
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213618.roa
File: AS213618.roa (raw, json)
Hash identifier: oJofwFiGt3vVjp2lsNFjjKq5M4RNnz24npckIXiqWQA=
Subject key identifier: 24:85:B8:4F:60:B6:42:BA:76:02:1F:70:03:05:6A:51:C9:BA:9D:B9
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 25D9C6E0076E8810B33F03FA030185F6A8B94AA9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213618.roa
Signing time: Thu 19 Mar 2026 08:23:49 +0000
ROA not before: Thu 19 Mar 2026 08:18:49 +0000
ROA not after: Thu 18 Mar 2027 08:23:49 +0000
asID: 213618
IP address blocks: 157.254.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:d9:c6:e0:07:6e:88:10:b3:3f:03:fa:03:01:85:f6:a8:b9:4a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Mar 19 08:18:49 2026 GMT
Not After : Mar 18 08:23:49 2027 GMT
Subject: CN=2485B84F60B642BA76021F7003056A51C9BA9DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c5:57:b7:04:b2:4b:8c:a9:67:20:2d:43:07:
c3:65:f7:9d:5e:e0:09:5f:cc:d2:d2:1d:71:c4:59:
db:86:ca:8d:6a:c5:45:bb:b0:2f:20:0c:a3:c0:56:
2e:87:b5:e6:42:7c:9d:a6:80:97:1e:e8:d9:42:1f:
26:43:43:ea:8c:63:e9:36:d4:5c:ca:4a:23:34:6f:
4d:2d:f7:cc:c1:86:e0:f4:5f:75:1d:17:b9:56:85:
f6:37:d2:6f:53:a1:3b:20:d1:e3:83:d9:ca:bb:83:
5f:a5:3e:04:c8:a0:9f:f8:91:45:06:33:f4:82:28:
e6:f9:12:bc:68:33:b2:1e:5a:5e:bc:2b:fb:b0:ab:
ee:98:ec:8f:e9:d8:5e:cc:21:0c:72:2e:0b:43:12:
67:71:3e:a2:ce:52:3d:23:dc:ab:8b:2b:af:93:cc:
34:41:85:44:68:ca:f4:3f:30:bc:ee:86:12:4f:e2:
f4:35:d2:56:bb:e0:22:29:c7:bc:26:a0:4b:ca:40:
db:d5:32:c4:5a:c6:7b:70:2a:30:4b:e9:ad:ed:8d:
6f:c9:75:d7:f3:50:84:21:49:42:52:84:a6:e5:a2:
7b:52:07:be:db:e2:65:cb:41:30:df:1b:7e:ff:ae:
c5:e2:f7:4e:84:13:23:4c:aa:c8:eb:60:ee:73:92:
f8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:85:B8:4F:60:B6:42:BA:76:02:1F:70:03:05:6A:51:C9:BA:9D:B9
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS213618.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.131.0/24
Signature Algorithm: sha256WithRSAEncryption
41:29:8e:c3:f0:dc:b6:7d:e1:30:56:38:38:bc:27:75:f3:96:
fb:42:f5:b6:7b:2a:9b:f1:8f:b5:0f:45:4c:10:76:5d:d0:34:
ea:57:92:b5:fc:7e:9d:89:07:66:53:34:c8:a2:8e:8b:eb:26:
5e:b1:59:fd:52:b7:e8:65:04:8e:89:5a:0b:12:c2:8b:eb:e0:
28:9e:37:bd:1b:9b:e2:6d:d9:2a:fb:4c:62:08:d0:37:cd:c1:
88:fe:39:af:07:06:22:4f:9a:79:0b:44:d4:70:d0:87:6c:e0:
46:c0:83:30:47:3c:27:c2:56:5a:96:83:e3:0b:d1:f8:7f:91:
48:45:f2:06:c5:95:2f:5f:cd:6b:7a:80:85:23:c2:44:3e:02:
ff:52:ef:e9:7d:65:38:2b:f2:bb:32:48:26:77:7c:62:cb:49:
85:c6:29:40:7b:54:5e:40:21:83:80:3e:59:84:d5:8c:44:e4:
a8:73:53:f7:6c:ae:58:ce:67:4a:6d:79:5c:f8:ab:a1:43:e1:
27:95:94:56:fb:38:5a:1c:6e:63:5e:33:4a:94:e7:6f:c4:59:
33:7d:2b:36:3a:9a:c1:64:3f:46:6c:be:04:89:c2:58:dc:6c:
33:80:7a:7f:f7:e9:27:68:0c:3c:d5:6e:2d:1b:57:0a:9f:06:
61:25:76:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:08 2026 by rpki-client