
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402428.roa
File: AS402428.roa (raw, json)
Hash identifier: PMnCcBEvXAC6n9L/77NlFuS8j/wXHwIOpud6ufKi0Uw=
Subject key identifier: CD:88:C1:C0:EC:C1:04:48:55:74:7E:19:4F:89:39:E5:64:29:4F:89
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 764C3D3B9A3131EA68B77937C213D45B8E57929D
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402428.roa
Signing time: Tue 26 May 2026 07:36:05 +0000
ROA not before: Tue 26 May 2026 07:31:05 +0000
ROA not after: Tue 25 May 2027 07:36:05 +0000
asID: 402428
IP address blocks: 157.254.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 16:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:4c:3d:3b:9a:31:31:ea:68:b7:79:37:c2:13:d4:5b:8e:57:92:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: May 26 07:31:05 2026 GMT
Not After : May 25 07:36:05 2027 GMT
Subject: CN=CD88C1C0ECC1044855747E194F8939E564294F89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:34:27:f4:3f:fb:e6:af:14:dc:c5:72:ff:f9:
7d:46:d7:d7:04:82:f7:45:6c:7e:4e:0a:3e:dd:dd:
df:d5:07:ea:9e:11:4f:e0:af:34:a0:6e:09:4e:47:
f8:76:2c:c1:9d:e9:0f:86:20:32:30:fa:0b:bc:8c:
20:52:d2:5b:06:86:1d:6e:15:96:af:09:17:31:9d:
b3:c8:e7:39:7b:f1:b2:25:45:86:90:99:d4:fd:17:
d0:08:53:da:5a:61:14:ef:6d:e6:5e:82:f6:4b:6c:
cd:23:ce:0d:2a:70:00:f9:76:cc:d5:87:d9:55:2f:
8b:80:ee:31:ae:a6:99:cf:0d:60:2b:28:45:70:bf:
09:43:42:22:77:69:da:c6:16:b6:f0:2f:9e:df:e1:
4e:8d:8f:84:43:df:3f:e6:53:d5:f6:bf:02:4f:d9:
47:0e:c1:9e:54:98:da:14:98:7a:3a:f8:1d:aa:ba:
21:8e:08:6b:57:b9:db:40:a4:63:31:a5:63:3a:5f:
0f:00:d1:06:f1:72:c0:57:f3:32:48:75:83:30:86:
b0:7e:5b:5d:49:a0:aa:1f:79:2d:87:80:3e:51:3f:
15:ac:8f:40:c6:0d:7b:2e:59:de:29:21:56:91:6d:
b8:d6:3b:50:20:9b:d3:5a:ba:bd:f2:55:26:ff:c0:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:88:C1:C0:EC:C1:04:48:55:74:7E:19:4F:89:39:E5:64:29:4F:89
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS402428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.131.0/24
Signature Algorithm: sha256WithRSAEncryption
92:08:bc:ff:83:22:4a:01:f4:a6:47:77:16:01:ed:43:0f:aa:
9d:14:07:e9:2c:c9:31:fe:11:1e:36:5d:d8:b2:83:ac:8a:bb:
79:ae:99:c2:af:9e:14:9c:4c:36:fe:e6:f0:5c:49:10:0b:27:
fe:08:bc:30:97:c7:d8:08:6f:5b:98:bd:22:ab:4e:4b:95:33:
39:0e:aa:a7:7d:a0:da:aa:6f:50:5d:95:bd:11:fc:2f:e8:0c:
38:55:77:b8:14:27:ce:29:fa:3c:90:b7:c9:16:1b:90:7d:75:
25:fe:bb:b9:7c:ff:e9:3d:85:78:8e:86:5c:c2:d5:b1:81:70:
40:ee:a9:ce:57:a9:d1:c3:ba:e2:2b:09:44:4d:a0:58:d9:52:
6e:e4:00:16:b2:36:45:81:64:bf:b3:2e:95:1f:18:cb:76:12:
9f:91:0a:e2:f0:ae:c4:6c:ca:a6:8c:0e:b4:60:6a:1e:24:a7:
74:73:79:4f:0f:98:39:45:1e:d8:d8:31:5b:b0:f3:7f:eb:62:
5a:32:32:c1:5e:15:a1:37:a0:5e:a2:6a:0b:67:f3:80:ee:9b:
ce:c1:11:b0:02:51:aa:ef:c0:c0:2f:0c:cb:c2:eb:bc:cb:f1:
aa:a8:db:22:4d:b9:a5:b3:af:48:82:d4:b4:10:92:92:e5:cd:
18:88:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 19:44:28 2026 by rpki-client