
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
File: AS215672.roa (raw, json)
Hash identifier: hVP63N0dAXc3XFNLXuDbeWZzcfniX0JAFNaSwCgwmqU=
Subject key identifier: 27:04:C5:8C:10:2C:EB:DA:2C:BD:8A:17:57:23:C4:6D:CD:D2:A5:DC
Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial: 1DEE8118A25A0C379430DB19CACDFB026DC70A
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
Signing time: Tue 29 Jul 2025 11:41:35 +0000
ROA not before: Tue 29 Jul 2025 11:36:35 +0000
ROA not after: Tue 28 Jul 2026 11:41:35 +0000
asID: 215672
IP address blocks: 23.94.129.0/24 maxlen: 24
74.50.4.0/24 maxlen: 24
162.213.0.0/24 maxlen: 24
209.200.228.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ee:81:18:a2:5a:0c:37:94:30:db:19:ca:cd:fb:02:6d:c7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Validity
Not Before: Jul 29 11:36:35 2025 GMT
Not After : Jul 28 11:41:35 2026 GMT
Subject: CN=2704C58C102CEBDA2CBD8A175723C46DCDD2A5DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:02:11:7f:d6:a4:fb:7a:7c:b6:cf:8e:c8:d8:
32:a9:f7:51:e5:ee:b1:c4:05:8e:5d:57:69:de:ea:
74:6c:fb:78:00:d8:3a:34:2c:15:7b:45:54:cb:53:
b2:8f:f9:41:be:f2:b0:1b:45:15:46:3f:5e:04:fd:
96:d4:91:45:3b:8f:af:51:0a:d2:e0:8c:d7:18:6f:
39:29:88:a8:c4:48:ee:1f:43:3a:b7:a0:57:06:72:
a5:51:de:f8:78:8f:6d:94:22:ed:42:14:10:07:bf:
93:ee:45:1c:1a:31:c9:0b:73:96:5c:aa:5a:3e:53:
77:56:85:1d:a6:61:87:06:76:c8:ad:9d:5a:05:23:
4e:3d:44:72:43:3a:32:a0:71:fb:6e:45:9c:de:84:
48:7f:be:2f:11:59:3c:14:a6:1a:e0:78:1d:a2:3f:
7e:c5:11:e3:54:98:2d:10:fa:4c:19:fb:9b:ad:94:
c2:4c:39:0d:c5:12:3b:43:c8:4d:22:b0:51:94:c3:
13:21:71:10:3e:6c:3d:6e:66:60:69:ed:e8:c4:db:
dc:20:06:54:f3:29:09:00:2a:db:51:91:e7:f1:55:
a4:4d:94:47:91:66:4b:5d:9a:06:dc:bf:b7:9a:63:
b4:2d:3a:a5:25:52:5f:12:63:eb:05:cc:90:a0:19:
2e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:04:C5:8C:10:2C:EB:DA:2C:BD:8A:17:57:23:C4:6D:CD:D2:A5:DC
X509v3 Authority Key Identifier:
keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.94.129.0/24
74.50.4.0/24
162.213.0.0/24
209.200.228.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:93:7f:ef:52:82:5e:fb:c7:eb:12:aa:ee:93:c8:37:7b:3a:
35:55:35:c7:da:da:14:34:b6:35:cf:a5:3f:c6:14:89:39:22:
bb:f8:48:25:9f:f8:9f:a1:dc:88:87:e4:43:62:0d:d8:70:86:
b1:43:be:36:7e:4c:8f:b4:a0:22:72:59:45:bc:bc:44:0b:3f:
73:29:1f:fb:55:37:bf:88:ff:25:6f:ca:48:48:d4:f2:ac:b7:
df:09:18:35:0b:bd:cd:cc:ae:c3:95:8e:0b:a6:59:ba:5d:39:
ee:90:b7:90:8a:32:0b:e1:cd:7b:8e:79:4e:15:c5:c6:d1:04:
b0:ab:0c:71:5f:90:0a:7a:96:9c:07:f3:8c:50:57:be:1b:27:
2d:aa:69:de:11:18:21:ba:7f:d4:df:f4:4d:c8:ce:fa:bd:17:
d8:c1:7e:bb:d6:02:64:b1:d3:78:a1:b6:60:10:50:ae:32:9e:
c4:a5:a7:54:d8:52:42:58:2c:e1:f8:cc:23:11:4c:98:dd:88:
db:e3:2c:36:04:cb:56:e3:c2:1f:89:a9:44:3c:e3:7e:ec:96:
2b:f7:14:17:d6:f8:17:af:bf:02:1f:1f:1b:06:61:36:26:42:
5a:97:3d:7f:ab:e8:b6:8c:99:09:74:cd:f6:58:c0:9f:a4:e6:
16:f9:4b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:51:14 2025 by rpki-client