
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS140676.roa
File: AS140676.roa (raw, json)
Hash identifier: z35oxosUT4jOuRkGXQJ/IPuFHu4b0xm5PVsDghT5NBA=
Subject key identifier: 8A:AB:9F:FF:1C:B7:4F:7B:69:01:EF:CD:38:D5:79:10:6B:22:F2:FE
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 4F154D406F9771221BBBFB488E3FA029541263CB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS140676.roa
Signing time: Sun 22 Mar 2026 01:03:01 +0000
ROA not before: Sun 22 Mar 2026 00:58:01 +0000
ROA not after: Sun 21 Mar 2027 01:03:01 +0000
asID: 140676
IP address blocks: 157.254.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 21:04:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:15:4d:40:6f:97:71:22:1b:bb:fb:48:8e:3f:a0:29:54:12:63:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 22 00:58:01 2026 GMT
Not After : Mar 21 01:03:01 2027 GMT
Subject: CN=8AAB9FFF1CB74F7B6901EFCD38D579106B22F2FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:19:9b:0a:b9:d3:47:8b:d5:fb:74:6b:9f:b6:
b4:36:75:77:e6:bf:9e:d5:f6:05:39:57:45:0f:a9:
45:31:0b:02:8b:a1:67:b0:25:5b:45:93:b8:c5:72:
12:f0:9c:f2:a4:c3:97:b0:6b:2f:d6:cf:82:6d:e5:
18:c9:f1:c4:3b:89:d0:2a:16:1f:a3:11:ae:f0:18:
51:94:b6:c5:35:5f:b5:d3:01:dd:1f:b3:ec:25:7d:
ae:3e:94:f9:cc:81:0b:db:a5:d9:49:49:99:a0:82:
5e:79:0b:95:c0:15:d9:41:ca:a4:6b:d3:65:95:68:
16:f8:53:d6:9f:8c:0f:5e:76:c4:51:6e:a9:45:a1:
9c:79:f1:13:80:92:8f:a7:41:2e:0c:c0:a1:04:52:
6f:d8:f0:55:cd:85:a5:0e:29:3b:95:58:80:c1:a6:
07:8a:17:42:34:ff:35:68:ce:f5:ae:04:0f:92:37:
ec:d0:56:b2:b4:76:8f:79:43:84:d1:a9:2a:e9:03:
0f:df:5d:b1:81:27:f3:c0:21:86:7e:30:93:9b:22:
fa:ec:6d:53:e8:5b:05:b8:df:0d:d6:4b:e3:34:bb:
1c:11:ee:d6:68:28:77:64:bb:3c:cf:f3:9f:84:ed:
a1:22:63:ea:15:e6:b6:7e:02:75:5f:27:28:b3:fb:
2f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AB:9F:FF:1C:B7:4F:7B:69:01:EF:CD:38:D5:79:10:6B:22:F2:FE
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS140676.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.228.0/24
Signature Algorithm: sha256WithRSAEncryption
91:3c:0a:59:bd:cf:9d:12:27:62:a0:1f:0f:68:11:cd:3c:8b:
43:cf:2b:25:b8:aa:a6:7c:49:45:00:c8:30:57:01:1f:d4:fc:
2e:ab:20:1b:87:49:85:bc:65:0e:64:55:8b:53:04:2f:4c:34:
3c:4e:ac:da:8a:a9:00:04:3c:37:b3:b4:24:1f:0d:54:4e:ea:
62:dd:15:75:a1:02:4a:2f:71:d0:31:36:8c:29:d9:5e:a9:8a:
84:73:e9:35:8e:ba:ae:a2:57:98:4a:38:73:ff:95:64:e8:ab:
60:d8:b5:bb:54:88:fd:4f:ea:f4:c6:d2:4d:e4:7e:1f:82:ab:
be:07:15:6f:e5:d5:bf:d7:a5:18:41:f1:7b:23:f2:66:eb:7b:
57:2d:58:74:75:c6:f1:e0:fb:01:2d:56:bd:bf:15:4c:b7:c2:
f5:58:09:6e:62:90:b6:e5:73:92:c4:ae:2a:72:e8:c5:e4:22:
a5:2b:8c:42:a0:21:8c:53:57:97:b7:7d:fa:56:ae:41:24:a7:
25:73:74:8d:4b:b7:07:d5:24:33:71:4d:64:03:3c:41:4f:49:
f5:80:90:07:76:46:7b:c6:f7:30:e3:91:44:6a:79:a2:97:ad:
3e:8a:16:02:4e:ea:1b:3b:7d:40:2a:7f:ca:43:db:6a:b6:5a:
cf:8e:e1:e2
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUTxVNQG+XcSIbu/tIjj+gKVQSY8swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzIyMDA1ODAxWhcNMjcwMzIxMDEwMzAx
WjAzMTEwLwYDVQQDEyg4QUFCOUZGRjFDQjc0RjdCNjkwMUVGQ0QzOEQ1NzkxMDZC
MjJGMkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BmbCrnTR4vV
+3Rrn7a0NnV35r+e1fYFOVdFD6lFMQsCi6FnsCVbRZO4xXIS8JzypMOXsGsv1s+C
beUYyfHEO4nQKhYfoxGu8BhRlLbFNV+10wHdH7PsJX2uPpT5zIEL26XZSUmZoIJe
eQuVwBXZQcqka9NllWgW+FPWn4wPXnbEUW6pRaGcefETgJKPp0EuDMChBFJv2PBV
zYWlDik7lViAwaYHihdCNP81aM71rgQPkjfs0FaytHaPeUOE0akq6QMP312xgSfz
wCGGfjCTmyL67G1T6FsFuN8N1kvjNLscEe7WaCh3ZLs8z/OfhO2hImPqFea2fgJ1
Xycos/svXwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIqrn/8ct097aQHvzTjVeRBr
IvL+MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE0MDY3Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+5DANBgkqhkiG9w0BAQsFAAOC
AQEAkTwKWb3PnRInYqAfD2gRzTyLQ88rJbiqpnxJRQDIMFcBH9T8LqsgG4dJhbxl
DmRVi1MEL0w0PE6s2oqpAAQ8N7O0JB8NVE7qYt0VdaECSi9x0DE2jCnZXqmKhHPp
NY66rqJXmEo4c/+VZOirYNi1u1SI/U/q9MbSTeR+H4KrvgcVb+XVv9elGEHxeyPy
Zut7Vy1YdHXG8eD7AS1Wvb8VTLfC9VgJbmKQtuVzksSuKnLoxeQipSuMQqAhjFNX
l7d9+lauQSSnJXN0jUu3B9UkM3FNZAM8QU9J9YCQB3ZGe8b3MOORRGp5opetPooW
Ak7qGzt9QCp/ykPbarZaz47h4g==
-----END CERTIFICATE-----
Generated at Mon Mar 23 04:35:11 2026 by rpki-client