$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54339.roa File: AS54339.roa (raw, json) Hash identifier: wuP9GMVWY+QteVrtIE9mB7G7C5Lk6HuMS1ufKiC0ryk= Subject key identifier: C0:9C:54:6A:22:A6:52:85:B0:F2:2B:8F:8A:0C:44:6D:3C:26:93:53 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 01DC737CD73DE73BA48DC23D99CF0B12A995D7D8 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54339.roa Signing time: Mon 06 Jul 2026 18:13:38 +0000 ROA not before: Mon 06 Jul 2026 18:08:38 +0000 ROA not after: Mon 05 Jul 2027 18:13:38 +0000 asID: 54339 IP address blocks: 157.254.28.0/24 maxlen: 24 157.254.31.0/24 maxlen: 24 157.254.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 00:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:dc:73:7c:d7:3d:e7:3b:a4:8d:c2:3d:99:cf:0b:12:a9:95:d7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 6 18:08:38 2026 GMT Not After : Jul 5 18:13:38 2027 GMT Subject: CN=C09C546A22A65285B0F22B8F8A0C446D3C269353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:77:06:43:1f:f1:c5:6a:8f:68:0d:04:cc:35: 78:50:19:28:b9:1e:00:c5:ea:0d:73:6d:69:7c:a6: d3:06:bc:d8:2a:5e:95:d7:9e:5c:fb:e6:19:90:ff: a5:41:6f:50:4e:93:0a:22:ae:67:3f:ed:f3:08:47: ef:e0:7f:34:b3:73:db:67:27:f4:20:f6:96:7b:eb: 3c:95:87:1c:df:d9:3a:42:5a:ae:59:80:65:af:f6: a6:74:a9:e9:6a:ee:23:7a:7f:0d:cf:8c:6d:3d:d3: 12:90:72:63:2d:bb:c0:e4:50:b1:c4:a5:93:e8:86: 8a:c9:ec:d2:8e:ed:44:ec:d0:6b:17:7f:68:b3:6b: 2e:07:e8:72:1d:b4:c0:f9:31:e0:8c:9f:13:d1:78: dc:0b:55:19:32:26:a7:38:23:3b:b0:1f:6e:44:6c: aa:39:98:ac:2e:13:af:29:40:90:3d:36:e8:94:83: 33:53:70:a0:b6:c6:bb:0f:4c:ab:23:0b:ee:93:d9: 8c:b9:a9:2d:b6:91:30:a9:55:00:8c:a9:00:a6:17: d5:92:23:1f:3d:db:9e:5e:cb:af:1e:c2:77:de:15: 0d:2a:da:62:d9:c0:e0:fa:d4:30:85:ec:67:a2:5b: 10:17:1a:f6:73:53:21:74:16:3e:bc:f3:5f:4f:b7: f7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9C:54:6A:22:A6:52:85:B0:F2:2B:8F:8A:0C:44:6D:3C:26:93:53 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS54339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.28.0/24 157.254.31.0/24 157.254.34.0/23 Signature Algorithm: sha256WithRSAEncryption 51:54:ad:51:36:3a:cd:55:dc:e9:06:98:7d:6f:43:5b:c1:5b: 8f:bc:21:2c:d5:6d:98:33:94:0f:13:50:12:40:9f:15:73:83: 90:b3:80:42:3b:89:b3:d4:c9:23:42:ee:f1:ca:5d:b2:b7:79: 12:fe:18:03:a1:71:10:ca:05:5d:b8:06:0f:05:e2:c1:36:ec: 71:09:35:03:6d:3f:31:30:4a:67:5a:62:8c:75:32:f8:af:7d: cc:7f:06:0b:08:1e:de:9a:11:fb:36:07:16:61:ae:e8:7f:7b: c4:dc:03:64:ec:7a:1d:c5:4b:c9:95:21:57:f8:8c:18:1b:8b: 34:1e:93:44:23:a6:19:ef:2c:9d:ab:a1:21:1a:49:86:bf:39: 41:fa:d1:50:8a:8e:f3:15:fb:1e:2e:ee:93:93:1b:d0:4c:1e: 20:24:8b:ff:dd:b6:c3:69:d0:c1:15:c2:90:f9:07:f5:43:b3: f9:3e:3e:2f:8e:2d:c0:43:dc:5d:1b:71:d1:8e:67:3c:92:81: 03:29:2b:df:46:88:08:7c:2d:71:0b:45:c0:b6:79:fe:ba:7e: bb:00:b8:c5:73:51:c9:aa:85:18:c3:9b:5a:e9:7b:5d:57:49: 8c:7d:06:ab:20:cd:30:d7:c1:4e:27:8c:0d:d4:44:e9:e0:93: de:c4:7a:48 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUAdxzfNc95zukjcI9mc8LEqmV19gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNzA2MTgwODM4WhcNMjcwNzA1MTgxMzM4 WjAzMTEwLwYDVQQDEyhDMDlDNTQ2QTIyQTY1Mjg1QjBGMjJCOEY4QTBDNDQ2RDND MjY5MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjncGQx/xxWqP aA0EzDV4UBkouR4AxeoNc21pfKbTBrzYKl6V155c++YZkP+lQW9QTpMKIq5nP+3z CEfv4H80s3PbZyf0IPaWe+s8lYcc39k6QlquWYBlr/amdKnpau4jen8Nz4xtPdMS kHJjLbvA5FCxxKWT6IaKyezSju1E7NBrF39os2suB+hyHbTA+THgjJ8T0XjcC1UZ MianOCM7sB9uRGyqOZisLhOvKUCQPTbolIMzU3Cgtsa7D0yrIwvuk9mMuakttpEw qVUAjKkAphfVkiMfPdueXsuvHsJ33hUNKtpi2cDg+tQwhexnolsQFxr2c1MhdBY+ vPNfT7f37wIDAQABo4ICijCCAoYwHQYDVR0OBBYEFMCcVGoiplKFsPIrj4oMRG08 JpNTMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzU0MzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnf4cAwQAnf4fAwQBnf4iMA0GCSqG SIb3DQEBCwUAA4IBAQBRVK1RNjrNVdzpBph9b0NbwVuPvCEs1W2YM5QPE1ASQJ8V c4OQs4BCO4mz1MkjQu7xyl2yt3kS/hgDoXEQygVduAYPBeLBNuxxCTUDbT8xMEpn WmKMdTL4r33MfwYLCB7emhH7NgcWYa7of3vE3ANk7HodxUvJlSFX+IwYG4s0HpNE I6YZ7yydq6EhGkmGvzlB+tFQio7zFfseLu6TkxvQTB4gJIv/3bbDadDBFcKQ+Qf1 Q7P5Pj4vji3AQ9xdG3HRjmc8koEDKSvfRogIfC1xC0XAtnn+un67ALjFc1HJqoUY w5ta6XtdV0mMfQarIM0w18FOJ4wN1ETp4JPexHpI -----END CERTIFICATE-----Generated at Fri Jul 24 08:35:23 2026 by rpki-client