$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: jI7uNElCPiAXbrQoEAq9/Q9+ATtKCVAzI+FC6O52vuA= Subject key identifier: A4:80:91:33:E8:D1:63:45:0D:41:90:F0:52:38:F4:01:24:17:08:67 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 5161A87343AEF5959BBE8D98AADF90CC756782F7 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa Signing time: Sat 09 Aug 2025 12:01:48 +0000 ROA not before: Sat 09 Aug 2025 11:56:48 +0000 ROA not after: Sat 08 Aug 2026 12:01:48 +0000 asID: 25198 IP address blocks: 23.226.139.0/24 maxlen: 24 23.226.142.0/24 maxlen: 24 64.50.189.0/24 maxlen: 24 66.63.172.0/24 maxlen: 24 67.210.107.0/24 maxlen: 24 67.215.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:61:a8:73:43:ae:f5:95:9b:be:8d:98:aa:df:90:cc:75:67:82:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 9 11:56:48 2025 GMT Not After : Aug 8 12:01:48 2026 GMT Subject: CN=A4809133E8D163450D4190F05238F40124170867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:83:19:84:b4:e3:21:70:35:fe:38:f3:83:13: b2:37:75:48:56:ad:70:e2:f5:8b:a4:42:30:11:43: 14:83:81:fd:99:f7:6a:72:13:07:a9:15:16:6c:a2: 4e:08:8b:9d:57:2d:46:75:17:6a:71:e5:f6:6b:a4: 97:d2:f9:47:12:8f:61:19:95:b7:67:f4:50:76:ed: ef:72:c3:fd:67:ea:ed:e7:45:93:fa:8a:b1:fb:ce: 7f:55:88:51:d8:96:a6:69:1a:f7:5c:f2:87:46:b5: 32:30:21:98:a3:4d:9e:bf:57:94:bb:0f:ae:7f:8c: 7c:45:42:11:76:64:97:b8:5c:02:19:c6:5b:b6:e1: be:ab:48:e1:a5:5b:c0:3b:0c:2b:ed:ea:d8:59:e1: cd:a9:a9:70:21:dc:57:6f:68:b9:a6:b7:6b:5e:df: 44:85:ba:79:6f:98:da:14:cd:e5:9f:4e:3e:cd:52: bb:c7:4e:e5:c9:e1:03:89:47:71:00:0b:f3:d9:d8: 23:85:8a:4e:1b:9f:0a:e8:9c:9b:39:b8:e6:0a:7d: c0:cb:73:bf:a1:7f:03:1c:6b:27:39:b1:b9:1f:1d: 59:1a:76:6f:c7:fc:f9:b1:a1:05:85:0f:ac:67:c7: 95:39:2d:e7:96:96:22:6c:50:a5:8e:70:2b:54:dc: 91:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:80:91:33:E8:D1:63:45:0D:41:90:F0:52:38:F4:01:24:17:08:67 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.139.0/24 23.226.142.0/24 64.50.189.0/24 66.63.172.0/24 67.210.107.0/24 67.215.240.0/24 Signature Algorithm: sha256WithRSAEncryption c7:a1:67:0c:0d:27:0a:50:aa:c7:be:0d:23:6e:38:3c:b3:8b: 83:eb:cd:97:3f:ce:74:59:2e:4c:52:5e:e0:ce:6c:0b:cb:7f: ec:91:61:97:d7:10:36:f4:cd:2e:10:47:7c:3c:63:a6:7e:2c: c4:5a:e8:ac:60:74:22:97:8a:a4:e5:8f:b8:da:0f:54:9f:60: cf:cb:ff:30:1a:e0:3f:94:1d:40:53:52:3a:06:99:2d:fd:62: 9e:61:51:35:34:0d:7e:dc:57:17:a5:41:c4:4e:ab:b2:f0:96: bb:fa:9b:f4:49:f6:b6:dc:aa:26:48:0e:91:5d:2b:d3:bf:09: ca:bf:98:32:0e:0d:4b:1c:c2:0e:9f:71:68:6f:b6:c6:3d:eb: 92:87:00:4b:fb:1d:19:e5:35:2d:86:80:2d:1b:8e:3d:1d:4a: 04:ce:8d:4a:f5:bb:79:af:2d:6e:35:4b:eb:f6:fa:41:de:14: 67:51:5e:1d:42:f0:63:08:bb:27:a0:b0:ff:98:72:73:db:33: d1:60:43:9b:64:c3:bc:20:57:c6:7e:a7:e1:d9:f2:9f:b1:07: 02:ff:8a:1e:1b:dc:41:bf:b9:9e:24:c1:61:97:cf:37:01:01: 38:56:9c:92:ae:f0:a3:56:e9:30:3b:e5:d8:0c:86:2f:88:0b: 86:2b:d4:c3 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUUWGoc0Ou9ZWbvo2Yqt+QzHVngvcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA5MTE1NjQ4WhcNMjYwODA4MTIwMTQ4 WjAzMTEwLwYDVQQDEyhBNDgwOTEzM0U4RDE2MzQ1MEQ0MTkwRjA1MjM4RjQwMTI0 MTcwODY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroMZhLTjIXA1 /jjzgxOyN3VIVq1w4vWLpEIwEUMUg4H9mfdqchMHqRUWbKJOCIudVy1GdRdqceX2 a6SX0vlHEo9hGZW3Z/RQdu3vcsP9Z+rt50WT+oqx+85/VYhR2JamaRr3XPKHRrUy MCGYo02ev1eUuw+uf4x8RUIRdmSXuFwCGcZbtuG+q0jhpVvAOwwr7erYWeHNqalw IdxXb2i5prdrXt9Ehbp5b5jaFM3ln04+zVK7x07lyeEDiUdxAAvz2dgjhYpOG58K 6JybObjmCn3Ay3O/oX8DHGsnObG5Hx1ZGnZvx/z5saEFhQ+sZ8eVOS3nlpYibFCl jnArVNyRaQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFKSAkTPo0WNFDUGQ8FI49AEk FwhnMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF+KLAwQAF+KOAwQAQDK9AwQAQj+s AwQAQ9JrAwQAQ9fwMA0GCSqGSIb3DQEBCwUAA4IBAQDHoWcMDScKUKrHvg0jbjg8 s4uD682XP850WS5MUl7gzmwLy3/skWGX1xA29M0uEEd8PGOmfizEWuisYHQil4qk 5Y+42g9Un2DPy/8wGuA/lB1AU1I6Bpkt/WKeYVE1NA1+3FcXpUHETquy8Ja7+pv0 Sfa23KomSA6RXSvTvwnKv5gyDg1LHMIOn3Fob7bGPeuShwBL+x0Z5TUthoAtG449 HUoEzo1K9bt5ry1uNUvr9vpB3hRnUV4dQvBjCLsnoLD/mHJz2zPRYEObZMO8IFfG fqfh2fKfsQcC/4oeG9xBv7meJMFhl883AQE4VpySrvCjVukwO+XYDIYviAuGK9TD -----END CERTIFICATE-----Generated at Sat Aug 23 14:41:25 2025 by rpki-client