$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: KFn6bD/OiqLgesqPcSHeAVJHVe9ITWLQfPnDLTSFLfQ= Subject key identifier: 38:50:A0:FC:14:09:78:14:28:7E:4A:AD:BD:E4:38:5C:EE:6B:00:49 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 516D7D14AEB4FD615FC75741D4877A245D7A0170 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa Signing time: Tue 24 Mar 2026 07:28:06 +0000 ROA not before: Tue 24 Mar 2026 07:23:06 +0000 ROA not after: Tue 23 Mar 2027 07:28:06 +0000 asID: 214025 IP address blocks: 157.254.152.0/24 maxlen: 24 157.254.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6d:7d:14:ae:b4:fd:61:5f:c7:57:41:d4:87:7a:24:5d:7a:01:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 24 07:23:06 2026 GMT Not After : Mar 23 07:28:06 2027 GMT Subject: CN=3850A0FC14097814287E4AADBDE4385CEE6B0049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:e6:dd:9b:d2:a9:12:1c:fa:e3:b8:a7:65: 8f:07:b8:dd:c1:3b:97:e1:50:25:c8:45:44:79:4d: 3e:12:e4:ac:c1:63:40:12:6a:dc:d2:eb:c8:59:b1: be:b7:df:3b:43:22:c3:31:86:31:87:6e:ed:c7:4f: 12:54:bd:29:30:ab:21:d2:58:45:e1:47:3b:fa:61: 44:f5:d9:20:b7:fa:b8:b3:4c:75:25:16:82:a3:46: cb:a3:af:ad:fa:dc:d9:d7:a0:df:63:6f:b6:ea:5d: ff:fd:69:7a:8f:08:08:b1:bf:1e:21:56:39:3b:93: 35:98:43:b4:55:ee:68:37:12:d0:b6:48:62:b5:5c: cb:06:16:2f:1b:6c:0f:0c:09:22:e2:f9:77:ae:0b: f6:4f:45:44:fa:e1:28:8b:a1:eb:2a:9c:be:e9:00: 53:00:70:cf:2d:31:86:51:25:f6:63:48:09:59:47: 4d:e7:2b:14:73:8c:29:57:e9:6a:be:27:d6:4e:e3: b1:73:e0:91:fe:db:06:c1:42:a9:4a:54:ce:6a:8a: 4f:3b:4a:0c:69:a3:8c:1d:b2:7b:b6:ef:db:09:8f: 01:e2:37:98:37:1f:07:a2:08:23:70:29:dd:31:fe: 30:94:a3:f9:76:3c:4e:fb:19:7e:52:e8:5b:64:47: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:50:A0:FC:14:09:78:14:28:7E:4A:AD:BD:E4:38:5C:EE:6B:00:49 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.152.0/24 157.254.208.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:a2:d4:cf:23:fb:1a:1e:4a:4b:0b:7b:2d:d5:22:22:62:8f: 92:43:15:06:31:03:4a:ad:6e:0c:cb:ac:30:0c:8f:ed:c4:11: a7:c4:f3:e9:ff:32:6c:46:f9:45:dd:0d:95:8a:b6:73:05:5d: 31:74:87:b1:b2:02:97:69:5a:67:d1:18:0e:7a:5b:cb:65:2d: e1:21:a7:d3:54:fc:e3:9b:72:61:b9:b2:71:8c:a7:94:4b:f1: 4e:eb:a2:a3:f3:5a:f9:91:c3:d9:69:d9:52:b2:cd:20:06:ca: b8:28:b8:5e:e3:67:ef:26:ea:8e:4f:d8:ec:53:05:16:fa:50: 5c:a0:d6:fd:86:38:17:fe:38:0a:2d:ae:80:09:c3:78:46:16: 5f:b7:04:bb:2b:2b:00:f6:d3:fa:00:9f:e4:a8:18:10:31:db: 4f:d8:cd:bd:4c:28:89:4c:be:c5:eb:1b:4a:98:52:77:3e:f2: d0:ed:df:ed:da:9e:93:49:a3:05:20:a6:f6:9e:f5:0b:7a:03: 40:b1:60:80:a7:a6:ba:41:95:b1:7e:23:ee:e9:1f:c4:26:e9: 84:f8:ec:10:cf:c8:b7:ef:77:0c:5d:63:61:13:10:18:a4:c6: 74:4e:25:cf:85:6c:59:bf:5a:c0:e7:25:cc:a5:91:50:3a:1b: 85:cc:e0:fb -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUUW19FK60/WFfx1dB1Id6JF16AXAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzI0MDcyMzA2WhcNMjcwMzIzMDcyODA2 WjAzMTEwLwYDVQQDEygzODUwQTBGQzE0MDk3ODE0Mjg3RTRBQURCREU0Mzg1Q0VF NkIwMDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyufm3ZvSqRIc +uO4p2WPB7jdwTuX4VAlyEVEeU0+EuSswWNAEmrc0uvIWbG+t987QyLDMYYxh27t x08SVL0pMKsh0lhF4Uc7+mFE9dkgt/q4s0x1JRaCo0bLo6+t+tzZ16DfY2+26l3/ /Wl6jwgIsb8eIVY5O5M1mEO0Ve5oNxLQtkhitVzLBhYvG2wPDAki4vl3rgv2T0VE +uEoi6HrKpy+6QBTAHDPLTGGUSX2Y0gJWUdN5ysUc4wpV+lqvifWTuOxc+CR/tsG wUKpSlTOaopPO0oMaaOMHbJ7tu/bCY8B4jeYNx8HoggjcCndMf4wlKP5djxO+xl+ UuhbZEd0awIDAQABo4IChTCCAoEwHQYDVR0OBBYEFDhQoPwUCXgUKH5Krb3kOFzu awBJMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJ3+mAMEAJ3+0DANBgkqhkiG9w0B AQsFAAOCAQEAi6LUzyP7Gh5KSwt7LdUiImKPkkMVBjEDSq1uDMusMAyP7cQRp8Tz 6f8ybEb5Rd0NlYq2cwVdMXSHsbICl2laZ9EYDnpby2Ut4SGn01T845tyYbmycYyn lEvxTuuio/Na+ZHD2WnZUrLNIAbKuCi4XuNn7ybqjk/Y7FMFFvpQXKDW/YY4F/44 Ci2ugAnDeEYWX7cEuysrAPbT+gCf5KgYEDHbT9jNvUwoiUy+xesbSphSdz7y0O3f 7dqek0mjBSCm9p71C3oDQLFggKemukGVsX4j7ukfxCbphPjsEM/It+93DF1jYRMQ GKTGdE4lz4VsWb9awOclzKWRUDobhczg+w== -----END CERTIFICATE-----Generated at Thu Mar 26 09:15:01 2026 by rpki-client