$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: brk7/1pIFx5yg2+8XJ9Mn4BzMhoh6klqMPNTMgypSZw= Subject key identifier: 2E:29:C6:32:C9:DB:FA:D7:C7:0A:B5:58:5F:6A:9B:4F:E4:D2:80:C5 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5DC5859BD76269404072CC6FBEB9E2B57C6808D4 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS397423.roa Signing time: Tue 21 Apr 2026 09:29:59 +0000 ROA not before: Tue 21 Apr 2026 09:24:59 +0000 ROA not after: Tue 20 Apr 2027 09:29:59 +0000 asID: 397423 IP address blocks: 40.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 15:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c5:85:9b:d7:62:69:40:40:72:cc:6f:be:b9:e2:b5:7c:68:08:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 21 09:24:59 2026 GMT Not After : Apr 20 09:29:59 2027 GMT Subject: CN=2E29C632C9DBFAD7C70AB5585F6A9B4FE4D280C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:e7:21:0a:d6:3d:cc:2c:95:9d:21:cf:81: 01:09:42:6c:2b:21:d2:1c:ec:33:33:40:25:42:d8: 40:c1:86:97:18:fc:ef:3e:5f:df:91:f1:64:80:2a: 08:a6:3f:39:9c:b7:6d:d1:e7:b1:1a:85:13:5d:21: 8b:95:29:a1:8a:13:1b:09:13:a6:ee:80:b9:71:b6: 3d:58:f2:af:8c:c6:db:a7:c8:a1:16:45:7d:fa:c9: 36:e9:23:d9:13:5c:97:23:b4:a8:61:98:da:23:92: 76:49:c3:aa:0f:18:90:6f:1c:a9:8d:4a:2b:b2:c9: 4b:a8:01:62:7c:7b:00:00:4d:36:50:af:90:56:52: b1:b0:40:fd:a5:68:93:84:5b:64:9e:12:74:74:74: 23:0e:42:b6:9a:c4:68:4f:3a:29:5d:8d:3d:5c:ea: 2b:e1:a6:70:ca:c4:0d:ab:ce:2f:e8:ef:7c:ef:f2: d7:c7:e1:c5:01:26:cc:29:be:16:86:b5:7f:43:26: 86:87:5d:15:1a:ac:b2:4c:f8:f6:53:bc:bb:f3:4b: 66:60:4d:2a:2a:f3:39:f2:37:01:36:c0:97:b0:b3: 73:b8:0e:79:a6:db:3a:99:c4:4a:5c:dc:ef:a4:86: fe:ec:84:e1:70:4f:5e:93:d4:22:fd:d6:aa:5e:12: ab:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:29:C6:32:C9:DB:FA:D7:C7:0A:B5:58:5F:6A:9B:4F:E4:D2:80:C5 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.34.0/24 Signature Algorithm: sha256WithRSAEncryption 88:56:38:a4:76:a7:f1:14:8e:4d:4d:a4:fe:9f:59:c1:0b:9d: 29:ba:47:fd:c7:de:c1:ca:92:50:39:19:b4:a7:56:77:5b:a6: 35:31:dc:92:22:2f:da:c8:60:79:fe:69:9a:9b:72:c1:62:40: a6:72:4b:05:b2:54:ad:0f:ff:2c:57:4c:34:11:9c:d1:bd:14: 90:58:6b:49:29:73:f8:c3:c5:b0:d1:1e:33:db:6b:6b:84:ab: a1:68:64:72:28:90:6e:13:15:7a:f7:c8:eb:4c:84:0b:33:cb: ee:1d:f6:10:56:66:9c:d8:ca:bd:9e:73:2a:a1:74:a6:f9:f1: 49:09:01:27:03:c1:ca:44:e1:35:fb:a7:a4:ae:2c:9b:d8:e6: d3:fb:b0:1e:aa:7c:a1:9c:7d:3f:3f:97:38:42:2a:3f:62:1a: 23:4d:af:e0:7d:24:1e:28:35:48:41:a9:dc:5b:a5:23:73:a9: b0:43:77:ae:63:e1:f9:18:1b:9f:ab:c6:7a:fd:ac:fd:9b:72: 08:01:13:54:23:12:8e:5b:4f:4a:78:0a:a3:02:69:1f:86:ea: 49:c9:d3:ae:bf:ac:c1:84:1e:4d:e1:a2:31:15:4e:70:cd:2a: 62:a0:b4:0e:7b:67:4d:a2:a2:eb:0d:00:fe:07:fa:5c:e3:89: 04:77:dc:4b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUXcWFm9diaUBAcsxvvrnitXxoCNQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDIxMDkyNDU5WhcNMjcwNDIwMDkyOTU5 WjAzMTEwLwYDVQQDEygyRTI5QzYzMkM5REJGQUQ3QzcwQUI1NTg1RjZBOUI0RkU0 RDI4MEM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2nnIQrWPcws lZ0hz4EBCUJsKyHSHOwzM0AlQthAwYaXGPzvPl/fkfFkgCoIpj85nLdt0eexGoUT XSGLlSmhihMbCROm7oC5cbY9WPKvjMbbp8ihFkV9+sk26SPZE1yXI7SoYZjaI5J2 ScOqDxiQbxypjUorsslLqAFifHsAAE02UK+QVlKxsED9pWiThFtknhJ0dHQjDkK2 msRoTzopXY09XOor4aZwysQNq84v6O987/LXx+HFASbMKb4WhrV/QyaGh10VGqyy TPj2U7y780tmYE0qKvM58jcBNsCXsLNzuA55pts6mcRKXNzvpIb+7IThcE9ek9Qi /daqXhKrnQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFC4pxjLJ2/rXxwq1WF9qm0/k 0oDFMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbIjANBgkqhkiG9w0BAQsFAAOC AQEAiFY4pHan8RSOTU2k/p9ZwQudKbpH/cfewcqSUDkZtKdWd1umNTHckiIv2shg ef5pmptywWJApnJLBbJUrQ//LFdMNBGc0b0UkFhrSSlz+MPFsNEeM9tra4SroWhk ciiQbhMVevfI60yECzPL7h32EFZmnNjKvZ5zKqF0pvnxSQkBJwPBykThNfunpK4s m9jm0/uwHqp8oZx9Pz+XOEIqP2IaI02v4H0kHig1SEGp3FulI3OpsEN3rmPh+Rgb n6vGev2s/ZtyCAETVCMSjltPSngKowJpH4bqScnTrr+swYQeTeGiMRVOcM0qYqC0 DntnTaKi6w0A/gf6XOOJBHfcSw== -----END CERTIFICATE-----Generated at Tue May 12 22:17:26 2026 by rpki-client