
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS153947.roa
File: AS153947.roa (raw, json)
Hash identifier: Ee5dJ6lg4kz44pMFrY0niyGOnfwo3Ega7WzrkK36fZ8=
Subject key identifier: BE:30:8B:45:65:E8:E2:27:38:66:9F:86:F0:0F:01:ED:35:49:2F:E0
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 7D9C33DEDC49A6648670C9D1977C5EF2E2F2FE59
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS153947.roa
Signing time: Fri 19 Jun 2026 17:26:11 +0000
ROA not before: Fri 19 Jun 2026 17:21:11 +0000
ROA not after: Fri 18 Jun 2027 17:26:11 +0000
asID: 153947
IP address blocks: 157.254.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 22 Jun 2026 05:12:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:9c:33:de:dc:49:a6:64:86:70:c9:d1:97:7c:5e:f2:e2:f2:fe:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jun 19 17:21:11 2026 GMT
Not After : Jun 18 17:26:11 2027 GMT
Subject: CN=BE308B4565E8E22738669F86F00F01ED35492FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5a:8f:e6:bb:fc:17:19:60:03:b3:3f:65:ed:
02:13:ea:fe:2d:11:47:12:fe:6b:e6:50:75:11:b4:
1c:27:2b:91:34:0e:e8:ab:6a:64:72:ae:5d:ee:2d:
df:47:9e:d7:2c:0b:0e:ef:13:b3:ad:e4:55:28:a3:
a7:33:01:3d:8a:d5:e8:8f:32:87:f7:1a:f6:3d:0a:
34:d3:14:ec:01:30:8b:b2:12:08:86:e6:c3:de:4c:
b7:08:c4:90:1a:64:0d:0b:6c:d4:d0:be:e8:ea:8f:
dd:7b:b1:be:f7:78:9b:a5:81:28:00:58:23:14:13:
10:3c:3e:59:f4:0a:6e:87:be:ea:be:d9:f5:3f:86:
98:f8:0c:11:74:37:51:eb:f0:fb:f7:f8:27:8c:12:
1c:70:5e:0f:e5:5b:61:03:b5:d6:be:1c:9f:e1:c9:
d5:7c:e2:6e:21:54:02:78:46:1c:00:ec:db:2b:08:
76:12:4b:f4:59:b3:de:b7:ef:d6:02:1e:e2:9b:d5:
67:58:2f:1e:b9:d7:68:3b:96:12:40:2e:00:ef:77:
54:90:09:ad:62:83:f7:9f:8e:82:95:6f:be:29:bb:
ce:a6:af:7a:af:c8:f5:35:92:4d:c0:a1:fe:78:8f:
7f:8e:98:50:6b:eb:00:d5:90:9f:87:c3:e6:21:d6:
9e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:30:8B:45:65:E8:E2:27:38:66:9F:86:F0:0F:01:ED:35:49:2F:E0
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS153947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.1.0/24
Signature Algorithm: sha256WithRSAEncryption
43:a8:49:45:d6:4f:e8:bc:4d:cb:f7:2d:92:0b:22:b9:35:ba:
0e:91:d5:c7:81:f1:76:68:5b:18:4a:cd:83:79:39:44:9f:f3:
26:aa:d9:e2:c0:f2:74:03:72:78:e5:38:d4:19:94:cb:c5:8d:
f7:77:8a:14:04:cd:6f:86:c1:77:60:65:35:1c:c3:47:e9:65:
5a:10:81:0a:64:cc:15:30:65:41:f3:f4:8d:30:5f:ed:7c:93:
37:a5:a3:20:f4:a9:3a:36:47:6e:d5:d7:60:c5:31:aa:c9:59:
d9:c2:41:f6:9f:d8:61:d6:f4:ab:08:93:99:50:6d:00:0c:6c:
81:e0:0c:f7:b1:d2:c4:5f:30:6b:1e:84:82:5d:94:75:18:13:
ca:92:a3:ee:06:21:17:88:dd:05:56:a8:ff:cd:b2:03:8c:2d:
0d:e2:90:25:80:3c:48:da:fa:4b:32:18:08:8f:cf:2c:06:7d:
62:9c:4b:5c:71:60:a5:43:4e:35:0b:38:48:ed:f3:d9:2c:dc:
b0:88:a8:73:49:cf:37:d9:0a:04:13:db:94:f6:d7:9d:86:01:
e9:6e:53:c6:c3:8a:53:a5:15:28:5b:36:3a:2e:fa:d1:23:c4:
10:8e:3c:8f:d0:f1:32:d4:c6:6c:e8:d4:26:35:f8:62:c9:41:
3b:d5:59:57
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUfZwz3txJpmSGcMnRl3xe8uLy/lkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjE5MTcyMTExWhcNMjcwNjE4MTcyNjEx
WjAzMTEwLwYDVQQDEyhCRTMwOEI0NTY1RThFMjI3Mzg2NjlGODZGMDBGMDFFRDM1
NDkyRkUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVqP5rv8Fxlg
A7M/Ze0CE+r+LRFHEv5r5lB1EbQcJyuRNA7oq2pkcq5d7i3fR57XLAsO7xOzreRV
KKOnMwE9itXojzKH9xr2PQo00xTsATCLshIIhubD3ky3CMSQGmQNC2zU0L7o6o/d
e7G+93ibpYEoAFgjFBMQPD5Z9Apuh77qvtn1P4aY+AwRdDdR6/D79/gnjBIccF4P
5VthA7XWvhyf4cnVfOJuIVQCeEYcAOzbKwh2Ekv0WbPet+/WAh7im9VnWC8euddo
O5YSQC4A73dUkAmtYoP3n46ClW++KbvOpq96r8j1NZJNwKH+eI9/jphQa+sA1ZCf
h8PmIdae2QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFL4wi0Vl6OInOGafhvAPAe01
SS/gMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE1Mzk0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+ATANBgkqhkiG9w0BAQsFAAOC
AQEAQ6hJRdZP6LxNy/ctkgsiuTW6DpHVx4HxdmhbGErNg3k5RJ/zJqrZ4sDydANy
eOU41BmUy8WN93eKFATNb4bBd2BlNRzDR+llWhCBCmTMFTBlQfP0jTBf7XyTN6Wj
IPSpOjZHbtXXYMUxqslZ2cJB9p/YYdb0qwiTmVBtAAxsgeAM97HSxF8wax6Egl2U
dRgTypKj7gYhF4jdBVao/82yA4wtDeKQJYA8SNr6SzIYCI/PLAZ9YpxLXHFgpUNO
NQs4SO3z2SzcsIioc0nPN9kKBBPblPbXnYYB6W5TxsOKU6UVKFs2Oi760SPEEI48
j9DxMtTGbOjUJjX4YslBO9VZVw==
-----END CERTIFICATE-----
Generated at Sun Jun 21 09:30:06 2026 by rpki-client