$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa File: AS152672.roa (raw, json) Hash identifier: 1Ii9PM2fzMfji+9qEkEl+HKbgwTRquRcsnc3/VW9Knc= Subject key identifier: B2:A8:C6:77:08:DF:6B:A5:02:A8:7B:F9:F7:B0:2B:BA:F9:CD:26:32 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 09808B992F15B8DC051A3EBC5EDB35452AC47A17 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa Signing time: Mon 09 Nov 2026 10:33:24 +0000 ROA not before: Mon 09 Nov 2026 10:28:24 +0000 ROA not after: Mon 08 Nov 2027 10:33:24 +0000 asID: 152672 IP address blocks: 157.254.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 06:39:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:80:8b:99:2f:15:b8:dc:05:1a:3e:bc:5e:db:35:45:2a:c4:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 9 10:28:24 2026 GMT Not After : Nov 8 10:33:24 2027 GMT Subject: CN=B2A8C67708DF6BA502A87BF9F7B02BBAF9CD2632 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e6:51:45:ad:71:f0:e9:ba:1d:ba:4d:9e:98: 7a:29:dd:01:14:1e:18:90:14:d6:f9:55:ff:a3:8e: b6:9e:ac:d3:51:c8:41:9c:b8:68:a3:53:96:a8:44: c3:b5:47:30:d8:4c:7a:f2:aa:47:4e:63:8b:ba:81: b3:c7:46:52:51:5d:5d:3b:13:c0:9d:fc:6e:21:7e: f5:cf:34:72:a1:b7:87:aa:35:30:6b:12:48:a8:5d: 64:dd:93:bb:f5:11:bc:3e:2e:ca:d3:50:5c:52:23: 9c:09:a2:0c:45:a2:0e:33:a4:a8:28:68:58:29:03: c4:fa:2d:60:56:ed:e3:64:d5:d9:a5:26:e2:d6:c6: 79:e3:60:75:6c:07:6c:9b:d0:78:0d:c4:ce:20:6b: 8a:d9:2f:0c:25:0d:e0:74:d0:40:c2:55:46:82:fb: 8a:3f:12:b4:de:55:c2:75:64:84:9e:39:c9:84:64: d7:35:e4:d8:7d:50:57:9d:2f:f6:7e:bd:a1:2d:bd: 3f:5b:98:22:87:64:50:71:c5:b6:78:ba:a1:30:fb: fa:8e:bb:f0:1d:0c:fa:36:9b:a6:a6:c3:1e:5b:6e: e3:da:65:45:d3:4a:4b:eb:6f:2f:38:3b:d6:a9:a8: 3f:9c:5f:ba:8e:0a:77:5f:59:5a:d3:7c:22:b3:b5: db:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A8:C6:77:08:DF:6B:A5:02:A8:7B:F9:F7:B0:2B:BA:F9:CD:26:32 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS152672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.227.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:5a:98:58:e8:2b:ed:18:3c:09:48:97:86:fa:a2:1b:cc:6c: a7:1b:19:a0:61:53:51:73:ad:36:53:0a:79:80:cc:34:c6:ff: 12:c2:78:02:73:01:84:40:f6:f5:0e:b3:e6:45:98:62:42:9f: 37:be:c3:7e:49:e7:b3:04:2c:2e:13:eb:b2:52:72:9d:85:d2: d7:7e:a0:cc:ef:28:6b:03:e7:f8:1b:4e:54:cc:e3:3e:b8:15: f0:8e:d8:d7:c6:4c:9f:a8:9c:90:db:93:00:1b:64:10:45:21: 94:7f:8f:27:37:b2:39:2f:d3:4c:20:2f:2b:cc:99:5d:40:e4: 34:29:42:55:39:a6:db:cd:b3:0a:29:8b:f8:77:75:c4:ce:cd: 6e:ff:04:92:4e:1c:09:ba:d6:3a:35:48:e5:91:d9:86:5e:b6: ed:ba:a6:85:1b:b7:48:26:bb:a7:49:69:c8:1b:93:97:74:fc: 95:19:2c:63:5b:50:d8:2e:4d:11:26:31:e0:db:49:4a:b7:99: a5:ce:ef:4b:44:36:cf:8d:4e:c0:fc:2a:44:cc:46:4c:44:83: 9c:90:1a:c8:b1:96:af:69:83:74:12:53:f8:d2:d7:e2:32:77: 20:3e:56:21:79:87:c6:cb:cf:c8:b3:06:62:e1:a5:3a:f1:9d: d8:02:2a:c9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUCYCLmS8VuNwFGj68Xts1RSrEehcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTA5MTAyODI0WhcNMjcxMTA4MTAzMzI0 WjAzMTEwLwYDVQQDEyhCMkE4QzY3NzA4REY2QkE1MDJBODdCRjlGN0IwMkJCQUY5 Q0QyNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteZRRa1x8Om6 HbpNnph6Kd0BFB4YkBTW+VX/o462nqzTUchBnLhoo1OWqETDtUcw2Ex68qpHTmOL uoGzx0ZSUV1dOxPAnfxuIX71zzRyobeHqjUwaxJIqF1k3ZO79RG8Pi7K01BcUiOc CaIMRaIOM6SoKGhYKQPE+i1gVu3jZNXZpSbi1sZ542B1bAdsm9B4DcTOIGuK2S8M JQ3gdNBAwlVGgvuKPxK03lXCdWSEnjnJhGTXNeTYfVBXnS/2fr2hLb0/W5gih2RQ ccW2eLqhMPv6jrvwHQz6NpumpsMeW27j2mVF00pL628vODvWqag/nF+6jgp3X1la 03wis7Xb2QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLKoxncI32ulAqh7+fewK7r5 zSYyMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+4zANBgkqhkiG9w0BAQsFAAOC AQEAmlqYWOgr7Rg8CUiXhvqiG8xspxsZoGFTUXOtNlMKeYDMNMb/EsJ4AnMBhED2 9Q6z5kWYYkKfN77DfknnswQsLhPrslJynYXS136gzO8oawPn+BtOVMzjPrgV8I7Y 18ZMn6ickNuTABtkEEUhlH+PJzeyOS/TTCAvK8yZXUDkNClCVTmm282zCimL+Hd1 xM7Nbv8Ekk4cCbrWOjVI5ZHZhl627bqmhRu3SCa7p0lpyBuTl3T8lRksY1tQ2C5N ESYx4NtJSreZpc7vS0Q2z41OwPwqRMxGTESDnJAayLGWr2mDdBJT+NLX4jJ3ID5W IXmHxsvPyLMGYuGlOvGd2AIqyQ== -----END CERTIFICATE-----Generated at Wed Nov 11 14:44:21 2026 by rpki-client