
$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401142.roa
File: AS401142.roa (raw, json)
Hash identifier: 0nzEPiqwMP1APOqglfVPgOsB6S4p3039DVl+DoIOOmg=
Subject key identifier: D2:45:6C:68:37:2D:75:EE:0D:36:53:08:FA:B3:BD:7D:60:A2:8D:88
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 4DFB0959614E2A79D6EA02991B2BE9C5AE331241
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401142.roa
Signing time: Fri 16 Oct 2026 22:01:49 +0000
ROA not before: Fri 16 Oct 2026 21:56:49 +0000
ROA not after: Fri 15 Oct 2027 22:01:49 +0000
asID: 401142
IP address blocks: 157.254.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 01:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fb:09:59:61:4e:2a:79:d6:ea:02:99:1b:2b:e9:c5:ae:33:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Oct 16 21:56:49 2026 GMT
Not After : Oct 15 22:01:49 2027 GMT
Subject: CN=D2456C68372D75EE0D365308FAB3BD7D60A28D88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:5a:e5:24:7f:89:af:23:2c:26:9c:e1:13:
6e:66:cf:c4:29:25:9a:b0:6b:42:34:e9:67:e2:29:
33:86:0d:a9:82:73:8e:8a:69:22:37:ac:f7:ab:1b:
9b:9d:25:b8:b7:d3:cc:90:14:41:69:86:fb:38:cb:
9e:7a:2e:77:02:41:20:8b:9e:8d:20:73:d3:5c:7b:
cf:89:ed:ef:eb:cc:06:5a:c6:3b:3d:34:a5:21:67:
a5:99:4a:5a:7f:94:f5:52:97:12:14:70:4e:f8:96:
4a:d7:d7:31:52:29:66:22:87:7e:bb:dc:19:7f:0d:
50:65:ad:13:bb:a9:08:4a:4d:9a:e9:7b:77:52:72:
b3:52:0e:63:c6:90:f8:94:5c:1f:ec:b6:de:6b:c7:
1b:6f:e8:b8:90:8d:1b:e4:df:38:21:4e:64:dd:ee:
38:49:79:94:bc:26:23:03:d3:4e:e1:f0:23:5c:a6:
2c:0e:c6:e3:ff:ec:63:84:14:4a:ec:5e:07:ec:23:
e8:fb:7f:9d:e3:71:3f:e7:82:eb:7c:47:80:c6:24:
02:de:7f:9e:f3:ba:31:9e:70:7a:7e:ed:01:13:a9:
ec:d4:4f:92:a4:b1:c4:c3:e2:75:98:03:0d:56:9d:
05:85:74:6b:52:59:0e:bd:1b:e8:c5:08:b7:18:ac:
eb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:45:6C:68:37:2D:75:EE:0D:36:53:08:FA:B3:BD:7D:60:A2:8D:88
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401142.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:44:50:57:85:c5:00:f7:6f:9d:e4:58:20:af:90:90:85:4f:
1a:65:20:01:86:e0:16:6f:f4:a8:ac:45:be:37:63:b2:5e:64:
26:b1:90:8c:93:e1:ff:b3:55:55:64:0f:e9:c6:63:46:02:7d:
13:f5:db:39:3b:66:af:b1:9c:1e:67:47:1e:33:19:30:7d:c5:
24:0d:a5:cc:46:c0:98:a8:e3:0b:9e:57:88:af:ac:fc:0a:a9:
10:cf:20:ce:4f:0c:67:16:63:f1:96:ad:cd:af:39:ed:92:6e:
19:66:31:30:40:01:b3:b7:dc:e5:40:08:47:65:a4:08:7c:04:
18:b0:25:55:8f:05:e3:69:9b:b7:9d:a3:8b:40:d2:59:77:73:
7a:6a:01:53:b5:6b:75:17:36:b7:60:bd:ff:fb:d6:00:6d:5e:
11:f7:c7:26:23:5f:66:bd:b8:dc:37:73:e5:e7:53:9a:a9:0e:
5c:7c:04:c8:39:90:59:67:33:f2:8e:f9:77:35:88:c0:68:db:
0f:1d:00:f6:08:05:3b:e9:da:5d:0a:21:e7:fb:76:41:12:93:
42:f2:b1:39:a1:fd:39:6b:ec:a2:a1:5e:7b:c4:bd:90:25:e3:
99:37:57:a1:89:ce:2b:bb:04:0d:9f:fd:ba:b6:c3:8d:5a:da:
78:60:e3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 21:57:24 2026 by rpki-client