$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS147003.roa File: AS147003.roa (raw, json) Hash identifier: XcyDqHZs035ZYQzuxxqhsPZtbAIvREspN0hmCi4rY8c= Subject key identifier: 3F:B0:B0:B3:43:62:6C:FD:6E:77:49:7E:CE:E1:39:FF:85:E0:21:1F Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3DCA06B1A96A3DDEACDC19D8F247EE394E803733 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS147003.roa Signing time: Mon 18 Aug 2025 13:29:44 +0000 ROA not before: Mon 18 Aug 2025 13:24:44 +0000 ROA not after: Mon 17 Aug 2026 13:29:44 +0000 asID: 147003 IP address blocks: 157.254.178.0/23 maxlen: 24 157.254.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:ca:06:b1:a9:6a:3d:de:ac:dc:19:d8:f2:47:ee:39:4e:80:37:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 18 13:24:44 2025 GMT Not After : Aug 17 13:29:44 2026 GMT Subject: CN=3FB0B0B343626CFD6E77497ECEE139FF85E0211F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:48:89:bd:e0:6a:ad:17:05:88:96:84:33: bd:e0:e6:10:f4:0b:19:58:7f:91:0f:ff:a6:4f:dc: 13:3a:d6:a8:51:2d:90:71:82:a9:27:24:c9:57:94: 8e:96:05:d0:d9:48:74:31:d5:de:5a:67:22:b0:db: a7:1f:db:b8:85:5e:81:f6:7c:9b:62:0e:b0:e2:8a: cb:22:82:51:5f:b7:68:5b:e4:cd:94:6e:c3:43:dd: 30:43:32:cb:50:80:19:0d:be:95:41:02:7f:3b:ae: 50:97:93:4c:82:ac:dd:73:d4:df:52:09:ff:ba:58: 54:1c:3c:5b:fb:8a:4e:cd:6a:9e:c6:79:2a:17:79: 76:45:55:ac:ca:27:73:33:a1:6d:08:cc:a0:b0:af: 9a:4b:9c:a9:11:39:a7:2a:43:ba:30:58:a6:e1:29: 7a:a5:03:ff:cd:6b:9b:4a:6c:ba:d8:f7:7f:72:82: 81:a4:49:2a:87:a8:e8:61:fa:e4:f2:4d:df:97:de: 11:37:5c:eb:0f:07:8e:45:86:14:d4:47:db:ef:eb: 1f:57:95:36:7c:4a:3e:39:3d:ad:56:18:a8:a9:7d: b4:16:2c:11:ee:c0:88:bb:55:3c:5f:fb:74:1b:80: 05:82:d3:53:d6:03:d9:df:c5:31:9e:10:ff:d5:12: a3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B0:B0:B3:43:62:6C:FD:6E:77:49:7E:CE:E1:39:FF:85:E0:21:1F X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS147003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.178.0/23 157.254.252.0/23 Signature Algorithm: sha256WithRSAEncryption 12:f4:7c:0f:a2:c7:3b:dd:4e:ab:17:6e:c7:f2:a5:41:47:df: 0e:8c:c7:d0:ff:c7:84:8c:fb:5e:3a:e2:77:8b:85:4a:1c:87: b3:f5:00:ef:b0:c2:ad:44:a7:67:c7:54:d9:ad:4a:2f:67:db: 30:41:6e:c2:e8:2d:27:04:ad:08:b3:e5:85:a2:16:14:f2:56: eb:0d:af:53:07:59:1a:a5:f6:f7:9f:4d:a4:7f:bb:2a:28:97: c3:fc:53:3a:01:a5:34:af:12:5e:f2:8f:e7:b1:64:bf:e4:2b: bd:cf:9f:1c:32:f8:46:99:df:cf:55:0e:8c:d3:7f:42:ee:08: d4:b5:31:2d:c7:68:e1:c8:f1:1a:2d:e3:ea:59:cc:20:2c:9b: 9d:d4:2e:8e:b4:c7:dd:25:77:60:13:82:c2:17:f3:0d:64:eb: 4b:6a:a6:ff:e0:2c:44:b1:5f:f8:66:4e:26:63:1f:ca:f0:28: c4:d4:7f:77:ca:68:ae:d4:bb:e4:db:72:31:39:a3:ad:85:86: 68:3b:2c:c2:e0:63:ec:51:60:59:d7:e5:d7:44:7d:23:59:62: 65:d5:03:67:fc:63:f1:f9:03:5b:7a:38:fa:f3:24:54:31:3f: 75:ca:78:ae:23:5f:c4:b7:4c:25:7a:8e:6c:bc:02:10:e3:90: 7b:ce:71:ff -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUPcoGsalqPd6s3BnY8kfuOU6ANzMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwODE4MTMyNDQ0WhcNMjYwODE3MTMyOTQ0 WjAzMTEwLwYDVQQDEygzRkIwQjBCMzQzNjI2Q0ZENkU3NzQ5N0VDRUUxMzlGRjg1 RTAyMTFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrNIib3gaq0X BYiWhDO94OYQ9AsZWH+RD/+mT9wTOtaoUS2QcYKpJyTJV5SOlgXQ2Uh0MdXeWmci sNunH9u4hV6B9nybYg6w4orLIoJRX7doW+TNlG7DQ90wQzLLUIAZDb6VQQJ/O65Q l5NMgqzdc9TfUgn/ulhUHDxb+4pOzWqexnkqF3l2RVWsyidzM6FtCMygsK+aS5yp ETmnKkO6MFim4Sl6pQP/zWubSmy62Pd/coKBpEkqh6joYfrk8k3fl94RN1zrDweO RYYU1Efb7+sfV5U2fEo+OT2tVhioqX20FiwR7sCIu1U8X/t0G4AFgtNT1gPZ38Ux nhD/1RKjyQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFD+wsLNDYmz9bndJfs7hOf+F 4CEfMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE0NzAwMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAZ3+sgMEAZ3+/DANBgkqhkiG9w0B AQsFAAOCAQEAEvR8D6LHO91Oqxdux/KlQUffDozH0P/HhIz7Xjrid4uFShyHs/UA 77DCrUSnZ8dU2a1KL2fbMEFuwugtJwStCLPlhaIWFPJW6w2vUwdZGqX2959NpH+7 KiiXw/xTOgGlNK8SXvKP57Fkv+Qrvc+fHDL4Rpnfz1UOjNN/Qu4I1LUxLcdo4cjx Gi3j6lnMICybndQujrTH3SV3YBOCwhfzDWTrS2qm/+AsRLFf+GZOJmMfyvAoxNR/ d8portS75NtyMTmjrYWGaDsswuBj7FFgWdfl10R9I1liZdUDZ/xj8fkDW3o4+vMk VDE/dcp4riNfxLdMJXqObLwCEOOQe85x/w== -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:47 2025 by rpki-client