$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS151373.roa File: AS151373.roa (raw, json) Hash identifier: tlBDB6RuNxXJbUJuVOHx9UnNQ1UCEnRu97MFmoQaxe4= Subject key identifier: 18:99:6B:FE:38:6A:3B:C6:AA:CA:28:9F:71:2F:68:27:09:83:34:D5 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5BBBEEFFCF6A950B3C7C8234449671C7FD8EEEFB Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS151373.roa Signing time: Sat 21 Jun 2025 05:16:55 +0000 ROA not before: Sat 21 Jun 2025 05:11:55 +0000 ROA not after: Sat 20 Jun 2026 05:16:55 +0000 asID: 151373 IP address blocks: 40.27.243.0/24 maxlen: 24 40.183.95.0/24 maxlen: 24 40.183.198.0/24 maxlen: 24 40.223.157.0/24 maxlen: 24 40.223.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bb:ee:ff:cf:6a:95:0b:3c:7c:82:34:44:96:71:c7:fd:8e:ee:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 21 05:11:55 2025 GMT Not After : Jun 20 05:16:55 2026 GMT Subject: CN=18996BFE386A3BC6AACA289F712F6827098334D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:c0:f0:d6:ec:c5:e1:de:c4:23:59:5a:3d: eb:e4:14:14:51:8c:33:d6:01:84:14:43:6f:06:27: 43:6e:2b:ee:76:ab:ff:e0:30:15:72:6d:55:38:92: 6b:db:13:e8:f5:b8:56:e0:f3:22:45:09:a2:d1:fb: ad:4b:76:83:98:46:f8:2e:64:bd:92:de:d4:f1:ab: 66:a9:49:67:68:a7:5d:ed:88:51:79:fd:dc:2d:94: 98:78:d3:28:83:54:d0:5b:f6:57:1d:67:be:1e:cf: de:29:19:21:27:62:a8:17:c3:f6:11:0f:3f:f8:0e: b8:99:08:3e:f4:b4:32:dc:f2:cd:1b:7c:3a:7b:50: 80:e9:b7:42:37:43:f6:f4:01:1b:8e:7f:4c:ac:e1: 5e:6f:97:e1:ea:6a:08:ca:9b:20:15:36:b4:1a:9a: 8a:45:04:7a:f5:61:08:1c:4c:5d:f8:0e:df:cf:c9: 73:05:98:8e:91:f9:56:57:eb:e7:1f:38:e4:28:c2: 1a:88:53:75:de:d9:fb:78:77:3a:d9:8c:b0:6b:27: 95:8d:b9:60:47:6b:57:92:9e:65:a2:68:a6:c7:67: ec:49:6d:ad:66:e9:5f:22:3e:98:ab:be:99:91:55: 6e:ee:54:25:67:ae:1d:87:36:40:bb:ea:9b:db:c7: 30:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:99:6B:FE:38:6A:3B:C6:AA:CA:28:9F:71:2F:68:27:09:83:34:D5 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS151373.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.243.0/24 40.183.95.0/24 40.183.198.0/24 40.223.157.0/24 40.223.251.0/24 Signature Algorithm: sha256WithRSAEncryption 45:94:bb:44:98:39:a9:e1:b7:2e:9d:f4:a4:b0:b0:12:f4:d8: 32:d9:c1:93:4a:2e:69:eb:66:64:89:6c:21:d2:87:65:29:21: dc:25:28:75:b3:59:1c:b5:ce:ec:8e:85:7c:78:54:e2:ff:a8: 3d:69:45:86:cc:92:0b:20:4b:6e:03:b9:cc:23:69:bc:69:e5: 3a:25:35:52:d9:3b:76:d6:ea:fe:4b:1d:6e:a5:07:c1:9e:9c: ea:1b:cc:47:b5:26:66:98:d3:d4:01:5b:17:b1:b3:f7:57:71: 65:60:c8:00:65:36:22:98:df:8b:5a:fd:3d:08:c4:40:90:26: be:11:c4:3e:fb:8d:f5:e5:a6:8f:7b:26:9f:21:98:9e:5f:db: 6a:ba:da:29:d2:58:98:a0:f7:88:ec:62:35:c5:85:c7:2e:c4: 13:e4:ed:c7:53:c5:10:36:10:a1:62:3b:b5:c1:e3:e4:21:df: 41:94:07:0f:db:61:a3:54:f1:f9:46:88:c0:40:78:87:88:0d: 7e:d2:02:91:1f:69:b2:e5:2f:5e:bd:50:0c:2d:9b:5b:2b:5b: da:64:23:d2:cc:9d:e6:9e:6b:1b:3f:9d:6d:cf:13:16:cd:7e: db:16:36:ad:34:c7:c0:67:a1:85:74:f2:82:6c:ef:13:6a:c1: 98:72:7d:67 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUW7vu/89qlQs8fII0RJZxx/2O7vswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjIxMDUxMTU1WhcNMjYwNjIwMDUxNjU1 WjAzMTEwLwYDVQQDEygxODk5NkJGRTM4NkEzQkM2QUFDQTI4OUY3MTJGNjgyNzA5 ODMzNEQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr63A8NbsxeHe xCNZWj3r5BQUUYwz1gGEFENvBidDbivudqv/4DAVcm1VOJJr2xPo9bhW4PMiRQmi 0futS3aDmEb4LmS9kt7U8atmqUlnaKdd7YhRef3cLZSYeNMog1TQW/ZXHWe+Hs/e KRkhJ2KoF8P2EQ8/+A64mQg+9LQy3PLNG3w6e1CA6bdCN0P29AEbjn9MrOFeb5fh 6moIypsgFTa0GpqKRQR69WEIHExd+A7fz8lzBZiOkflWV+vnHzjkKMIaiFN13tn7 eHc62YywayeVjblgR2tXkp5lomimx2fsSW2tZulfIj6Yq76ZkVVu7lQlZ64dhzZA u+qb28cwZQIDAQABo4IClzCCApMwHQYDVR0OBBYEFBiZa/44ajvGqsoon3EvaCcJ gzTVMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE1MTM3My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEACgb8wMEACi3XwMEACi3xgMEACjf nQMEACjf+zANBgkqhkiG9w0BAQsFAAOCAQEARZS7RJg5qeG3Lp30pLCwEvTYMtnB k0ouaetmZIlsIdKHZSkh3CUodbNZHLXO7I6FfHhU4v+oPWlFhsySCyBLbgO5zCNp vGnlOiU1Utk7dtbq/ksdbqUHwZ6c6hvMR7UmZpjT1AFbF7Gz91dxZWDIAGU2Ipjf i1r9PQjEQJAmvhHEPvuN9eWmj3smnyGYnl/barraKdJYmKD3iOxiNcWFxy7EE+Tt x1PFEDYQoWI7tcHj5CHfQZQHD9tho1Tx+UaIwEB4h4gNftICkR9psuUvXr1QDC2b Wytb2mQj0syd5p5rGz+dbc8TFs1+2xY2rTTHwGehhXTygmzvE2rBmHJ9Zw== -----END CERTIFICATE-----Generated at Sun Jun 29 17:10:33 2025 by rpki-client