$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa File: AS396026.roa (raw, json) Hash identifier: g7+fv+vqg5d0YAPch0dXoOak9FhD2k/sr/0SnnBkWyU= Subject key identifier: 54:14:12:69:C9:44:01:EB:B8:1F:61:C1:4F:8A:52:68:D7:93:DA:26 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2105FB3AD92ED64E4888DE1A0B9AEB6821C6269E Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa Signing time: Mon 11 Aug 2025 21:29:44 +0000 ROA not before: Mon 11 Aug 2025 21:24:44 +0000 ROA not after: Mon 10 Aug 2026 21:29:44 +0000 asID: 396026 IP address blocks: 157.254.0.0/23 maxlen: 23 157.254.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:05:fb:3a:d9:2e:d6:4e:48:88:de:1a:0b:9a:eb:68:21:c6:26:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 11 21:24:44 2025 GMT Not After : Aug 10 21:29:44 2026 GMT Subject: CN=54141269C94401EBB81F61C14F8A5268D793DA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:c5:5b:df:00:a7:c5:1a:c8:1a:48:65:6f: 75:c0:37:a2:45:f4:6d:ac:bd:4b:79:d3:12:11:d0: eb:7c:69:d8:7d:fb:2b:03:7c:a3:87:ef:41:41:bb: 7f:39:7a:e2:da:96:a2:a9:a3:c5:f6:3a:82:9b:f1: 05:0a:9b:ff:c4:64:01:92:e9:9a:2f:82:5b:0e:34: 9c:2b:34:06:6e:08:70:b8:3e:d8:71:e3:93:07:16: fd:89:76:d9:29:1e:f2:0e:9c:42:be:07:bc:a1:a3: 50:e2:ae:56:d1:d5:7f:b4:c0:4c:69:82:b1:70:eb: ee:3b:35:7c:c3:70:f0:08:22:7f:55:a5:90:57:c7: a3:5b:c2:a7:fe:72:69:44:bb:02:4a:40:44:7e:18: 91:56:65:f5:f6:7a:79:ef:25:86:5e:34:07:7e:d8: 41:86:bb:ae:3e:f4:46:6b:0e:b0:59:81:8c:33:c3: 81:3d:4e:7f:03:0b:8e:2c:a3:52:96:d2:a3:57:83: a5:59:bc:14:4f:da:19:e8:9d:f0:30:75:bb:76:19: 77:38:f9:79:16:c1:be:a8:93:da:10:83:72:0c:db: 30:66:a1:36:4b:3f:df:6f:cd:55:f6:b0:f1:16:f3: 44:45:f3:30:90:22:be:9c:ac:a8:d9:8f:7b:0d:5f: 6e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:14:12:69:C9:44:01:EB:B8:1F:61:C1:4F:8A:52:68:D7:93:DA:26 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396026.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.0.0/23 157.254.194.0/23 Signature Algorithm: sha256WithRSAEncryption a6:d8:59:3e:51:73:ef:d9:7c:36:cb:4a:d5:4a:b0:4d:5d:e5: 76:7d:1f:5b:7e:02:d4:07:7f:74:84:64:f1:c0:ed:ae:8e:f3: f8:12:a5:1d:0e:55:34:09:dd:44:19:30:8b:82:f2:c1:98:0a: d6:b4:ff:0e:0c:a4:ff:9c:ae:6c:cd:af:22:f7:27:4b:35:eb: e2:f6:0f:7e:91:d0:aa:a2:97:78:9b:6d:32:46:9f:b0:91:60: b2:65:82:c7:45:1a:de:55:98:49:0c:ad:3a:74:13:2b:d5:09: 94:46:7f:7b:ce:2f:b6:ff:cb:7a:8b:a6:1d:b6:21:c7:18:6f: d2:9f:27:7f:25:d6:82:52:26:85:f8:0a:c0:10:c6:68:26:57: b0:1c:c6:16:8c:59:b1:74:2e:1a:ac:4a:8b:76:49:cc:a2:bb: 48:71:bf:99:da:80:6b:4f:6d:86:f0:8e:22:77:58:d2:ba:77: 71:2d:34:cd:60:31:fd:6b:f1:96:dc:22:11:84:09:9f:3e:a4: 07:a0:38:e0:00:8e:88:6f:da:8b:6f:e5:8c:f5:ea:f1:ca:c0: 99:45:d5:44:ba:8c:a6:42:88:fa:b9:40:79:27:98:5a:02:51: 31:35:b7:f0:64:8c:09:5d:0f:0c:30:17:c5:5f:2f:c3:90:af: 05:cf:e5:94 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUIQX7Otku1k5IiN4aC5rraCHGJp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwODExMjEyNDQ0WhcNMjYwODEwMjEyOTQ0 WjAzMTEwLwYDVQQDEyg1NDE0MTI2OUM5NDQwMUVCQjgxRjYxQzE0RjhBNTI2OEQ3 OTNEQTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMzFW98Ap8Ua yBpIZW91wDeiRfRtrL1LedMSEdDrfGnYffsrA3yjh+9BQbt/OXri2paiqaPF9jqC m/EFCpv/xGQBkumaL4JbDjScKzQGbghwuD7YceOTBxb9iXbZKR7yDpxCvge8oaNQ 4q5W0dV/tMBMaYKxcOvuOzV8w3DwCCJ/VaWQV8ejW8Kn/nJpRLsCSkBEfhiRVmX1 9np57yWGXjQHfthBhruuPvRGaw6wWYGMM8OBPU5/AwuOLKNSltKjV4OlWbwUT9oZ 6J3wMHW7dhl3OPl5FsG+qJPaEINyDNswZqE2Sz/fb81V9rDxFvNERfMwkCK+nKyo 2Y97DV9umQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFQUEmnJRAHruB9hwU+KUmjX k9omMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NjAyNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAZ3+AAMEAZ3+wjANBgkqhkiG9w0B AQsFAAOCAQEApthZPlFz79l8NstK1UqwTV3ldn0fW34C1Ad/dIRk8cDtro7z+BKl HQ5VNAndRBkwi4LywZgK1rT/Dgyk/5yubM2vIvcnSzXr4vYPfpHQqqKXeJttMkaf sJFgsmWCx0Ua3lWYSQytOnQTK9UJlEZ/e84vtv/LeoumHbYhxxhv0p8nfyXWglIm hfgKwBDGaCZXsBzGFoxZsXQuGqxKi3ZJzKK7SHG/mdqAa09thvCOIndY0rp3cS00 zWAx/WvxltwiEYQJnz6kB6A44ACOiG/ai2/ljPXq8crAmUXVRLqMpkKI+rlAeSeY WgJRMTW38GSMCV0PDDAXxV8vw5CvBc/llA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:47 2025 by rpki-client