$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199524.roa File: AS199524.roa (raw, json) Hash identifier: K95Ew5+7Ypk64AHAQQlCVl1w2UI4OehZrvTEd6Srl70= Subject key identifier: BB:8A:BE:0E:A6:72:B6:8D:CC:EE:D7:1E:A9:9E:FF:33:98:A4:41:1F Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5C30396C18B21BB1A453E57F6252FED202E649DC Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199524.roa Signing time: Thu 12 Nov 2026 08:36:22 +0000 ROA not before: Thu 12 Nov 2026 08:31:22 +0000 ROA not after: Thu 11 Nov 2027 08:36:22 +0000 asID: 199524 IP address blocks: 40.27.40.0/24 maxlen: 24 40.27.41.0/24 maxlen: 24 40.27.42.0/24 maxlen: 24 40.27.43.0/24 maxlen: 24 40.27.44.0/24 maxlen: 24 40.27.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 06:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:30:39:6c:18:b2:1b:b1:a4:53:e5:7f:62:52:fe:d2:02:e6:49:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 12 08:31:22 2026 GMT Not After : Nov 11 08:36:22 2027 GMT Subject: CN=BB8ABE0EA672B68DCCEED71EA99EFF3398A4411F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:30:d5:a3:ac:f8:91:74:98:2d:e7:89:01:d5: 20:02:63:97:af:35:a1:20:12:a7:29:14:a6:66:5e: f6:ff:ec:94:07:93:56:e0:2e:c5:72:c2:7a:d6:8d: 52:1d:75:5c:b8:f2:53:a6:82:7b:32:9c:2b:1b:64: a0:c3:7c:e4:be:f7:32:74:5b:ac:e3:04:61:ce:8b: c0:7c:40:fe:bd:24:71:d0:87:4f:44:b8:83:e7:b4: ab:31:43:33:e4:77:0c:ee:89:96:0b:31:25:b4:21: 60:a1:9b:ec:de:84:47:f8:1e:8d:63:24:66:8d:1b: 88:53:37:56:c0:55:5c:d1:71:fe:a4:4a:7c:dd:94: 27:76:a8:7a:db:f9:ca:a6:16:e8:66:01:5d:5e:76: 65:53:c6:5e:18:3c:5b:8e:92:76:6d:56:92:93:a0: 27:32:10:d5:0b:d7:62:ac:77:86:7a:9b:43:0b:0a: 1e:52:36:ab:cc:a6:75:da:b2:91:e4:7c:43:13:a9: 12:c2:11:be:b8:57:92:a0:47:07:50:d8:35:18:4e: 4d:d6:5a:9a:b6:db:91:05:b7:58:84:20:d4:7e:e8: da:6a:ef:b8:c8:e8:9d:d6:88:4f:eb:1f:5b:23:ad: c7:10:8e:92:ae:14:e8:04:71:09:08:c5:b8:3c:08: 48:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8A:BE:0E:A6:72:B6:8D:CC:EE:D7:1E:A9:9E:FF:33:98:A4:41:1F X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS199524.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.40.0-40.27.45.255 Signature Algorithm: sha256WithRSAEncryption 7d:58:46:eb:64:70:60:dd:f2:a9:ae:cc:93:0e:37:00:16:78: 90:d8:80:bc:7b:04:2e:8b:69:72:5f:b6:8a:96:d2:a5:3b:6e: 0e:99:15:48:9b:42:aa:bc:da:0b:fc:d3:c4:35:b8:52:c7:f8: b7:38:9e:d6:ad:32:fe:83:59:3d:55:b1:45:a5:d6:ea:36:d4: aa:06:1a:bf:8b:00:b8:4e:be:f4:5b:98:c8:ad:d5:d1:04:9d: 1b:95:71:1c:dd:f6:b5:26:e3:1a:2b:da:b5:26:92:8a:e4:e4: 87:78:e0:0b:ef:0d:9e:cb:7b:a8:f5:27:d8:61:a7:7d:3f:e9: d8:ae:5a:00:ab:55:09:23:46:d8:64:7e:68:d4:3f:bc:da:d0: f0:7e:2a:c3:15:ec:b8:d3:1b:64:a7:30:fe:d5:f6:37:70:72: 74:0e:d9:5d:ff:89:3d:be:4c:05:05:ff:03:69:6f:47:f5:21: bc:a1:9d:cd:bf:d3:7a:9f:87:a9:00:13:bc:e6:0e:48:44:9e: f9:c8:67:19:f0:f8:f9:32:21:9b:b1:39:67:12:ba:c9:65:b4: 66:cb:82:c6:6a:c4:c1:c6:79:25:19:21:d1:c9:80:cb:11:69: 75:73:66:de:08:31:2e:d8:ae:d6:e0:bf:ca:24:64:8e:fc:5a: 63:f5:51:14 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUXDA5bBiyG7GkU+V/YlL+0gLmSdwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMTEyMDgzMTIyWhcNMjcxMTExMDgzNjIy WjAzMTEwLwYDVQQDEyhCQjhBQkUwRUE2NzJCNjhEQ0NFRUQ3MUVBOTlFRkYzMzk4 QTQ0MTFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjDVo6z4kXSY LeeJAdUgAmOXrzWhIBKnKRSmZl72/+yUB5NW4C7FcsJ61o1SHXVcuPJTpoJ7Mpwr G2Sgw3zkvvcydFus4wRhzovAfED+vSRx0IdPRLiD57SrMUMz5HcM7omWCzEltCFg oZvs3oRH+B6NYyRmjRuIUzdWwFVc0XH+pEp83ZQndqh62/nKphboZgFdXnZlU8Ze GDxbjpJ2bVaSk6AnMhDVC9dirHeGeptDCwoeUjarzKZ12rKR5HxDE6kSwhG+uFeS oEcHUNg1GE5N1lqattuRBbdYhCDUfujaau+4yOid1ohP6x9bI63HEI6SrhToBHEJ CMW4PAhIeQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFLuKvg6mcraNzO7XHqme/zOY pEEfMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE5OTUyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQDKBsoAwQBKBssMA0GCSqGSIb3 DQEBCwUAA4IBAQB9WEbrZHBg3fKprsyTDjcAFniQ2IC8ewQui2lyX7aKltKlO24O mRVIm0KqvNoL/NPENbhSx/i3OJ7WrTL+g1k9VbFFpdbqNtSqBhq/iwC4Tr70W5jI rdXRBJ0blXEc3fa1JuMaK9q1JpKK5OSHeOAL7w2ey3uo9SfYYad9P+nYrloAq1UJ I0bYZH5o1D+82tDwfirDFey40xtkpzD+1fY3cHJ0Dtld/4k9vkwFBf8DaW9H9SG8 oZ3Nv9N6n4epABO85g5IRJ75yGcZ8Pj5MiGbsTlnErrJZbRmy4LGasTBxnklGSHR yYDLEWl1c2beCDEu2K7W4L/KJGSO/Fpj9VEU -----END CERTIFICATE-----Generated at Sun Nov 15 21:51:33 2026 by rpki-client