$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS202153.roa File: AS202153.roa (raw, json) Hash identifier: 9Ddkjv7h6hC9jqNQxFgmJL7Ix9RVRUhZmCQ3H8VXIwc= Subject key identifier: D1:3B:2C:C7:1B:0A:45:EB:DE:18:85:1D:DA:CC:61:9D:31:CB:B9:05 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: CDF34735197C6532FE0CB8D0183746B7343EEB Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS202153.roa Signing time: Tue 03 Nov 2026 16:39:39 +0000 ROA not before: Tue 03 Nov 2026 16:34:39 +0000 ROA not after: Tue 02 Nov 2027 16:39:39 +0000 asID: 202153 IP address blocks: 157.53.65.0/24 maxlen: 24 2606:80:55e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 01:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: cd:f3:47:35:19:7c:65:32:fe:0c:b8:d0:18:37:46:b7:34:3e:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Nov 3 16:34:39 2026 GMT Not After : Nov 2 16:39:39 2027 GMT Subject: CN=D13B2CC71B0A45EBDE18851DDACC619D31CBB905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:31:3b:25:ca:61:3d:02:87:20:d4:93:e4:a4: 29:90:e5:9f:3f:8e:8a:bf:2f:c2:7c:0b:a2:c4:9a: 47:38:01:c3:c0:7f:a1:8e:95:b4:c3:a9:54:1c:a4: 86:17:78:d0:77:21:74:08:b3:fb:34:71:3d:7c:c3: 38:20:1e:24:db:9d:42:9b:6a:99:c2:be:42:39:2c: 73:12:54:a2:95:57:0d:a2:f9:74:2d:74:22:98:7c: 84:12:64:17:af:05:1f:af:ed:00:48:56:c9:3b:98: d7:57:a7:a3:ff:d4:a6:29:f7:2c:40:e9:3d:08:11: b4:36:94:59:37:94:67:aa:0e:b8:1c:d8:30:e8:cf: 87:9d:0d:cc:51:e7:76:f2:a4:30:0b:f7:8f:09:d5: de:54:cc:47:60:22:bc:ed:d4:e4:f4:ab:90:52:a0: 0c:32:3f:e7:35:e9:84:e4:ca:e4:6c:9d:68:79:c6: 70:88:3d:1b:c7:73:33:4e:d2:de:7c:4d:17:8f:59: 6e:3c:62:8a:0e:9d:eb:96:cb:6f:5b:61:65:3d:a9: c8:02:8d:5e:dd:31:7d:87:29:e2:bd:e1:76:f2:76: cd:ab:95:2a:58:b5:b8:ef:1c:04:f4:54:97:fb:17: 43:8d:76:c6:e7:82:81:b3:92:95:89:6b:81:58:3c: 48:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3B:2C:C7:1B:0A:45:EB:DE:18:85:1D:DA:CC:61:9D:31:CB:B9:05 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS202153.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.65.0/24 IPv6: 2606:80:55e::/48 Signature Algorithm: sha256WithRSAEncryption 88:56:91:de:50:a9:c2:a3:41:58:17:e6:51:9e:03:3e:02:d9: 80:6e:14:15:6b:70:fd:12:51:46:74:ef:b1:90:38:83:35:e3: 63:33:f0:41:6a:74:cf:e0:3e:0e:2d:bc:88:64:fc:96:b0:bd: fc:b8:1b:08:ce:06:db:36:06:80:47:41:ad:1f:87:65:55:8e: da:f4:a7:e0:98:5a:aa:62:48:f9:ff:15:3a:8c:86:b8:67:2f: 0f:b9:6f:a2:7b:55:db:17:9a:62:1a:ab:b5:14:62:f0:7b:f9: 84:74:05:4e:5d:02:a9:85:b0:c2:85:dc:5b:17:52:db:7c:0b: 2d:7f:ba:19:e3:b5:cb:a5:62:98:97:7a:42:96:41:63:62:78: ed:e4:34:e3:02:1c:e4:22:1b:7a:a4:5f:bc:09:a3:da:41:e1: 96:90:4e:f4:d2:fa:b5:50:e6:57:01:8d:21:cb:62:fb:19:4d: 5d:c4:37:6c:60:b6:a6:39:e1:e1:57:57:52:86:3a:d0:4b:91: 07:75:2f:fe:a7:8b:35:e8:2d:18:8a:41:e2:e2:1e:07:d4:92: 15:65:b9:97:5b:49:2f:ef:24:9e:b9:9e:19:da:1b:e8:73:ec: 26:05:51:00:e7:8b:0a:63:9e:27:8d:4c:bf:1b:18:24:f3:2d: b8:d8:e3:5f -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUAM3zRzUZfGUy/gy40Bg3Rrc0PuswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjYxMTAzMTYzNDM5WhcNMjcxMTAyMTYzOTM5 WjAzMTEwLwYDVQQDEyhEMTNCMkNDNzFCMEE0NUVCREUxODg1MUREQUNDNjE5RDMx Q0JCOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTE7JcphPQKH INST5KQpkOWfP46Kvy/CfAuixJpHOAHDwH+hjpW0w6lUHKSGF3jQdyF0CLP7NHE9 fMM4IB4k251Cm2qZwr5COSxzElSilVcNovl0LXQimHyEEmQXrwUfr+0ASFbJO5jX V6ej/9SmKfcsQOk9CBG0NpRZN5Rnqg64HNgw6M+HnQ3MUed28qQwC/ePCdXeVMxH YCK87dTk9KuQUqAMMj/nNemE5MrkbJ1oecZwiD0bx3MzTtLefE0Xj1luPGKKDp3r lstvW2FlPanIAo1e3TF9hyniveF28nbNq5UqWLW47xwE9FSX+xdDjXbG54KBs5KV iWuBWDxIrwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFNE7LMcbCkXr3hiFHdrMYZ0x y7kFMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzIwMjE1My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJ01QTAPBAIAAjAJAwcAJgYAgAVe MA0GCSqGSIb3DQEBCwUAA4IBAQCIVpHeUKnCo0FYF+ZRngM+AtmAbhQVa3D9ElFG dO+xkDiDNeNjM/BBanTP4D4OLbyIZPyWsL38uBsIzgbbNgaAR0GtH4dlVY7a9Kfg mFqqYkj5/xU6jIa4Zy8PuW+ie1XbF5piGqu1FGLwe/mEdAVOXQKphbDChdxbF1Lb fAstf7oZ47XLpWKYl3pClkFjYnjt5DTjAhzkIht6pF+8CaPaQeGWkE700vq1UOZX AY0hy2L7GU1dxDdsYLamOeHhV1dShjrQS5EHdS/+p4s16C0YikHi4h4H1JIVZbmX W0kv7ySeuZ4Z2hvoc+wmBVEA54sKY54njUy/Gxgk8y242ONf -----END CERTIFICATE-----Generated at Sun Nov 15 18:58:59 2026 by rpki-client