$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: 7bfaIsSFmDuxxIoh8yANnftXTqDEhZc4m+H4lr4pLA4= Subject key identifier: 48:9A:CD:EB:AA:29:88:A6:94:02:71:E3:21:0C:1C:21:4B:FD:15:B8 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6777CEEE00DBBD6B004A580D0189002381DFFAF3 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214025.roa Signing time: Sat 28 Mar 2026 09:54:13 +0000 ROA not before: Sat 28 Mar 2026 09:49:13 +0000 ROA not after: Sat 27 Mar 2027 09:54:13 +0000 asID: 214025 IP address blocks: 40.27.175.0/24 maxlen: 24 40.183.109.0/24 maxlen: 24 40.183.155.0/24 maxlen: 24 40.183.197.0/24 maxlen: 24 40.183.208.0/24 maxlen: 24 40.183.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 10:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:77:ce:ee:00:db:bd:6b:00:4a:58:0d:01:89:00:23:81:df:fa:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Mar 28 09:49:13 2026 GMT Not After : Mar 27 09:54:13 2027 GMT Subject: CN=489ACDEBAA2988A6940271E3210C1C214BFD15B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:82:41:df:82:a5:27:1f:ff:87:4f:a5:90:2d: b3:f0:7e:40:a4:08:94:ec:e4:82:a1:68:67:59:eb: d3:56:aa:81:93:2e:13:ec:9d:e3:a4:50:a0:49:79: 15:88:51:06:5a:3f:a6:e1:72:30:db:cd:71:29:4c: 1c:29:e2:55:7b:6e:2b:90:ce:34:bc:a5:58:31:93: 09:1c:9d:1f:5c:be:c4:88:8e:25:e1:af:f0:76:03: 72:14:f7:e0:94:74:db:93:8b:4c:3f:66:9c:40:38: 6a:59:11:db:1d:a8:80:c6:e8:c7:1b:4c:1e:cc:dd: 2a:62:d3:59:d1:d4:32:43:92:3c:1c:1a:49:b0:48: c2:cd:49:6d:34:04:b3:ee:fb:65:58:74:4f:9e:07: 69:70:cd:c1:76:78:8a:78:c9:c9:fe:3f:43:23:27: 81:28:88:7e:87:f0:76:39:6e:77:24:75:98:12:f7: eb:58:f8:9f:6a:9d:95:b5:93:3e:e2:5c:31:81:4a: ba:87:69:45:8d:35:b0:ea:16:93:68:32:74:5c:d0: 4e:75:73:7a:be:02:eb:c2:e3:e6:e9:aa:2f:7e:62: f3:39:e3:5f:10:6e:13:ce:8c:91:c6:63:b3:6c:06: 64:2b:26:1b:25:7f:ff:1b:de:bc:b5:fa:ce:fd:e0: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9A:CD:EB:AA:29:88:A6:94:02:71:E3:21:0C:1C:21:4B:FD:15:B8 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.175.0/24 40.183.109.0/24 40.183.155.0/24 40.183.197.0/24 40.183.208.0/23 Signature Algorithm: sha256WithRSAEncryption 98:54:6b:b4:90:ec:b8:4c:fc:1f:d3:9b:36:49:88:94:7b:7a: d7:d7:28:db:cf:60:e4:19:8c:2f:f1:62:f2:91:00:fe:f1:29: a2:09:13:5e:d3:ca:ab:8d:9a:c3:21:b5:76:23:b3:3e:3e:6a: 63:2f:f9:39:93:57:33:f3:bb:a0:db:f7:9e:48:50:ca:73:a3: d0:3b:4a:37:f7:9f:fe:6c:b8:70:65:17:74:29:ed:8d:06:03: 4a:72:28:b3:ae:e2:ac:cf:75:f7:62:bd:a6:1f:8d:35:a2:d6: 31:de:4d:1a:8d:44:ba:9e:03:c7:45:c9:9b:dd:b6:f5:ea:94: cc:8c:4b:bb:e0:f0:f1:d4:18:79:ea:20:8c:62:6b:48:9f:eb: 97:38:e9:61:56:3a:a7:19:09:e3:e3:be:7b:3f:b2:a5:7f:5b: 0d:b4:83:10:3e:33:f6:3a:f9:34:86:c1:25:c1:91:d4:d7:3a: 19:49:1b:3b:85:c5:30:a2:1a:10:9e:6c:f1:9f:ec:cd:a0:a3: 17:94:38:fe:e5:b5:97:00:cc:b2:7e:4a:09:0c:7b:d7:24:3a: 3e:13:41:e9:ba:58:7d:ba:5e:9d:09:a6:ae:8a:e4:88:00:64: fb:3a:40:09:d2:1a:b3:41:22:2b:21:2b:d8:ec:79:c3:f2:67: fd:41:30:57 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUZ3fO7gDbvWsASlgNAYkAI4Hf+vMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwMzI4MDk0OTEzWhcNMjcwMzI3MDk1NDEz WjAzMTEwLwYDVQQDEyg0ODlBQ0RFQkFBMjk4OEE2OTQwMjcxRTMyMTBDMUMyMTRC RkQxNUI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4JB34KlJx// h0+lkC2z8H5ApAiU7OSCoWhnWevTVqqBky4T7J3jpFCgSXkViFEGWj+m4XIw281x KUwcKeJVe24rkM40vKVYMZMJHJ0fXL7EiI4l4a/wdgNyFPfglHTbk4tMP2acQDhq WRHbHaiAxujHG0wezN0qYtNZ0dQyQ5I8HBpJsEjCzUltNASz7vtlWHRPngdpcM3B dniKeMnJ/j9DIyeBKIh+h/B2OW53JHWYEvfrWPifap2VtZM+4lwxgUq6h2lFjTWw 6haTaDJ0XNBOdXN6vgLrwuPm6aovfmLzOeNfEG4TzoyRxmOzbAZkKyYbJX//G968 tfrO/eBpsQIDAQABo4IClzCCApMwHQYDVR0OBBYEFEiazeuqKYimlAJx4yEMHCFL /RW4MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEACgbrwMEACi3bQMEACi3mwMEACi3 xQMEASi30DANBgkqhkiG9w0BAQsFAAOCAQEAmFRrtJDsuEz8H9ObNkmIlHt619co 289g5BmML/Fi8pEA/vEpogkTXtPKq42awyG1diOzPj5qYy/5OZNXM/O7oNv3nkhQ ynOj0DtKN/ef/my4cGUXdCntjQYDSnIos67irM9192K9ph+NNaLWMd5NGo1Eup4D x0XJm9229eqUzIxLu+Dw8dQYeeogjGJrSJ/rlzjpYVY6pxkJ4+O+ez+ypX9bDbSD ED4z9jr5NIbBJcGR1Nc6GUkbO4XFMKIaEJ5s8Z/szaCjF5Q4/uW1lwDMsn5KCQx7 1yQ6PhNB6bpYfbpenQmmrorkiABk+zpACdIas0EiKyEr2Ox5w/Jn/UEwVw== -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:25 2026 by rpki-client