$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198087.roa File: AS198087.roa (raw, json) Hash identifier: qj8aAFZpB2e47FG3TpGb55/mdIZ8e7InIZunktWL8UA= Subject key identifier: 45:F8:4B:D8:1C:EC:47:F3:0D:E7:41:08:6C:BC:91:1A:A5:EA:A6:5E Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 065E3B2758CFD32C451D162082DA2C22ECE7A7D1 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198087.roa Signing time: Thu 26 Mar 2026 11:34:22 +0000 ROA not before: Thu 26 Mar 2026 11:29:22 +0000 ROA not after: Thu 25 Mar 2027 11:34:22 +0000 asID: 198087 IP address blocks: 64.188.21.0/24 maxlen: 24 69.12.93.0/24 maxlen: 24 72.11.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:5e:3b:27:58:cf:d3:2c:45:1d:16:20:82:da:2c:22:ec:e7:a7:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 26 11:29:22 2026 GMT Not After : Mar 25 11:34:22 2027 GMT Subject: CN=45F84BD81CEC47F30DE741086CBC911AA5EAA65E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9b:b0:77:0c:75:7f:f5:3c:d5:e7:5d:b8:8d: e6:78:13:9b:bd:24:e3:63:25:c1:cb:1f:1e:3b:47: 5b:89:f7:af:be:3a:ff:5b:5a:ae:a5:53:92:f2:4b: 0c:a7:83:e8:ad:b8:68:e6:e6:97:bf:f4:99:78:f2: 9a:be:d1:96:67:08:97:a9:fe:28:2c:5f:d9:c8:f6: 25:b2:96:74:c5:53:ab:82:95:e5:ab:bf:c9:b7:41: 67:30:4f:d4:ff:d4:6d:d0:7e:26:60:4b:bc:06:af: 90:34:bc:ad:36:32:32:49:3b:d0:08:0b:10:89:cf: 6d:1f:1a:d5:ba:4b:46:20:02:ff:e0:c1:96:3c:cc: 83:2d:a8:4a:8c:c8:82:de:25:43:3a:3b:a9:d9:c1: 02:8f:ac:97:93:38:74:7e:c1:df:e6:99:e8:18:f3: 4b:fb:22:9a:51:52:57:49:69:fb:c3:1a:eb:2f:1b: 0a:44:a5:a6:3d:3d:12:d1:1f:c4:53:15:a9:6a:fb: 80:58:3d:38:64:43:25:5e:02:d6:e6:36:a8:d1:ec: f8:a7:0f:f9:67:f8:ee:6d:9a:c8:5b:f1:6d:31:2a: ab:43:91:4b:d0:38:cf:db:fb:00:a7:c1:6a:17:1a: 65:44:61:7f:36:79:3c:0e:2f:c9:db:f9:12:3a:93: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F8:4B:D8:1C:EC:47:F3:0D:E7:41:08:6C:BC:91:1A:A5:EA:A6:5E X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198087.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.21.0/24 69.12.93.0/24 72.11.143.0/24 Signature Algorithm: sha256WithRSAEncryption 09:49:9b:7e:3f:10:18:1f:c5:a8:29:ce:18:cc:96:31:af:c8: c1:fd:55:73:4a:8c:76:31:93:bd:43:e2:4c:49:91:9d:eb:51: 15:67:16:ea:3b:23:37:27:e5:d8:60:7d:f3:8c:49:c4:e1:d7: 4d:16:c2:32:8f:99:f5:0a:10:ff:39:08:65:d3:dc:b3:b1:24: 94:8a:61:6b:35:35:98:45:71:7b:1d:5c:18:36:f7:4f:12:be: 15:a1:4b:35:50:a7:7d:84:e6:40:b5:b6:9b:ab:c9:56:e8:90: 4b:af:e4:6c:11:52:3f:b9:85:a2:5f:af:98:ad:59:03:ab:6d: 3c:65:ca:5f:43:78:22:67:b9:73:21:aa:94:2e:67:8b:f4:31: 39:c0:82:4a:93:d6:ba:cc:96:75:5a:9b:13:2d:a5:10:18:5d: 71:b0:7b:40:d2:c2:fc:5b:07:17:b6:16:ca:f9:a1:9a:0a:ca: f9:f9:2a:2d:af:cb:a1:6a:83:39:01:40:cc:3c:4b:35:4c:b1: f0:dd:5f:c0:66:3d:75:bc:c5:76:40:d0:f7:82:fa:a5:96:87: 07:7a:80:a3:1b:c0:7b:31:c6:0f:96:65:8b:23:d0:79:12:c5: 61:60:80:79:b7:a0:b7:54:b4:0d:d3:9a:f9:56:05:07:79:49: 1e:82:25:39 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUBl47J1jP0yxFHRYggtosIuznp9EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzI2MTEyOTIyWhcNMjcwMzI1MTEzNDIy WjAzMTEwLwYDVQQDEyg0NUY4NEJEODFDRUM0N0YzMERFNzQxMDg2Q0JDOTExQUE1 RUFBNjVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1puwdwx1f/U8 1edduI3meBObvSTjYyXByx8eO0dbifevvjr/W1qupVOS8ksMp4Porbho5uaXv/SZ ePKavtGWZwiXqf4oLF/ZyPYlspZ0xVOrgpXlq7/Jt0FnME/U/9Rt0H4mYEu8Bq+Q NLytNjIySTvQCAsQic9tHxrVuktGIAL/4MGWPMyDLahKjMiC3iVDOjup2cECj6yX kzh0fsHf5pnoGPNL+yKaUVJXSWn7wxrrLxsKRKWmPT0S0R/EUxWpavuAWD04ZEMl XgLW5jao0ez4pw/5Z/jubZrIW/FtMSqrQ5FL0DjP2/sAp8FqFxplRGF/Nnk8Di/J 2/kSOpMuTwIDAQABo4ICizCCAocwHQYDVR0OBBYEFEX4S9gc7EfzDedBCGy8kRql 6qZeMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE5ODA4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAEC8FQMEAEUMXQMEAEgLjzANBgkq hkiG9w0BAQsFAAOCAQEACUmbfj8QGB/FqCnOGMyWMa/Iwf1Vc0qMdjGTvUPiTEmR netRFWcW6jsjNyfl2GB984xJxOHXTRbCMo+Z9QoQ/zkIZdPcs7EklIphazU1mEVx ex1cGDb3TxK+FaFLNVCnfYTmQLW2m6vJVuiQS6/kbBFSP7mFol+vmK1ZA6ttPGXK X0N4Ime5cyGqlC5ni/QxOcCCSpPWusyWdVqbEy2lEBhdcbB7QNLC/FsHF7YWyvmh mgrK+fkqLa/LoWqDOQFAzDxLNUyx8N1fwGY9dbzFdkDQ94L6pZaHB3qAoxvAezHG D5ZliyPQeRLFYWCAebegt1S0DdOa+VYFB3lJHoIlOQ== -----END CERTIFICATE-----Generated at Thu Mar 26 17:46:03 2026 by rpki-client