$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14315.roa File: AS14315.roa (raw, json) Hash identifier: zGYZ9JGkhWnt+LafLFT9wE5ZjbRXTjuivqV9louJ3ac= Subject key identifier: 66:4E:46:DD:9A:8B:10:1F:0D:D4:D1:E1:7C:32:17:C1:0B:CF:C3:33 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 2FC6CEB8A0C0AE024EA19E69BC9D42061FBE850F Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14315.roa Signing time: Thu 14 Aug 2025 16:50:06 +0000 ROA not before: Thu 14 Aug 2025 16:45:06 +0000 ROA not after: Thu 13 Aug 2026 16:50:06 +0000 asID: 14315 IP address blocks: 40.27.190.0/24 maxlen: 24 40.27.230.0/24 maxlen: 24 40.183.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c6:ce:b8:a0:c0:ae:02:4e:a1:9e:69:bc:9d:42:06:1f:be:85:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 14 16:45:06 2025 GMT Not After : Aug 13 16:50:06 2026 GMT Subject: CN=664E46DD9A8B101F0DD4D1E17C3217C10BCFC333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:26:e2:e9:24:77:fc:fe:f9:ca:da:d2:02:29: 00:28:7e:62:e7:ca:fa:55:0b:fc:4c:59:5e:c4:2b: 5a:a5:cc:03:66:4a:57:7f:60:50:95:8b:94:8c:c0: fd:d2:1e:fc:ba:2d:72:c2:8e:66:cb:7d:13:8a:3a: 29:14:52:41:b1:0d:f6:90:aa:f6:58:0e:99:d1:b2: af:97:72:9a:ff:c1:25:8a:df:84:5a:4a:47:fa:8b: 26:a7:61:5a:bd:45:08:82:20:06:55:54:53:88:38: 69:4d:27:ff:20:64:40:27:bf:e4:87:db:55:71:28: 07:a4:a4:6a:8b:4b:41:db:4e:42:50:ff:26:39:98: e1:be:9b:c2:1c:fb:59:0c:39:c1:b2:c9:8d:21:66: f5:95:17:0c:96:35:5f:a2:6c:72:0f:0b:da:55:c6: 2d:7b:03:59:a4:5c:0b:c9:d3:10:9c:49:f4:70:ef: 61:a7:ff:7e:83:e2:75:7a:41:7e:11:c4:75:60:70: 2b:5d:76:fb:81:e7:59:26:57:2b:25:bb:0c:13:c9: db:1b:d7:55:2a:e3:43:fa:2f:3b:e3:d8:3f:de:d5: ea:98:93:0d:c2:91:ae:2f:f6:67:6e:db:25:ca:d2: 99:7b:70:86:63:0f:76:72:be:8b:cc:08:41:f5:77: de:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:4E:46:DD:9A:8B:10:1F:0D:D4:D1:E1:7C:32:17:C1:0B:CF:C3:33 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS14315.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.190.0/24 40.27.230.0/24 40.183.154.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6c:60:90:30:49:20:9f:70:e5:be:6b:bb:11:94:88:a1:06: 6b:c2:a9:d8:8f:d7:ae:14:a3:9e:cb:05:fe:1d:8b:80:f3:71: 1c:3f:54:3a:53:12:65:9b:52:fb:24:48:0e:fe:52:8c:1f:e2: 55:62:c3:7d:e1:95:86:ea:f4:02:91:6f:2c:23:6d:de:e2:e4: 9d:45:e2:7d:b9:4f:ee:c7:94:65:74:a0:9d:b4:65:84:4e:66: 3c:10:38:bb:78:0e:52:0f:23:86:4c:dc:18:30:99:de:a0:4c: 07:1c:48:df:e6:8b:4b:15:43:44:11:29:42:a6:d2:61:98:ee: 33:99:44:d1:aa:c9:7c:b4:15:35:84:eb:49:5a:98:74:7e:45: a0:69:e9:d6:a9:32:d2:01:5d:8b:a1:cc:e5:ec:33:7f:cd:25: c8:c0:ae:df:b0:99:6c:4f:a7:df:b5:0f:d0:d8:2b:83:a8:e3: ff:6c:f1:23:dd:db:dc:52:90:d7:22:b7:6f:6d:05:f8:ac:b6: 2c:45:e4:e0:03:ef:05:2f:95:6d:b6:d8:d0:ff:07:f7:86:f3: 0f:2a:40:46:71:2c:31:ca:34:1b:3a:0c:a3:f9:61:fa:1e:1f: 99:1c:3f:14:ab:ab:ab:8c:51:cd:4c:f8:d5:3c:fa:34:d4:03: 18:41:24:2a -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUL8bOuKDArgJOoZ5pvJ1CBh++hQ8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODE0MTY0NTA2WhcNMjYwODEzMTY1MDA2 WjAzMTEwLwYDVQQDEyg2NjRFNDZERDlBOEIxMDFGMERENEQxRTE3QzMyMTdDMTBC Q0ZDMzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAribi6SR3/P75 ytrSAikAKH5i58r6VQv8TFlexCtapcwDZkpXf2BQlYuUjMD90h78ui1ywo5my30T ijopFFJBsQ32kKr2WA6Z0bKvl3Ka/8Elit+EWkpH+osmp2FavUUIgiAGVVRTiDhp TSf/IGRAJ7/kh9tVcSgHpKRqi0tB205CUP8mOZjhvpvCHPtZDDnBssmNIWb1lRcM ljVfomxyDwvaVcYtewNZpFwLydMQnEn0cO9hp/9+g+J1ekF+EcR1YHArXXb7gedZ JlcrJbsME8nbG9dVKuND+i8749g/3tXqmJMNwpGuL/ZnbtslytKZe3CGYw92cr6L zAhB9XfenwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGZORt2aixAfDdTR4XwyF8EL z8MzMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE0MzE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAKBu+AwQAKBvmAwQAKLeaMA0GCSqG SIb3DQEBCwUAA4IBAQA4bGCQMEkgn3Dlvmu7EZSIoQZrwqnYj9euFKOeywX+HYuA 83EcP1Q6UxJlm1L7JEgO/lKMH+JVYsN94ZWG6vQCkW8sI23e4uSdReJ9uU/ux5Rl dKCdtGWETmY8EDi7eA5SDyOGTNwYMJneoEwHHEjf5otLFUNEESlCptJhmO4zmUTR qsl8tBU1hOtJWph0fkWgaenWqTLSAV2Loczl7DN/zSXIwK7fsJlsT6fftQ/Q2CuD qOP/bPEj3dvcUpDXIrdvbQX4rLYsReTgA+8FL5VtttjQ/wf3hvMPKkBGcSwxyjQb Ogyj+WH6Hh+ZHD8Uq6urjFHNTPjVPPo01AMYQSQq -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:20 2025 by rpki-client