$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: Ok9/RXpxbwgw8/PkjESW7bX4ghdSxziFSb5mFGWEqH8= Subject key identifier: 97:25:71:A8:D6:5D:EC:20:1F:D6:92:65:67:F6:63:1B:1A:29:5A:E6 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 77DC7685CFB376CCB1FDF1D8EA1129D2473FE06A Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401838.roa Signing time: Wed 13 Aug 2025 05:14:24 +0000 ROA not before: Wed 13 Aug 2025 05:09:24 +0000 ROA not after: Wed 12 Aug 2026 05:14:24 +0000 asID: 401838 IP address blocks: 157.254.28.0/24 maxlen: 24 157.254.31.0/24 maxlen: 24 157.254.34.0/23 maxlen: 24 157.254.176.0/23 maxlen: 24 157.254.180.0/23 maxlen: 24 157.254.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 09:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:dc:76:85:cf:b3:76:cc:b1:fd:f1:d8:ea:11:29:d2:47:3f:e0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 13 05:09:24 2025 GMT Not After : Aug 12 05:14:24 2026 GMT Subject: CN=972571A8D65DEC201FD6926567F6631B1A295AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:a9:e5:a3:51:83:58:0d:65:d8:d3:26:de: 0c:5b:69:5c:5c:e6:ff:08:d9:73:51:1e:6a:96:12: 79:d8:e2:7c:fe:ce:a0:e3:19:dc:b3:6f:81:3a:c4: 04:f6:e5:1f:d7:65:c1:d4:71:ba:66:8c:32:1a:c4: 6d:e4:aa:86:99:38:a8:90:be:ac:b5:b0:6a:f7:5a: f2:28:aa:92:a7:e5:bc:da:4c:b0:50:b0:ed:61:8d: 6e:a8:fa:01:db:ec:92:ff:51:63:45:fd:a6:0a:07: a4:5c:7c:63:3c:b7:e5:2c:36:a3:76:f6:c0:4c:48: c5:28:20:02:14:bf:17:a3:88:7b:42:ee:21:3f:84: a1:a0:28:79:2d:58:1a:80:ff:f6:5a:b5:da:75:26: 84:3d:c7:6b:23:ed:26:dc:18:df:dd:98:f2:df:06: a5:78:8c:35:3d:1c:3a:2f:6c:9d:96:5c:ce:45:98: c7:01:ea:12:b7:ec:89:c8:26:a5:3b:ad:e3:3f:14: 0d:63:c5:eb:f3:95:b1:4a:b1:6b:07:dd:e3:81:25: 73:49:d2:5b:91:df:d9:63:e1:29:e2:6a:c1:a4:67: c1:d6:37:c5:77:9d:c5:62:bf:fb:7a:22:3d:71:b6: 86:00:b7:af:90:8d:30:d4:68:42:52:58:a3:65:4b: fc:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:71:A8:D6:5D:EC:20:1F:D6:92:65:67:F6:63:1B:1A:29:5A:E6 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.28.0/24 157.254.31.0/24 157.254.34.0/23 157.254.176.0/23 157.254.180.0/23 157.254.254.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:11:92:5c:d2:21:3f:5f:6a:d7:c0:ca:d9:95:21:cc:88:3b: 7a:be:04:33:22:35:4b:e3:5a:80:b1:c9:91:95:51:68:9e:f9: 29:9c:f5:19:13:c9:35:33:46:7c:ca:5b:09:a3:c0:7e:19:8c: 22:45:fc:da:14:47:6b:25:fd:29:ca:06:09:6c:32:04:e9:8c: dc:5b:51:e6:3d:6a:b1:6b:a7:30:71:60:42:fb:07:44:de:75: 46:73:c8:f2:53:fc:50:b8:24:3a:0a:cf:29:f2:a1:f5:36:8c: 06:7c:c5:95:63:de:09:31:a3:ce:0f:3b:c7:61:d5:9e:bb:1e: 4a:f0:33:f1:6a:42:bd:9a:d1:45:59:64:75:68:e8:4b:21:5c: 9c:10:49:28:78:ba:2a:aa:e5:c1:e5:51:e0:ca:a4:c6:52:37: ae:6c:a1:87:e8:55:b3:f1:4d:ea:08:82:53:ec:1b:2a:07:f3: e5:e1:d8:04:93:02:c8:49:83:a7:3e:e2:db:ea:83:c4:7c:b7: 33:6f:da:df:c8:d4:5a:65:c1:3a:ce:a4:3e:96:43:e2:62:9c: cd:83:54:6f:c3:01:37:90:88:5e:c5:bf:57:4d:40:2d:08:24: 72:a5:29:41:a4:a9:78:a4:ec:d9:a4:78:c4:e6:cf:c5:f3:bc: a7:f5:1e:fe -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUd9x2hc+zdsyx/fHY6hEp0kc/4GowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwODEzMDUwOTI0WhcNMjYwODEyMDUxNDI0 WjAzMTEwLwYDVQQDEyg5NzI1NzFBOEQ2NURFQzIwMUZENjkyNjU2N0Y2NjMxQjFB Mjk1QUU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueqp5aNRg1gN ZdjTJt4MW2lcXOb/CNlzUR5qlhJ52OJ8/s6g4xncs2+BOsQE9uUf12XB1HG6Zowy GsRt5KqGmTiokL6stbBq91ryKKqSp+W82kywULDtYY1uqPoB2+yS/1FjRf2mCgek XHxjPLflLDajdvbATEjFKCACFL8Xo4h7Qu4hP4ShoCh5LVgagP/2WrXadSaEPcdr I+0m3Bjf3Zjy3waleIw1PRw6L2ydllzORZjHAeoSt+yJyCalO63jPxQNY8Xr85Wx SrFrB93jgSVzSdJbkd/ZY+Ep4mrBpGfB1jfFd53FYr/7eiI9cbaGALevkI0w1GhC UlijZUv8gQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFJclcajWXewgH9aSZWf2Yxsa KVrmMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMTgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9 BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAJ3+HAMEAJ3+HwMEAZ3+IgMEAZ3+ sAMEAZ3+tAMEAZ3+/jANBgkqhkiG9w0BAQsFAAOCAQEAShGSXNIhP19q18DK2ZUh zIg7er4EMyI1S+NagLHJkZVRaJ75KZz1GRPJNTNGfMpbCaPAfhmMIkX82hRHayX9 KcoGCWwyBOmM3FtR5j1qsWunMHFgQvsHRN51RnPI8lP8ULgkOgrPKfKh9TaMBnzF lWPeCTGjzg87x2HVnrseSvAz8WpCvZrRRVlkdWjoSyFcnBBJKHi6KqrlweVR4Mqk xlI3rmyhh+hVs/FN6giCU+wbKgfz5eHYBJMCyEmDpz7i2+qDxHy3M2/a38jUWmXB Os6kPpZD4mKczYNUb8MBN5CIXsW/V01ALQgkcqUpQaSpeKTs2aR4xObPxfO8p/Ue /g== -----END CERTIFICATE-----Generated at Sat Aug 23 18:48:44 2025 by rpki-client