$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa File: AS27176.roa (raw, json) Hash identifier: ARQMvUmrcqTgc8t4NzGPP97Bp/bzD3RyJ1VoJEA/HEU= Subject key identifier: A1:C1:E0:5B:30:43:F2:EB:CA:A8:C2:68:EC:EC:63:9B:C8:C1:1F:5B Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 394C69B1C86477CE8727FD7502F33B5B145C1632 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa Signing time: Tue 05 Aug 2025 15:11:37 +0000 ROA not before: Tue 05 Aug 2025 15:06:37 +0000 ROA not after: Tue 04 Aug 2026 15:11:37 +0000 asID: 27176 IP address blocks: 104.223.8.0/24 maxlen: 24 155.94.163.0/24 maxlen: 24 173.44.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:4c:69:b1:c8:64:77:ce:87:27:fd:75:02:f3:3b:5b:14:5c:16:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 5 15:06:37 2025 GMT Not After : Aug 4 15:11:37 2026 GMT Subject: CN=A1C1E05B3043F2EBCAA8C268ECEC639BC8C11F5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:66:79:0c:6b:69:89:c1:8a:81:15:01:8e:b8: a6:25:1e:48:ae:99:3e:29:b5:e5:06:f2:e7:7e:bf: e1:a4:f8:07:d6:2e:81:a5:87:63:6c:27:75:20:ef: 6a:9a:2f:01:be:c0:3a:28:22:0e:06:38:fc:02:18: 16:65:76:c8:8f:33:a0:a0:8d:2b:f5:3e:2c:f1:f1: 38:9e:dc:06:a2:e4:c3:cb:7a:9a:f9:88:cc:5a:72: b4:87:59:79:ee:b9:01:ae:21:e9:c2:75:d1:a5:68: d6:15:91:b1:de:15:5f:ed:cb:e5:ca:ff:31:62:b3: 93:1e:2e:3c:8c:89:f8:e7:e0:de:7f:d0:da:1f:0b: 55:18:3e:cd:ef:90:9b:cd:1e:e3:57:30:49:ce:f4: 8b:58:25:27:1a:bd:40:fe:4e:9f:7e:71:22:b1:76: b3:e7:21:24:c3:25:50:b2:ba:ec:21:5a:fc:19:24: 6b:a5:d5:46:31:c6:de:1d:01:ba:e3:13:6c:39:30: 76:f8:1a:34:c9:25:83:2d:7c:0c:bc:e7:ad:35:20: ea:06:56:3c:ac:86:87:6b:ca:a7:14:0c:12:2c:13: 90:7c:57:6e:59:15:5d:77:ba:5b:f8:40:00:dc:0f: 39:44:ff:c0:58:18:b5:7b:28:b7:84:d5:92:c2:5c: 24:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:C1:E0:5B:30:43:F2:EB:CA:A8:C2:68:EC:EC:63:9B:C8:C1:1F:5B X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS27176.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.223.8.0/24 155.94.163.0/24 173.44.35.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:42:34:a6:39:84:32:87:ea:e5:46:3b:41:aa:93:3b:0f:02: c5:90:f0:9f:e5:12:56:86:65:13:f9:40:cf:f3:07:ef:d2:fb: 56:63:c5:cd:eb:02:6e:a8:a6:ed:7d:c3:0d:58:0a:60:8e:93: 85:e4:ea:1d:1d:68:8b:98:b3:67:f5:c8:a9:ac:0c:c9:94:5c: 0d:25:be:50:fe:25:2a:07:06:49:8a:5a:ca:7d:00:8f:1d:9d: cf:b5:69:b6:4e:08:b0:9d:37:9f:dd:a8:11:10:52:f2:eb:07: c1:49:ed:fe:f5:4d:03:ec:ad:bd:58:fd:ea:bd:95:5f:b8:04: 20:8a:ac:60:ec:8c:20:a7:cd:fd:fe:4f:bd:17:76:b2:33:1d: 32:72:8a:a9:9d:35:02:18:a4:2b:43:07:a2:72:a2:02:b8:b8: b2:80:46:42:54:ee:cf:9b:14:f2:97:d5:2d:4c:68:8d:ed:38: 0b:8a:eb:64:83:d1:74:17:e3:75:ff:0d:12:01:6b:61:dd:c8: 95:7d:1b:ac:95:7c:4a:01:b5:03:41:de:e1:55:7a:b4:74:c8: 77:c7:46:d8:b3:02:4d:f7:74:9e:2f:f5:c5:88:ea:c3:4e:18: b9:30:04:8d:5f:1e:ea:39:1f:37:d0:24:50:3c:36:c6:02:1f: e6:ef:97:07 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUOUxpschkd86HJ/11AvM7WxRcFjIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA1MTUwNjM3WhcNMjYwODA0MTUxMTM3 WjAzMTEwLwYDVQQDEyhBMUMxRTA1QjMwNDNGMkVCQ0FBOEMyNjhFQ0VDNjM5QkM4 QzExRjVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWZ5DGtpicGK gRUBjrimJR5Irpk+KbXlBvLnfr/hpPgH1i6BpYdjbCd1IO9qmi8BvsA6KCIOBjj8 AhgWZXbIjzOgoI0r9T4s8fE4ntwGouTDy3qa+YjMWnK0h1l57rkBriHpwnXRpWjW FZGx3hVf7cvlyv8xYrOTHi48jIn45+Def9DaHwtVGD7N75CbzR7jVzBJzvSLWCUn Gr1A/k6ffnEisXaz5yEkwyVQsrrsIVr8GSRrpdVGMcbeHQG64xNsOTB2+Bo0ySWD LXwMvOetNSDqBlY8rIaHa8qnFAwSLBOQfFduWRVdd7pb+EAA3A85RP/AWBi1eyi3 hNWSwlwkawIDAQABo4ICijCCAoYwHQYDVR0OBBYEFKHB4FswQ/LryqjCaOzsY5vI wR9bMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI3MTc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaN8IAwQAm16jAwQArSwjMA0GCSqG SIb3DQEBCwUAA4IBAQAfQjSmOYQyh+rlRjtBqpM7DwLFkPCf5RJWhmUT+UDP8wfv 0vtWY8XN6wJuqKbtfcMNWApgjpOF5OodHWiLmLNn9ciprAzJlFwNJb5Q/iUqBwZJ ilrKfQCPHZ3PtWm2TgiwnTef3agREFLy6wfBSe3+9U0D7K29WP3qvZVfuAQgiqxg 7Iwgp839/k+9F3ayMx0ycoqpnTUCGKQrQweicqICuLiygEZCVO7PmxTyl9UtTGiN 7TgLiutkg9F0F+N1/w0SAWth3ciVfRuslXxKAbUDQd7hVXq0dMh3x0bYswJN93Se L/XFiOrDThi5MASNXx7qOR830CRQPDbGAh/m75cH -----END CERTIFICATE-----Generated at Sat Aug 23 18:45:21 2025 by rpki-client