
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: PoLo+wCpHGeOwZr6uvSpH4Fd3mhF5AvGX7rylKOjq2o=
Subject key identifier: 31:8E:64:ED:B4:58:73:9E:8A:B0:7B:B4:1E:40:99:46:98:E3:60:F1
Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial: 4B0D05E10D5219AC9945FD5029828D295F5EAB8F
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
Signing time: Mon 25 May 2026 12:16:19 +0000
ROA not before: Mon 25 May 2026 12:11:19 +0000
ROA not after: Mon 24 May 2027 12:16:19 +0000
asID: 9304
IP address blocks: 157.254.27.0/24 maxlen: 24
157.254.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 26 May 2026 13:53:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:0d:05:e1:0d:52:19:ac:99:45:fd:50:29:82:8d:29:5f:5e:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Validity
Not Before: May 25 12:11:19 2026 GMT
Not After : May 24 12:16:19 2027 GMT
Subject: CN=318E64EDB458739E8AB07BB41E40994698E360F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1d:3f:54:da:40:ad:01:24:3e:ad:10:d5:9a:
e0:bb:9c:f7:4e:59:53:8a:f6:6c:09:6b:b2:ee:fc:
10:f6:30:d9:93:9b:93:b0:74:a8:33:13:21:83:78:
50:cc:68:ed:dd:85:61:1e:1c:e3:ae:28:00:6f:6b:
2f:5a:14:7e:87:57:b1:7c:5a:cc:35:02:7a:27:93:
f0:31:2b:68:88:45:41:52:fe:44:53:fd:d9:1f:9f:
58:6b:2a:78:d4:ab:ea:9f:36:e5:9f:6f:af:47:36:
a6:be:43:fa:88:ef:6f:59:ad:72:ef:ef:3b:89:6c:
82:c0:9a:a5:0c:59:37:96:64:4f:97:48:db:d9:19:
37:c6:be:8b:cc:e1:14:bb:0d:96:bb:b3:18:f2:4a:
7f:5d:2c:a7:11:5c:16:87:d0:fb:42:b7:59:48:a8:
aa:94:c0:bd:3c:21:9e:8c:bf:d0:2d:4a:8b:f0:b3:
02:c6:95:ec:f4:d0:36:92:56:db:6c:ca:75:d3:6c:
17:0e:72:e6:05:00:66:c7:c7:0f:d8:e8:fa:4d:f9:
90:f2:05:fd:9f:c2:b2:aa:d5:a6:8d:54:a5:ce:cb:
7a:c6:c9:1c:c8:5b:b3:e5:b3:55:eb:d8:b9:7c:79:
6b:74:66:8d:75:da:e2:eb:aa:9c:c0:1f:7e:b3:3a:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:64:ED:B4:58:73:9E:8A:B0:7B:B4:1E:40:99:46:98:E3:60:F1
X509v3 Authority Key Identifier:
keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.254.27.0/24
157.254.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:b3:d3:43:c6:cb:73:b1:db:0f:4f:a3:00:6b:c9:72:fc:71:
78:51:d8:5e:98:91:88:1c:07:39:92:72:b8:85:71:58:1f:44:
c2:c2:55:8c:ef:cf:d1:1b:71:51:72:c8:83:3c:32:3c:e4:c3:
a5:00:73:c9:9a:85:de:31:d3:f8:5c:44:ce:32:b8:c1:91:e4:
93:4a:3d:eb:75:52:46:4d:88:e6:98:e0:6e:5d:1f:e5:26:09:
17:b9:bb:0b:44:20:d8:40:4f:69:b2:64:2f:82:3c:7f:03:a6:
77:84:03:a7:bc:0f:cb:87:89:5b:ed:e1:64:e9:ba:40:57:9f:
4b:bc:53:f6:89:ae:7c:4e:ff:68:16:8e:62:14:b8:fe:e0:0f:
a2:81:e3:22:cb:c0:39:b3:48:a3:3f:b0:b8:14:d8:f7:96:9d:
d6:f9:a4:d2:26:50:de:34:f2:ba:7f:71:f8:1a:43:3e:f7:78:
88:7d:48:11:5a:50:bd:e5:1d:d2:6b:4a:b7:b8:03:d3:2c:43:
cc:e3:4c:a4:c1:98:67:bf:06:57:a9:56:59:18:92:67:ef:54:
8b:11:64:f4:58:90:32:f9:96:c6:7f:0c:6b:4b:f0:5c:55:e7:
a4:23:22:c8:0a:e8:14:c4:f0:44:47:f6:cb:5f:36:df:c3:f5:
bd:28:b3:9f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUSw0F4Q1SGayZRf1QKYKNKV9eq48wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNTI1MTIxMTE5WhcNMjcwNTI0MTIxNjE5
WjAzMTEwLwYDVQQDEygzMThFNjRFREI0NTg3MzlFOEFCMDdCQjQxRTQwOTk0Njk4
RTM2MEYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh0/VNpArQEk
Pq0Q1Zrgu5z3TllTivZsCWuy7vwQ9jDZk5uTsHSoMxMhg3hQzGjt3YVhHhzjrigA
b2svWhR+h1exfFrMNQJ6J5PwMStoiEVBUv5EU/3ZH59Yayp41Kvqnzbln2+vRzam
vkP6iO9vWa1y7+87iWyCwJqlDFk3lmRPl0jb2Rk3xr6LzOEUuw2Wu7MY8kp/XSyn
EVwWh9D7QrdZSKiqlMC9PCGejL/QLUqL8LMCxpXs9NA2klbbbMp102wXDnLmBQBm
x8cP2Oj6TfmQ8gX9n8KyqtWmjVSlzst6xskcyFuz5bNV69i5fHlrdGaNddri66qc
wB9+szpU8QIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFDGOZO20WHOeirB7tB5AmUaY
42DxMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI
KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBACd/hsDBACd/jEwDQYJKoZIhvcNAQEL
BQADggEBABuz00PGy3Ox2w9PowBryXL8cXhR2F6YkYgcBzmScriFcVgfRMLCVYzv
z9EbcVFyyIM8Mjzkw6UAc8mahd4x0/hcRM4yuMGR5JNKPet1UkZNiOaY4G5dH+Um
CRe5uwtEINhAT2myZC+CPH8DpneEA6e8D8uHiVvt4WTpukBXn0u8U/aJrnxO/2gW
jmIUuP7gD6KB4yLLwDmzSKM/sLgU2PeWndb5pNImUN408rp/cfgaQz73eIh9SBFa
UL3lHdJrSre4A9MsQ8zjTKTBmGe/BlepVlkYkmfvVIsRZPRYkDL5lsZ/DGtL8FxV
56QjIsgK6BTE8ERH9stfNt/D9b0os58=
-----END CERTIFICATE-----
Generated at Mon May 25 19:55:56 2026 by rpki-client