$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: i5bhxnoMLXraoMHgBMhei2JJcrDyEwlteBp+Nk1g66E= Subject key identifier: 8D:46:D3:0B:BD:A6:D5:9A:A9:AC:B5:5B:CC:19:39:FF:C7:22:FC:A3 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5B91E3E2421338CB875E10C6FC4F53030C9B0A84 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa Signing time: Wed 24 Sep 2025 05:31:06 +0000 ROA not before: Wed 24 Sep 2025 05:26:06 +0000 ROA not after: Wed 23 Sep 2026 05:31:06 +0000 asID: 205886 IP address blocks: 40.27.88.0/24 maxlen: 24 40.27.174.0/24 maxlen: 24 40.27.226.0/24 maxlen: 24 40.27.243.0/24 maxlen: 24 40.223.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 13:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:91:e3:e2:42:13:38:cb:87:5e:10:c6:fc:4f:53:03:0c:9b:0a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 24 05:26:06 2025 GMT Not After : Sep 23 05:31:06 2026 GMT Subject: CN=8D46D30BBDA6D59AA9ACB55BCC1939FFC722FCA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:11:b3:99:fb:84:ba:04:4a:99:dd:d0:7b:54: e4:02:6d:87:d7:30:50:5f:0d:c1:ab:f7:7e:8b:4f: c9:d8:10:ed:ff:2f:fe:3a:f3:e8:f5:66:af:1e:06: d8:4a:13:e3:92:a5:c9:6b:15:60:42:39:83:da:7a: 2e:a3:2b:49:f1:ce:10:1b:2a:27:4a:84:ec:18:4f: 2f:d0:10:5b:70:9e:ea:ca:aa:dd:e5:2c:4b:47:3d: c3:08:e1:3c:f1:7e:40:a6:82:37:81:54:af:07:52: 28:16:85:b6:65:28:a4:a2:0b:09:ec:25:69:cf:21: 6d:db:aa:1e:39:85:9c:72:39:c7:02:53:a1:fe:3d: ba:e0:39:c8:ec:06:99:35:a2:ff:43:90:61:d5:ac: 59:bc:b9:71:2e:4a:ff:82:d8:6f:d6:4e:d3:5e:f3: 22:a0:8c:d9:c9:e0:6a:73:ea:17:b4:ac:73:44:31: 9b:55:c8:ea:84:52:70:97:13:39:94:31:54:d3:7f: f1:c4:da:cc:b3:7b:9b:8c:5c:48:0d:f1:1c:1c:96: b6:49:e6:0a:10:e2:bb:dc:90:93:b2:98:e3:ca:a2: 6e:a4:85:cd:53:b1:65:60:2f:b3:6a:92:22:92:b2: 5c:62:17:1b:dd:a7:3f:44:a3:4d:80:97:48:a8:2e: 9c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:D3:0B:BD:A6:D5:9A:A9:AC:B5:5B:CC:19:39:FF:C7:22:FC:A3 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.88.0/24 40.27.174.0/24 40.27.226.0/24 40.27.243.0/24 40.223.21.0/24 Signature Algorithm: sha256WithRSAEncryption 93:5f:ed:a5:07:2c:09:e1:4d:fb:53:06:81:b5:80:43:bd:1f: 4a:bb:c9:a5:4c:ab:9c:a8:ff:80:0b:e8:57:dc:27:9b:03:25: 0b:08:21:8a:9c:4b:23:fd:54:84:88:fa:a5:d6:3d:ed:a9:c7: 28:dd:34:49:25:90:ac:5a:55:52:f8:d9:23:af:e6:f9:d4:fd: 94:a2:7e:c5:ac:c7:61:dd:44:d1:93:20:83:0b:ba:b0:e5:c4: 9c:79:38:cc:af:b9:31:de:fb:c0:c3:7a:90:19:3f:c3:fb:0f: 5e:c0:32:5d:61:c4:fa:61:98:d7:4d:52:b3:b2:de:86:31:de: 39:bd:4e:59:db:73:54:f9:19:f0:a8:73:a3:d9:93:06:51:21: 19:ef:98:bc:b1:dc:9a:a4:85:ac:3f:cf:a6:e9:1f:48:76:3a: ad:85:8b:32:0a:21:0c:c4:95:22:42:4b:a8:17:93:de:54:1c: 41:ab:65:c7:29:02:c9:4f:1c:37:b8:9e:31:39:e7:ce:c4:4d: e5:9a:2a:d3:ca:18:af:12:97:cb:a0:51:23:4c:ad:22:0e:07: 56:53:14:59:5a:4d:89:c0:e7:05:3b:de:67:d0:c5:5a:47:fd: cd:35:48:39:00:6e:ab:2c:69:a9:d2:a8:99:3b:f6:ea:54:7f: 42:d8:4b:5d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUW5Hj4kITOMuHXhDG/E9TAwybCoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTI0MDUyNjA2WhcNMjYwOTIzMDUzMTA2 WjAzMTEwLwYDVQQDEyg4RDQ2RDMwQkJEQTZENTlBQTlBQ0I1NUJDQzE5MzlGRkM3 MjJGQ0EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BGzmfuEugRK md3Qe1TkAm2H1zBQXw3Bq/d+i0/J2BDt/y/+OvPo9WavHgbYShPjkqXJaxVgQjmD 2nouoytJ8c4QGyonSoTsGE8v0BBbcJ7qyqrd5SxLRz3DCOE88X5ApoI3gVSvB1Io FoW2ZSikogsJ7CVpzyFt26oeOYWccjnHAlOh/j264DnI7AaZNaL/Q5Bh1axZvLlx Lkr/gthv1k7TXvMioIzZyeBqc+oXtKxzRDGbVcjqhFJwlxM5lDFU03/xxNrMs3ub jFxIDfEcHJa2SeYKEOK73JCTspjjyqJupIXNU7FlYC+zapIikrJcYhcb3ac/RKNN gJdIqC6cIQIDAQABo4IClzCCApMwHQYDVR0OBBYEFI1G0wu9ptWaqay1W8wZOf/H IvyjMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNTg4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEACgbWAMEACgbrgMEACgb4gMEACgb 8wMEACjfFTANBgkqhkiG9w0BAQsFAAOCAQEAk1/tpQcsCeFN+1MGgbWAQ70fSrvJ pUyrnKj/gAvoV9wnmwMlCwghipxLI/1UhIj6pdY97anHKN00SSWQrFpVUvjZI6/m +dT9lKJ+xazHYd1E0ZMggwu6sOXEnHk4zK+5Md77wMN6kBk/w/sPXsAyXWHE+mGY 101Ss7LehjHeOb1OWdtzVPkZ8Khzo9mTBlEhGe+YvLHcmqSFrD/PpukfSHY6rYWL MgohDMSVIkJLqBeT3lQcQatlxykCyU8cN7ieMTnnzsRN5Zoq08oYrxKXy6BRI0yt Ig4HVlMUWVpNicDnBTveZ9DFWkf9zTVIOQBuqyxpqdKomTv26lR/QthLXQ== -----END CERTIFICATE-----Generated at Sun Oct 19 20:04:36 2025 by rpki-client