
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5511.roa
File: AS5511.roa (raw, json)
Hash identifier: XGH6mPzyhu0XgVlNlPf7YtxVDWfoy9obWIDhvxy+zA8=
Subject key identifier: 8F:EC:D6:20:8B:84:FD:B0:3A:50:6A:AC:D7:3F:55:0E:6E:0F:F4:16
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 0F3148FC790CD63F075E7BC8F356E6787DB03353
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5511.roa
Signing time: Sat 18 Jul 2026 16:09:35 +0000
ROA not before: Sat 18 Jul 2026 16:04:35 +0000
ROA not after: Sat 17 Jul 2027 16:09:35 +0000
asID: 5511
IP address blocks: 157.254.28.0/24 maxlen: 24
157.254.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 12:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:31:48:fc:79:0c:d6:3f:07:5e:7b:c8:f3:56:e6:78:7d:b0:33:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: Jul 18 16:04:35 2026 GMT
Not After : Jul 17 16:09:35 2027 GMT
Subject: CN=8FECD6208B84FDB03A506AACD73F550E6E0FF416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:39:26:0a:8c:45:99:ed:d3:6c:23:7e:c3:17:
2a:d4:6f:bd:6f:87:f2:ab:6b:e9:08:4b:0f:40:1f:
4d:63:2f:ec:a5:bf:0b:db:82:55:9a:18:d3:46:30:
fe:ee:f9:6b:40:da:58:a1:b1:45:f4:0b:b7:86:fe:
6d:fd:5b:77:e1:77:2d:8a:a7:d8:0d:28:06:7c:cd:
08:f1:a3:d6:13:9f:a0:f1:20:7e:72:e2:40:f0:d6:
45:79:6f:25:60:1b:68:88:74:1c:06:e7:c2:0b:87:
43:46:77:df:d4:e3:9c:51:1d:00:64:57:22:ea:46:
78:82:f8:5e:eb:73:96:97:18:80:7c:d2:5f:8f:1e:
14:b5:2a:fd:d2:cc:a9:ef:e3:81:c9:25:67:e3:7e:
8e:94:3b:6b:f6:c4:42:4a:56:3c:d3:da:45:b9:7f:
b9:4d:29:f2:2c:27:57:aa:fd:d6:9b:6a:b9:49:80:
b9:9f:9a:55:bb:44:0d:f0:ec:b2:18:58:a7:d3:b1:
8e:3d:a7:62:25:84:8b:ad:31:f9:1f:2d:51:bf:dd:
b5:75:0a:ea:41:71:b5:af:aa:6e:3d:9c:9c:7a:bc:
88:7d:85:73:e7:18:75:b8:3a:d0:20:ad:b0:e4:16:
5c:22:3a:6a:d4:fb:48:f2:4c:11:47:f2:3c:35:43:
d5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:EC:D6:20:8B:84:FD:B0:3A:50:6A:AC:D7:3F:55:0E:6E:0F:F4:16
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.28.0/24
157.254.31.0/24
Signature Algorithm: sha256WithRSAEncryption
be:d4:53:a1:38:aa:92:71:56:59:0f:0a:d2:b8:d8:7a:d7:79:
44:43:7c:d1:8a:30:3f:42:3b:9c:39:c8:03:d7:f6:97:a0:c7:
78:a8:26:37:34:50:24:28:77:43:84:76:f6:db:35:01:19:c4:
65:81:6a:58:d1:bf:86:59:a3:df:17:53:9b:45:5e:f7:21:6c:
71:52:1e:1e:e1:41:e4:e6:56:75:c8:cc:f5:01:ba:b5:4e:2c:
d8:81:2b:20:ba:28:55:8e:09:65:2d:62:07:d2:2e:ab:17:9b:
c0:0c:f3:1c:7f:3d:cd:fb:61:69:84:65:73:12:35:89:a1:28:
0f:23:05:6d:d7:d1:cf:8f:d1:43:ad:4a:e8:8d:de:09:8e:fb:
6d:77:71:89:f1:5a:07:62:88:ac:4b:0e:81:23:13:41:8e:1d:
6a:e1:e2:ee:97:af:b2:25:0e:c2:ea:45:a9:8f:3b:55:e1:a2:
9d:06:0a:aa:99:a3:7e:a1:a7:42:39:ed:9b:c4:ee:7a:3f:37:
98:f4:ba:96:6f:10:d5:a3:6a:7d:c2:36:e3:4a:f5:c2:47:ad:
06:f0:b5:cc:88:a7:b1:b5:0d:c2:da:c3:58:77:54:5c:ea:5a:
b9:83:44:19:04:f9:a2:4d:33:57:be:e4:28:be:6c:c6:d0:b1:
b5:04:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 14:53:07 2026 by rpki-client