$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: vVZRbfaCIhoUbAKOdFxptrJW9r+Fv6IcYsdGZOyEkn4= Subject key identifier: DC:47:F1:68:50:B6:DD:FD:04:08:93:A8:1B:5E:F6:78:A5:66:F5:12 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 0A51EFC56B541991F738248DCBD3B4F12763ECCE Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa Signing time: Tue 23 Sep 2025 09:37:39 +0000 ROA not before: Tue 23 Sep 2025 09:32:39 +0000 ROA not after: Tue 22 Sep 2026 09:37:39 +0000 asID: 25198 IP address blocks: 40.27.169.0/24 maxlen: 24 40.27.208.0/24 maxlen: 24 40.183.143.0/24 maxlen: 24 40.183.159.0/24 maxlen: 24 40.183.214.0/24 maxlen: 24 40.223.80.0/24 maxlen: 24 40.223.86.0/24 maxlen: 24 40.223.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 13:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:51:ef:c5:6b:54:19:91:f7:38:24:8d:cb:d3:b4:f1:27:63:ec:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 23 09:32:39 2025 GMT Not After : Sep 22 09:37:39 2026 GMT Subject: CN=DC47F16850B6DDFD040893A81B5EF678A566F512 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:94:bf:6a:fd:4f:22:21:17:3f:82:7e:3e:47: 23:ef:1b:23:0d:b6:0d:9b:3f:5a:8e:e0:84:90:5c: b2:16:3d:05:2b:80:64:be:04:f6:7d:b2:ba:3c:be: df:fb:de:b8:e0:ab:7d:9e:8b:e4:9f:f0:c5:7f:bf: cd:cb:01:21:e4:86:a4:b8:bd:17:d3:0e:fe:92:4e: 59:09:5b:c5:80:ed:dc:82:d5:26:1d:14:21:b4:6a: 9c:aa:e5:2b:75:2f:09:92:4a:f6:f3:8a:42:86:5e: 6c:e6:4d:40:43:a6:18:9b:c0:de:36:40:42:e8:c2: a1:64:28:40:ab:b3:89:3c:99:bc:20:4f:07:3a:6b: d7:1b:71:59:2f:1a:f6:b6:81:b1:45:64:e5:52:78: b3:af:e3:a0:bd:48:c6:d0:16:71:f3:92:6e:dc:4d: 85:c0:a2:2f:9e:f6:bf:aa:d7:00:fb:e6:4a:ac:b6: dd:34:2f:0a:41:43:57:24:0f:3d:8e:5d:69:6a:a9: 90:a4:d4:1c:93:20:0b:01:34:65:89:51:17:e4:cf: 8c:e4:7c:43:7c:d7:f6:71:a5:24:9f:68:89:54:cf: 23:de:1e:79:98:5b:01:ca:29:96:be:5f:4a:7c:9c: 49:5a:63:d9:3a:ff:69:84:05:b6:5e:85:02:6b:ff: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:47:F1:68:50:B6:DD:FD:04:08:93:A8:1B:5E:F6:78:A5:66:F5:12 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.169.0/24 40.27.208.0/24 40.183.143.0/24 40.183.159.0/24 40.183.214.0/24 40.223.80.0/24 40.223.86.0/24 40.223.188.0/24 Signature Algorithm: sha256WithRSAEncryption 27:cc:56:47:fe:24:6c:66:ac:b7:8e:71:8c:73:50:d2:4c:52: 17:12:c8:fc:02:b0:32:4c:1a:bf:ba:85:09:2a:7a:9e:d2:ba: 8b:37:94:65:22:93:91:a0:9c:97:b8:a6:fa:42:85:28:95:5e: c6:34:cb:3a:a0:d3:a2:79:96:38:09:10:2a:98:c8:aa:4a:c0: f8:ee:e9:a4:5b:31:69:4a:a6:52:a6:57:cc:4f:4f:26:87:19: 7a:52:48:e9:87:0e:dd:7a:6c:3d:22:f1:82:63:52:31:6f:ea: 2c:37:69:29:7b:ad:a6:f2:a4:be:68:65:52:90:36:df:61:a9: 74:87:e8:fd:4f:14:3e:aa:61:07:c6:2a:e4:1b:9f:24:c9:94: 3d:0c:3a:f2:c2:5d:6d:02:c1:e1:08:fb:a4:da:fd:b8:77:13: f3:20:21:96:47:84:c6:1c:a5:99:79:db:0d:c1:74:74:d4:f2: 32:5c:6a:2e:64:7f:5b:3b:0d:61:16:61:95:7d:fa:a9:6d:81: fb:83:8c:9d:dd:31:80:fe:bb:2e:95:cb:a8:a7:2d:b7:c4:db: c4:47:a7:8b:62:d5:00:70:01:7a:3f:d9:04:25:c7:db:09:66: fa:10:e6:06:aa:cc:b7:2d:ce:91:a3:27:49:d6:a1:f5:a3:df: 62:7c:de:02 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIUClHvxWtUGZH3OCSNy9O08Sdj7M4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTIzMDkzMjM5WhcNMjYwOTIyMDkzNzM5 WjAzMTEwLwYDVQQDEyhEQzQ3RjE2ODUwQjZEREZEMDQwODkzQTgxQjVFRjY3OEE1 NjZGNTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45S/av1PIiEX P4J+Pkcj7xsjDbYNmz9ajuCEkFyyFj0FK4BkvgT2fbK6PL7f+9644Kt9novkn/DF f7/NywEh5IakuL0X0w7+kk5ZCVvFgO3cgtUmHRQhtGqcquUrdS8Jkkr284pChl5s 5k1AQ6YYm8DeNkBC6MKhZChAq7OJPJm8IE8HOmvXG3FZLxr2toGxRWTlUnizr+Og vUjG0BZx85Ju3E2FwKIvnva/qtcA++ZKrLbdNC8KQUNXJA89jl1paqmQpNQckyAL ATRliVEX5M+M5HxDfNf2caUkn2iJVM8j3h55mFsByimWvl9KfJxJWmPZOv9phAW2 XoUCa/+5wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxH8WhQtt39BAiTqBte9nil ZvUSMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEkG CCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAKBupAwQAKBvQAwQAKLePAwQAKLef AwQAKLfWAwQAKN9QAwQAKN9WAwQAKN+8MA0GCSqGSIb3DQEBCwUAA4IBAQAnzFZH /iRsZqy3jnGMc1DSTFIXEsj8ArAyTBq/uoUJKnqe0rqLN5RlIpORoJyXuKb6QoUo lV7GNMs6oNOieZY4CRAqmMiqSsD47umkWzFpSqZSplfMT08mhxl6Ukjphw7demw9 IvGCY1Ixb+osN2kpe62m8qS+aGVSkDbfYal0h+j9TxQ+qmEHxirkG58kyZQ9DDry wl1tAsHhCPuk2v24dxPzICGWR4TGHKWZedsNwXR01PIyXGouZH9bOw1hFmGVffqp bYH7g4yd3TGA/rsulcuopy23xNvER6eLYtUAcAF6P9kEJcfbCWb6EOYGqsy3Lc6R oydJ1qH1o99ifN4C -----END CERTIFICATE-----Generated at Mon Oct 20 06:38:36 2025 by rpki-client