$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: tT7yHH7vh4cHVq9QK5XsTTi+zOqBYbIcow1tk0auZaM= Subject key identifier: EE:28:05:02:D9:25:7F:A1:EE:4D:C8:67:5E:81:85:36:37:22:74:41 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 24F8E45957FC927834B783254E35936829F3629C Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa Signing time: Tue 02 Sep 2025 08:54:59 +0000 ROA not before: Tue 02 Sep 2025 08:49:59 +0000 ROA not after: Tue 01 Sep 2026 08:54:59 +0000 asID: 396356 IP address blocks: 157.254.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 16:44:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f8:e4:59:57:fc:92:78:34:b7:83:25:4e:35:93:68:29:f3:62:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Sep 2 08:49:59 2025 GMT Not After : Sep 1 08:54:59 2026 GMT Subject: CN=EE280502D9257FA1EE4DC8675E81853637227441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:d4:c1:a0:22:ea:7c:3d:9b:32:ac:ab:c9: 23:63:dc:67:05:cd:33:cd:3a:e0:33:b3:54:2e:71: 28:4b:fe:33:a3:65:0f:fd:ed:a0:03:56:07:42:6f: f1:5c:44:ea:9a:e4:6d:2f:47:bf:da:8a:02:06:e0: 33:0d:df:96:16:11:3b:be:a0:ca:62:1a:df:f2:3e: b4:25:d4:9d:42:39:4e:77:35:57:70:2d:f0:94:d5: be:8d:39:7f:d4:51:a1:8c:67:3f:9b:40:f0:ca:6d: 23:1e:5e:fb:ab:90:27:16:a6:f5:47:ba:ea:35:7c: 23:63:c4:19:58:9d:54:ad:b7:d9:ec:c8:9d:5c:2d: 3e:c7:a7:65:cd:0a:1d:16:aa:01:91:4c:1b:18:06: de:b6:b2:ee:9e:18:fe:c3:af:8d:fb:21:d9:9d:5c: 72:d8:6e:a6:9e:20:90:07:5e:d8:b4:dc:b9:b2:18: 0f:98:d8:4b:b6:88:ec:90:aa:e0:78:60:63:df:83: 98:b0:fe:65:eb:e9:f6:15:24:44:ec:fe:36:fe:df: 81:16:d8:14:7f:57:80:b8:40:8b:e4:97:b7:18:dd: 1f:d7:69:48:0b:5b:70:d5:ff:ca:e2:d5:06:c2:10: e3:52:e7:d0:e8:d8:55:9c:b1:32:cf:96:d7:ce:43: fa:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:28:05:02:D9:25:7F:A1:EE:4D:C8:67:5E:81:85:36:37:22:74:41 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.173.0/24 Signature Algorithm: sha256WithRSAEncryption 88:f9:17:81:00:60:66:3f:e0:e5:bf:81:50:d5:3a:53:98:df: 34:5c:bf:c1:38:5b:79:ba:44:cb:9c:d8:de:ff:fb:64:b1:0b: f7:27:bb:50:b0:59:8f:dd:99:0b:a0:b7:a1:65:f8:37:73:b0: f2:4c:49:74:da:10:91:8d:27:43:f7:82:04:65:e8:f5:46:ce: a1:03:68:48:3a:88:d7:79:08:4b:27:7d:85:ea:66:b9:3a:0f: 8d:f2:fa:8e:62:3b:77:28:05:2a:0b:6c:95:0d:c3:4a:c5:b6: 8d:ad:e0:c9:92:42:eb:8a:11:16:27:c6:f3:a6:b5:04:2d:11: 9d:b2:65:0e:58:48:9d:fc:1d:7b:96:ee:80:62:01:87:58:bd: db:fc:8c:cd:aa:51:e5:6a:0a:6e:e7:e6:f6:6b:5e:cb:4a:86: d1:8f:36:2a:33:69:86:41:6e:fe:ff:18:03:ff:eb:7c:f8:e4: 71:d3:52:3d:c4:f6:d8:a5:c4:d7:59:d3:70:cf:a4:1f:4d:cf: 67:cc:ce:49:95:25:07:64:39:1e:ff:5d:1a:71:38:1d:3b:1d: b3:9b:f3:0a:f2:0c:9b:a2:bf:46:7d:db:bc:fd:d8:0d:df:2e: 05:85:d0:dc:7a:29:97:de:e7:4c:c1:d0:74:3a:41:12:10:37: 80:5f:be:ed -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUJPjkWVf8kng0t4MlTjWTaCnzYpwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwOTAyMDg0OTU5WhcNMjYwOTAxMDg1NDU5 WjAzMTEwLwYDVQQDEyhFRTI4MDUwMkQ5MjU3RkExRUU0REM4Njc1RTgxODUzNjM3 MjI3NDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyjUwaAi6nw9 mzKsq8kjY9xnBc0zzTrgM7NULnEoS/4zo2UP/e2gA1YHQm/xXETqmuRtL0e/2ooC BuAzDd+WFhE7vqDKYhrf8j60JdSdQjlOdzVXcC3wlNW+jTl/1FGhjGc/m0Dwym0j Hl77q5AnFqb1R7rqNXwjY8QZWJ1UrbfZ7MidXC0+x6dlzQodFqoBkUwbGAbetrLu nhj+w6+N+yHZnVxy2G6mniCQB17YtNy5shgPmNhLtojskKrgeGBj34OYsP5l6+n2 FSRE7P42/t+BFtgUf1eAuECL5Je3GN0f12lIC1tw1f/K4tUGwhDjUufQ6NhVnLEy z5bXzkP6PQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFO4oBQLZJX+h7k3IZ16BhTY3 InRBMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+rTANBgkqhkiG9w0BAQsFAAOC AQEAiPkXgQBgZj/g5b+BUNU6U5jfNFy/wThbebpEy5zY3v/7ZLEL9ye7ULBZj92Z C6C3oWX4N3Ow8kxJdNoQkY0nQ/eCBGXo9UbOoQNoSDqI13kISyd9hepmuToPjfL6 jmI7dygFKgtslQ3DSsW2ja3gyZJC64oRFifG86a1BC0RnbJlDlhInfwde5bugGIB h1i92/yMzapR5WoKbufm9mtey0qG0Y82KjNphkFu/v8YA//rfPjkcdNSPcT22KXE 11nTcM+kH03PZ8zOSZUlB2Q5Hv9dGnE4HTsds5vzCvIMm6K/Rn3bvP3YDd8uBYXQ 3Hopl97nTMHQdDpBEhA3gF++7Q== -----END CERTIFICATE-----Generated at Mon Oct 20 04:30:05 2025 by rpki-client