$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399955.roa File: AS399955.roa (raw, json) Hash identifier: /gVJ/0ihAirvLfaujhrC2P58Y5wYvnDzaiItHAf2aAI= Subject key identifier: 54:AE:11:22:2F:35:5E:45:26:46:06:5E:82:DE:5E:2B:6D:51:4E:E0 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 165026CCA46FB4B1437530F7F20C9FEE9CE646CA Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399955.roa Signing time: Thu 30 Apr 2026 12:14:10 +0000 ROA not before: Thu 30 Apr 2026 12:09:10 +0000 ROA not after: Thu 29 Apr 2027 12:14:10 +0000 asID: 399955 IP address blocks: 40.27.36.0/22 maxlen: 24 40.27.160.0/22 maxlen: 24 40.27.184.0/22 maxlen: 24 40.27.196.0/22 maxlen: 24 40.183.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 15:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:50:26:cc:a4:6f:b4:b1:43:75:30:f7:f2:0c:9f:ee:9c:e6:46:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 30 12:09:10 2026 GMT Not After : Apr 29 12:14:10 2027 GMT Subject: CN=54AE11222F355E452646065E82DE5E2B6D514EE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d1:c6:13:a2:68:f7:32:94:d9:b4:bd:2a:5b: 6c:84:31:6d:df:f7:8f:84:e2:09:02:88:eb:aa:0e: 5c:5b:55:35:74:14:98:3d:b0:72:5f:2d:8b:28:45: ff:42:46:f3:2f:64:46:0c:ec:95:9b:bc:63:db:80: 83:e7:78:3e:3e:13:7c:30:83:46:d0:e8:1b:03:b5: 35:1d:f5:9c:ea:81:a9:a0:ac:59:2d:70:48:1e:3d: 8e:24:2f:7c:bf:5e:db:78:1f:96:71:a2:6b:97:77: 14:ce:8a:1d:78:e1:dd:3e:85:96:e6:cd:01:39:30: ce:e7:d4:09:21:2e:93:c0:70:3c:da:4f:1e:bd:62: 81:10:40:e2:9f:dc:03:ae:54:a0:8e:8b:8b:42:19: 98:25:4c:71:92:d9:ee:c2:09:55:67:78:4c:af:d1: 03:4a:8f:b2:5f:a7:2c:3f:53:9b:56:92:c9:75:5b: 83:ee:9a:2f:bb:cb:80:4c:de:71:72:2e:c0:3e:87: bd:30:1b:3d:93:28:fd:e6:4d:69:e3:0d:fc:0e:0e: 1b:ad:bc:d6:13:50:01:38:30:a0:79:17:0b:a1:ed: 1d:45:64:24:4f:78:71:07:3e:7b:55:41:99:c3:c3: 67:8a:4c:cd:6d:ea:87:30:b8:5d:d9:89:26:a2:b1: 5a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AE:11:22:2F:35:5E:45:26:46:06:5E:82:DE:5E:2B:6D:51:4E:E0 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399955.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.36.0/22 40.27.160.0/22 40.27.184.0/22 40.27.196.0/22 40.183.202.0/23 Signature Algorithm: sha256WithRSAEncryption 96:6f:6d:da:ba:d6:a5:6f:9c:01:89:82:4b:71:25:21:2c:19: 15:d9:93:18:05:80:af:ec:b0:2c:8c:bd:d4:18:81:af:68:cb: 84:f7:f7:76:86:8b:bd:41:2d:40:d4:7e:15:c4:e8:1f:37:3a: cc:48:3f:8b:0a:dc:c7:ce:37:44:c2:6b:77:18:28:1d:d2:be: ce:9d:66:59:8e:fc:76:7e:83:75:bd:b6:ac:1c:01:99:b6:34: 13:28:41:62:ed:78:93:d7:90:dd:89:d7:b5:fc:59:d0:94:bc: 3e:8b:f2:d6:df:45:41:d3:c3:27:34:11:be:44:d1:25:80:db: 01:c4:d8:a4:09:3d:24:aa:85:8a:01:db:e8:bb:d1:84:45:ec: 7c:65:df:99:8f:f8:6c:76:f6:5b:50:39:ed:26:cd:ac:9d:df: 4d:e4:67:6c:cc:3b:48:39:e9:f8:00:86:a9:03:39:c7:5d:a5: 8e:10:0e:81:52:79:b7:80:c1:ea:9d:46:d4:ff:b6:04:15:5d: f6:0b:57:6e:49:c4:aa:6d:85:23:77:c6:db:b9:4d:9b:ad:4f: 63:67:9a:b3:58:b7:d1:59:1e:4c:c7:78:26:c3:e8:89:0a:4f: 8a:6a:c6:c1:09:99:a6:cc:40:a8:ed:34:30:ad:a3:54:53:af: 0b:2a:f5:a7 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUFlAmzKRvtLFDdTD38gyf7pzmRsowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDMwMTIwOTEwWhcNMjcwNDI5MTIxNDEw WjAzMTEwLwYDVQQDEyg1NEFFMTEyMjJGMzU1RTQ1MjY0NjA2NUU4MkRFNUUyQjZE NTE0RUUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59HGE6Jo9zKU 2bS9KltshDFt3/ePhOIJAojrqg5cW1U1dBSYPbByXy2LKEX/QkbzL2RGDOyVm7xj 24CD53g+PhN8MING0OgbA7U1HfWc6oGpoKxZLXBIHj2OJC98v17beB+WcaJrl3cU zoodeOHdPoWW5s0BOTDO59QJIS6TwHA82k8evWKBEEDin9wDrlSgjouLQhmYJUxx ktnuwglVZ3hMr9EDSo+yX6csP1ObVpLJdVuD7povu8uATN5xci7APoe9MBs9kyj9 5k1p4w38Dg4brbzWE1ABODCgeRcLoe0dRWQkT3hxBz57VUGZw8NnikzNbeqHMLhd 2YkmorFanwIDAQABo4IClzCCApMwHQYDVR0OBBYEFFSuESIvNV5FJkYGXoLeXitt UU7gMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzM5OTk1NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAigbJAMEAigboAMEAigbuAMEAigb xAMEASi3yjANBgkqhkiG9w0BAQsFAAOCAQEAlm9t2rrWpW+cAYmCS3ElISwZFdmT GAWAr+ywLIy91BiBr2jLhPf3doaLvUEtQNR+FcToHzc6zEg/iwrcx843RMJrdxgo HdK+zp1mWY78dn6Ddb22rBwBmbY0EyhBYu14k9eQ3YnXtfxZ0JS8Povy1t9FQdPD JzQRvkTRJYDbAcTYpAk9JKqFigHb6LvRhEXsfGXfmY/4bHb2W1A57SbNrJ3fTeRn bMw7SDnp+ACGqQM5x12ljhAOgVJ5t4DB6p1G1P+2BBVd9gtXbknEqm2FI3fG27lN m61PY2eas1i30VkeTMd4JsPoiQpPimrGwQmZpsxAqO00MK2jVFOvCyr1pw== -----END CERTIFICATE-----Generated at Wed May 13 00:35:31 2026 by rpki-client