$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa File: AS400866.roa (raw, json) Hash identifier: 5UcCjztmwa9d+ja9qvjMdHWKgtGEbarDDEGk4qIGlk4= Subject key identifier: C8:62:57:9C:C4:79:56:11:D3:A5:EB:6D:31:07:A2:DB:49:27:C8:E4 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 731D28F768063E4822C199D9283F5EE91CB9A4A9 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa Signing time: Thu 23 Jul 2026 00:36:09 +0000 ROA not before: Thu 23 Jul 2026 00:31:09 +0000 ROA not after: Thu 22 Jul 2027 00:36:09 +0000 asID: 400866 IP address blocks: 23.95.177.0/24 maxlen: 24 104.168.31.0/24 maxlen: 24 107.172.149.0/24 maxlen: 24 198.46.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 09:24:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1d:28:f7:68:06:3e:48:22:c1:99:d9:28:3f:5e:e9:1c:b9:a4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 23 00:31:09 2026 GMT Not After : Jul 22 00:36:09 2027 GMT Subject: CN=C862579CC4795611D3A5EB6D3107A2DB4927C8E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8c:8c:c8:35:c8:cf:6d:ca:cf:38:a3:68:3b: d6:96:00:46:34:e2:4d:75:c1:a2:73:6d:dd:a2:d7: 12:21:b1:22:16:99:51:63:19:78:46:2d:da:04:76: fb:74:f7:e9:2c:d4:63:95:a1:86:1e:e4:0b:35:89: 7c:8b:af:8e:42:0d:46:9c:ed:52:5c:17:03:fa:9d: 81:44:97:8c:99:c3:af:c8:e1:8d:3a:a8:95:dd:26: 60:2d:30:0f:ee:9f:6d:ca:ff:e0:3f:a7:b0:41:bd: 7e:7a:29:bd:04:39:25:c2:2d:be:12:b1:51:10:0f: bc:5c:dd:8b:f0:a9:d8:62:c0:8c:02:45:3d:27:66: 0f:92:b5:51:4d:28:37:bc:bc:07:e1:65:7c:09:77: 74:52:74:27:8d:ed:8a:d7:e7:e9:95:a7:7f:17:eb: b4:51:24:47:0c:31:e1:d3:b3:16:70:57:91:91:55: 29:e0:ae:86:c5:19:b9:58:ed:13:bb:56:53:45:1c: eb:6c:64:00:a1:16:2d:98:4f:30:f9:34:b5:20:7c: 75:2b:d4:2a:ae:f1:4d:ae:eb:47:69:d8:52:94:00: 39:20:e3:96:b9:f6:e2:e2:7b:39:53:45:17:34:ac: c0:e8:de:eb:9a:90:6b:71:db:4a:e6:f6:ca:ed:97: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:62:57:9C:C4:79:56:11:D3:A5:EB:6D:31:07:A2:DB:49:27:C8:E4 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.177.0/24 104.168.31.0/24 107.172.149.0/24 198.46.247.0/24 Signature Algorithm: sha256WithRSAEncryption a6:90:dd:2c:e9:d4:c3:92:b1:2c:38:c1:79:7e:cd:c8:b2:63: 2d:2e:07:f5:9c:2f:f6:a2:20:c6:85:a4:13:4c:72:56:ac:a8: 70:25:7d:36:2f:5d:61:1d:15:08:60:42:47:cf:32:19:36:16: 5b:15:e1:aa:a6:52:9e:28:c8:c9:a0:0a:43:be:8f:95:7c:80: f7:5a:cc:1d:e9:63:00:bf:4b:3a:d5:18:20:c8:96:c2:15:c9: 50:5b:89:be:b4:44:fa:1e:82:8c:3a:4c:7c:77:66:07:06:a8: e3:f3:52:43:88:b3:fa:75:e1:96:bc:1a:ad:e6:e9:08:c8:c3: 48:77:f2:8e:66:af:11:fa:3a:71:0c:87:ff:b3:10:6d:67:5c: fa:5c:2b:f9:89:70:68:40:e6:09:ee:d1:41:1e:31:75:96:56: 1c:7f:2c:43:11:f9:4e:43:f3:f4:35:b7:a8:f2:86:ea:33:04: 64:6e:d5:3a:f4:72:ad:44:da:b4:b0:25:70:4d:9f:fb:3c:95: 9e:f5:8c:72:1b:da:16:82:ae:83:77:64:09:6b:ae:dc:21:0d: 79:7b:69:5b:9b:5f:2d:70:b7:a6:c0:84:5f:62:2c:e7:3a:d4: 9c:2c:b0:f2:3b:11:47:5d:c8:a8:98:df:03:7d:02:63:81:a9: d1:90:77:40 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUcx0o92gGPkgiwZnZKD9e6Ry5pKkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNzIzMDAzMTA5WhcNMjcwNzIyMDAzNjA5 WjAzMTEwLwYDVQQDEyhDODYyNTc5Q0M0Nzk1NjExRDNBNUVCNkQzMTA3QTJEQjQ5 MjdDOEU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YyMyDXIz23K zzijaDvWlgBGNOJNdcGic23dotcSIbEiFplRYxl4Ri3aBHb7dPfpLNRjlaGGHuQL NYl8i6+OQg1GnO1SXBcD+p2BRJeMmcOvyOGNOqiV3SZgLTAP7p9tyv/gP6ewQb1+ eim9BDklwi2+ErFREA+8XN2L8KnYYsCMAkU9J2YPkrVRTSg3vLwH4WV8CXd0UnQn je2K1+fplad/F+u0USRHDDHh07MWcFeRkVUp4K6GxRm5WO0Tu1ZTRRzrbGQAoRYt mE8w+TS1IHx1K9QqrvFNrutHadhSlAA5IOOWufbi4ns5U0UXNKzA6N7rmpBrcdtK 5vbK7Ze5NQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFMhiV5zEeVYR06XrbTEHottJ J8jkMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMDg2Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEABdfsQMEAGioHwMEAGuslQMEAMYu 9zANBgkqhkiG9w0BAQsFAAOCAQEAppDdLOnUw5KxLDjBeX7NyLJjLS4H9Zwv9qIg xoWkE0xyVqyocCV9Ni9dYR0VCGBCR88yGTYWWxXhqqZSnijIyaAKQ76PlXyA91rM HeljAL9LOtUYIMiWwhXJUFuJvrRE+h6CjDpMfHdmBwao4/NSQ4iz+nXhlrwarebp CMjDSHfyjmavEfo6cQyH/7MQbWdc+lwr+YlwaEDmCe7RQR4xdZZWHH8sQxH5TkPz 9DW3qPKG6jMEZG7VOvRyrUTatLAlcE2f+zyVnvWMchvaFoKug3dkCWuu3CENeXtp W5tfLXC3psCEX2Is5zrUnCyw8jsRR13IqJjfA30CY4Gp0ZB3QA== -----END CERTIFICATE-----Generated at Fri Jul 24 12:03:23 2026 by rpki-client