
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa
File: AS212609.roa (raw, json)
Hash identifier: MVEVMxNuQIkoDRIr9OUbq7EcTRRljdIqhHwhuoKCoJs=
Subject key identifier: CD:65:35:BB:45:7B:7B:75:F0:AF:86:89:7E:26:B4:8B:1A:07:C4:EA
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 5E8DC5350A429536B01D388E6CF18BE584278E9A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa
Signing time: Fri 10 Jul 2026 12:06:48 +0000
ROA not before: Fri 10 Jul 2026 12:01:48 +0000
ROA not after: Fri 09 Jul 2027 12:06:48 +0000
asID: 212609
IP address blocks: 23.95.131.0/24 maxlen: 24
64.188.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 12:58:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:8d:c5:35:0a:42:95:36:b0:1d:38:8e:6c:f1:8b:e5:84:27:8e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jul 10 12:01:48 2026 GMT
Not After : Jul 9 12:06:48 2027 GMT
Subject: CN=CD6535BB457B7B75F0AF86897E26B48B1A07C4EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:95:d2:dc:6a:77:f3:a8:d8:13:72:61:30:
94:5b:bf:65:4d:9f:01:bf:4a:54:47:81:e9:bc:d7:
f3:b5:e0:a7:a7:0c:ab:eb:17:13:7f:f8:85:04:16:
a7:42:5a:99:b9:74:ba:d1:e7:5b:26:98:9b:04:86:
0e:ef:36:7f:d9:e3:78:d9:09:22:bf:e9:5e:ae:36:
e6:49:85:86:e4:c2:68:13:3c:63:7c:15:aa:1b:18:
a3:17:f1:22:61:86:77:6b:d9:d8:41:3b:5c:17:56:
80:a0:1c:5d:34:c3:a1:7f:04:92:05:d2:b0:2a:d9:
ae:fb:bf:01:04:08:ce:67:30:19:33:e6:94:b7:c9:
a9:52:01:d5:0c:b4:4f:25:74:5e:50:77:33:d2:10:
dc:18:67:97:16:d1:e4:65:67:b3:30:bb:bc:98:99:
0e:45:00:5f:56:df:3c:93:63:d2:38:f8:7d:4a:2e:
67:a4:34:5d:b9:63:c4:82:5b:ea:a2:dd:a5:13:b1:
00:89:dc:9f:a8:c5:02:e0:a4:93:f4:96:7f:94:5e:
2e:c8:05:99:f1:ce:95:0a:9a:02:d8:63:20:f8:b0:
a8:4e:65:2e:ad:dd:8e:da:fb:c3:f0:ea:78:52:fa:
b9:8e:ad:67:29:28:c3:c0:68:81:7a:c4:f2:1b:ae:
69:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:35:BB:45:7B:7B:75:F0:AF:86:89:7E:26:B4:8B:1A:07:C4:EA
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.95.131.0/24
64.188.21.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:41:0d:c4:0f:d2:da:74:6b:38:7d:cd:eb:20:95:a0:0d:c0:
5d:04:a1:08:d8:f4:c5:5f:c1:65:88:e0:83:7d:33:49:2d:2d:
99:64:2c:2a:86:10:6d:28:4a:4c:40:32:c5:d9:de:1c:9d:f2:
5f:21:40:c7:16:81:8e:40:a2:40:bf:aa:73:25:66:17:df:40:
03:41:0c:47:72:65:be:70:0b:c8:62:cb:24:f7:e6:4b:e3:6e:
43:b1:37:85:af:67:30:6b:76:1c:15:19:91:3e:01:42:60:9f:
21:28:92:5e:85:58:9e:8a:f5:c5:9b:93:93:41:03:f7:c5:c2:
81:dc:64:07:35:b7:19:be:1c:a1:a5:f2:1f:89:4d:7b:a1:7a:
3e:cc:62:ad:87:6c:14:71:1b:4e:b5:53:39:d1:5c:61:89:67:
5a:e0:dd:a5:3f:14:a4:c8:ac:b2:45:9c:a5:e5:e1:87:1e:80:
03:da:a2:e2:54:d0:5a:a2:d1:ba:47:76:3c:bd:6c:cb:b0:a2:
66:cf:2c:d3:65:58:49:9b:87:82:dc:a6:52:bb:49:d5:ab:01:
ba:fd:f9:71:6f:57:ad:fd:9b:e8:d7:5f:e5:77:61:4c:3e:ae:
37:6e:74:41:0f:64:a6:6f:aa:64:0d:79:e6:53:77:48:3b:d3:
f8:bb:65:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 14:03:44 2026 by rpki-client