$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa File: AS399861.roa (raw, json) Hash identifier: LHqQNoMFJ/afTAwsRIqjw+Lpl8NOKzLwDF9kOlJVVN0= Subject key identifier: C8:BC:7C:D3:AA:8F:0B:EE:06:AC:F5:F6:28:0A:F7:DA:C7:57:AF:E1 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 3D369C569828E397119C80245A820450DF5617B2 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa Signing time: Fri 20 Mar 2026 00:04:38 +0000 ROA not before: Thu 19 Mar 2026 23:59:38 +0000 ROA not after: Fri 19 Mar 2027 00:04:38 +0000 asID: 399861 IP address blocks: 107.173.8.0/24 maxlen: 24 192.227.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 14:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:36:9c:56:98:28:e3:97:11:9c:80:24:5a:82:04:50:df:56:17:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 19 23:59:38 2026 GMT Not After : Mar 19 00:04:38 2027 GMT Subject: CN=C8BC7CD3AA8F0BEE06ACF5F6280AF7DAC757AFE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:64:e8:6d:ab:17:42:17:e4:40:ca:7c:f9: 44:c8:ab:41:68:d1:7a:36:6a:c8:41:15:b0:e7:d9: e2:c5:10:e6:e1:19:26:95:a7:d5:a7:57:66:de:2c: 23:2d:df:2b:07:13:f5:eb:26:ea:bf:c4:3e:9e:54: 7d:08:4a:c8:ce:ad:0e:bf:f1:5e:bb:13:eb:f0:6d: 91:70:5f:4a:1d:25:50:9f:8d:8c:05:3c:10:74:2c: b1:8c:57:6c:c0:f1:d2:22:e2:2f:9d:96:c8:b6:53: f0:e5:3f:79:3a:74:b7:f8:9c:b7:9f:b4:3e:5c:09: 9b:67:c1:3d:57:1f:bb:7d:cb:bd:a2:f9:0b:c7:41: 34:3e:7b:a7:1c:d1:42:a0:20:4e:ef:6c:ff:7d:e9: f2:13:14:a0:71:af:a2:4e:bc:49:f7:86:60:37:94: b9:74:7e:1b:a4:1d:38:eb:99:22:c1:61:ea:91:fc: 05:35:7e:ae:15:94:d3:f1:82:3e:38:24:96:d6:80: 0a:56:cd:54:96:6e:a8:16:ec:53:c1:0f:40:bc:a3: a8:93:f6:31:93:6f:62:f6:e0:41:3f:e7:eb:62:f0: ad:02:13:43:45:9c:14:2b:77:67:31:48:4e:59:82: 48:2f:da:5b:3a:72:c0:24:3c:40:03:cf:ed:2b:39: 13:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:BC:7C:D3:AA:8F:0B:EE:06:AC:F5:F6:28:0A:F7:DA:C7:57:AF:E1 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.173.8.0/24 192.227.201.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:11:3e:9c:cb:4d:6d:61:28:6f:a6:96:a1:09:78:0e:60:32: 40:38:8b:f2:97:96:e9:c9:81:2d:13:e5:d9:c1:7a:af:8a:5b: e2:48:e4:27:75:ae:f4:cf:63:ad:41:60:2f:e3:17:f6:20:37: a7:3d:3c:c3:84:0c:f7:ff:b5:2b:ee:9c:9c:2b:0a:fb:d7:0f: 07:0b:01:7e:7a:87:c8:cf:3a:a7:a1:27:88:45:60:f2:05:80: 04:05:94:ba:ee:92:20:44:5c:c8:3a:d2:31:fb:1d:f1:b5:ac: a2:c9:4a:57:a6:86:d3:aa:f1:0e:1a:7e:8e:55:63:f4:8e:dd: d0:2a:42:fc:04:87:a9:a7:fa:7c:f5:3a:96:3d:5c:54:03:df: 9c:f8:64:04:ea:45:5f:70:b6:b6:8b:67:36:c8:4e:4c:f4:e6: cd:07:06:a3:5f:7a:64:5c:59:18:0f:50:fb:e2:5a:f8:dc:89: 2d:a6:ef:ac:3f:d9:0b:60:bf:3b:bc:70:e3:2e:17:32:3d:bb: 25:1b:8b:01:1b:5b:1e:b4:32:90:2d:64:f0:c1:a0:ad:e9:60: 54:63:e9:72:5e:d9:fd:df:0a:3a:f8:e9:8c:9f:71:3e:af:27: 13:53:18:5f:e0:86:51:90:3c:69:66:d2:ad:36:02:31:13:b6: 8b:81:a5:22 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUPTacVpgo45cRnIAkWoIEUN9WF7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzE5MjM1OTM4WhcNMjcwMzE5MDAwNDM4 WjAzMTEwLwYDVQQDEyhDOEJDN0NEM0FBOEYwQkVFMDZBQ0Y1RjYyODBBRjdEQUM3 NTdBRkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTlk6G2rF0IX 5EDKfPlEyKtBaNF6NmrIQRWw59nixRDm4RkmlafVp1dm3iwjLd8rBxP16ybqv8Q+ nlR9CErIzq0Ov/FeuxPr8G2RcF9KHSVQn42MBTwQdCyxjFdswPHSIuIvnZbItlPw 5T95OnS3+Jy3n7Q+XAmbZ8E9Vx+7fcu9ovkLx0E0PnunHNFCoCBO72z/fenyExSg ca+iTrxJ94ZgN5S5dH4bpB0465kiwWHqkfwFNX6uFZTT8YI+OCSW1oAKVs1Ulm6o FuxTwQ9AvKOok/Yxk29i9uBBP+frYvCtAhNDRZwUK3dnMUhOWYJIL9pbOnLAJDxA A8/tKzkTDwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFMi8fNOqjwvuBqz19igK99rH V6/hMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzM5OTg2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGutCAMEAMDjyTANBgkqhkiG9w0B AQsFAAOCAQEAPxE+nMtNbWEob6aWoQl4DmAyQDiL8peW6cmBLRPl2cF6r4pb4kjk J3Wu9M9jrUFgL+MX9iA3pz08w4QM9/+1K+6cnCsK+9cPBwsBfnqHyM86p6EniEVg 8gWABAWUuu6SIERcyDrSMfsd8bWsoslKV6aG06rxDhp+jlVj9I7d0CpC/ASHqaf6 fPU6lj1cVAPfnPhkBOpFX3C2totnNshOTPTmzQcGo196ZFxZGA9Q++Ja+NyJLabv rD/ZC2C/O7xw4y4XMj27JRuLARtbHrQykC1k8MGgrelgVGPpcl7Z/d8KOvjpjJ9x Pq8nE1MYX+CGUZA8aWbSrTYCMRO2i4GlIg== -----END CERTIFICATE-----Generated at Thu Mar 26 18:46:14 2026 by rpki-client