c:b3:27:f7:a2:6f:4f:51:e7:16:18:eb:b5:
92:77:48:23:2f:ee:62:b1:2b:4c:8f:39:0f:d2:90:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3F:51:61:27:E9:F1:8A:8C:90:D1:52:6C:BA:7C:4A:09:16:EA:B6
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138719.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.226.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fa:da:57:0c:8e:fb:df:41:06:7d:56:f7:0c:51:0d:57:8d:
77:9e:d2:c2:c0:3c:e6:59:e1:df:42:7c:07:4f:1c:d0:df:92:
a4:61:48:41:a1:bc:94:37:ad:b4:fa:8c:61:91:ef:9e:bb:38:
ff:ce:5a:75:f9:7a:0d:6b:dd:7c:35:67:cd:79:e7:dc:6c:6f:
5e:5b:d1:d8:c2:9c:7e:45:32:92:13:db:09:05:9b:25:91:14:
74:2b:d2:3b:09:d4:be:38:d5:f5:14:e2:fc:33:0f:5c:65:08:
bc:a8:4e:3d:93:c4:02:d3:93:eb:a2:04:1c:6c:1b:f1:68:f6:
d6:2e:91:5a:dd:5f:61:6e:90:23:09:4e:86:84:86:15:ca:ed:
f5:df:0a:c0:51:78:19:46:0f:5c:a9:83:68:29:ce:73:97:9e:
f7:28:4e:0a:1d:d8:fd:16:c5:3a:f4:e4:d6:a3:de:a6:c4:a1:
db:3a:3a:30:2e:e7:9c:00:81:c1:17:c1:bd:1a:83:d1:40:d6:
4e:3a:94:e9:eb:47:d9:e7:cc:69:31:27:96:f0:4d:86:73:4c:
db:3a:41:a2:c1:00:4a:14:2e:c9:ec:32:ec:d6:f8:3c:bf:5d:
d8:51:89:62:a1:fd:ea:af:73:50:e7:5e:9b:76:4b:31:27:a1:
46:2a:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:58:29 2026 by rpki-client