$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: xI1Yxnn+J8rafLOWTFBYvrvdd38TPUHsBQAM7CY3MKo= Subject key identifier: 7D:99:81:54:DA:7A:ED:6A:37:4E:8E:D6:F4:C9:77:0B:40:52:B8:C1 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1BDF2BC1617CAF2EEDC6C4AD0DCAA98F5BD3C14A Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa Signing time: Sun 13 Jul 2025 07:42:09 +0000 ROA not before: Sun 13 Jul 2025 07:37:09 +0000 ROA not after: Sun 12 Jul 2026 07:42:09 +0000 asID: 25198 IP address blocks: 23.226.139.0/24 maxlen: 24 23.226.142.0/24 maxlen: 24 66.63.172.0/24 maxlen: 24 67.215.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 14:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:df:2b:c1:61:7c:af:2e:ed:c6:c4:ad:0d:ca:a9:8f:5b:d3:c1:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 13 07:37:09 2025 GMT Not After : Jul 12 07:42:09 2026 GMT Subject: CN=7D998154DA7AED6A374E8ED6F4C9770B4052B8C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c0:15:a8:ef:15:71:3d:84:d6:47:b9:90:16: 21:7a:e9:4d:68:87:47:56:77:f0:9f:eb:c4:b9:42: 57:6b:56:04:27:5e:86:11:66:7f:b8:fe:5f:1d:a7: 8a:bf:dd:23:c7:8d:d0:ad:40:3a:2c:cf:06:94:69: 6d:42:c9:d8:fe:4e:37:bc:03:6f:76:6c:3f:10:b3: ac:89:b7:b1:00:c0:50:1f:38:7f:86:4e:5b:f5:53: 17:64:b7:d0:d8:e0:99:17:8b:40:fb:b9:eb:89:4e: 22:04:9e:6d:5f:c5:b3:d3:e5:30:9f:ae:2e:c0:52: 5b:0f:59:9a:35:c7:52:d7:be:65:e2:b1:b3:2a:55: b1:a4:e2:60:7a:e4:e9:b1:60:a2:03:09:89:0b:bd: 6b:b2:df:bd:32:df:ce:61:a9:9e:9e:41:ef:44:a0: 5d:4e:78:99:7a:64:32:1d:4b:9d:9a:2d:73:64:2a: 2f:d5:41:8d:11:dc:66:c4:e2:65:62:fd:01:9e:c3: c5:68:c0:f0:b3:8c:06:6c:57:3d:87:2d:66:2f:04: 6d:1d:15:ba:82:13:06:4e:9d:64:8f:e4:a3:dc:9d: 0b:6c:b0:e3:67:80:a9:1e:f0:6b:7c:4b:ff:85:88: df:95:8b:81:eb:95:44:9f:5f:02:c9:0c:14:85:b0: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:99:81:54:DA:7A:ED:6A:37:4E:8E:D6:F4:C9:77:0B:40:52:B8:C1 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.139.0/24 23.226.142.0/24 66.63.172.0/24 67.215.240.0/24 Signature Algorithm: sha256WithRSAEncryption 05:8e:4f:08:e7:61:e3:5c:4b:37:f3:35:34:cd:47:f2:9a:a6: 0c:8e:de:75:96:2d:53:e5:37:6d:dd:dc:18:ea:86:ef:58:ad: fc:7b:dc:a0:af:0c:5b:b1:62:a3:74:21:ac:4e:66:02:f1:ed: 6c:3b:d7:16:1d:e1:d4:2e:e2:bc:35:07:9b:e7:83:37:52:84: 95:8e:d4:32:4b:b4:4b:fc:22:f6:cb:88:4b:db:1d:6e:69:59: 03:17:d9:d9:80:bb:1d:0d:0f:f2:04:ab:08:88:39:f2:f9:55: 6a:fd:58:a3:02:42:2c:54:f0:5e:9d:4c:17:c5:d0:56:2f:0d: 8e:ef:93:57:5b:ac:8d:a8:af:0f:a7:47:20:ee:69:21:80:ef: 5f:be:1f:04:8d:9b:6e:b3:e8:ad:a4:ab:ff:56:de:b0:3d:99: 4a:52:6f:0a:e6:e3:fa:6a:f3:26:bc:43:17:99:2a:6d:bb:b7: 26:ba:dc:d2:8b:48:74:ec:2e:d0:a4:ac:f8:6c:a9:96:e0:80: f3:32:5d:10:a6:75:46:ef:d7:ba:3d:b8:fd:33:97:58:7d:29: 14:7d:73:29:10:bb:f2:cf:ad:1c:5e:df:8c:bb:8c:a0:48:66: ec:dd:d5:2d:73:7d:ee:97:e8:c4:68:01:f2:0c:de:b2:ef:78: 98:b7:11:66 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUG98rwWF8ry7txsStDcqpj1vTwUowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzEzMDczNzA5WhcNMjYwNzEyMDc0MjA5 WjAzMTEwLwYDVQQDEyg3RDk5ODE1NERBN0FFRDZBMzc0RThFRDZGNEM5NzcwQjQw NTJCOEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAVqO8VcT2E 1ke5kBYheulNaIdHVnfwn+vEuUJXa1YEJ16GEWZ/uP5fHaeKv90jx43QrUA6LM8G lGltQsnY/k43vANvdmw/ELOsibexAMBQHzh/hk5b9VMXZLfQ2OCZF4tA+7nriU4i BJ5tX8Wz0+Uwn64uwFJbD1maNcdS175l4rGzKlWxpOJgeuTpsWCiAwmJC71rst+9 Mt/OYamenkHvRKBdTniZemQyHUudmi1zZCov1UGNEdxmxOJlYv0BnsPFaMDws4wG bFc9hy1mLwRtHRW6ghMGTp1kj+Sj3J0LbLDjZ4CpHvBrfEv/hYjflYuB65VEn18C yQwUhbDzswIDAQABo4ICkDCCAowwHQYDVR0OBBYEFH2ZgVTaeu1qN06O1vTJdwtA UrjBMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAF+KLAwQAF+KOAwQAQj+sAwQAQ9fw MA0GCSqGSIb3DQEBCwUAA4IBAQAFjk8I52HjXEs38zU0zUfymqYMjt51li1T5Tdt 3dwY6obvWK38e9ygrwxbsWKjdCGsTmYC8e1sO9cWHeHULuK8NQeb54M3UoSVjtQy S7RL/CL2y4hL2x1uaVkDF9nZgLsdDQ/yBKsIiDny+VVq/VijAkIsVPBenUwXxdBW Lw2O75NXW6yNqK8Pp0cg7mkhgO9fvh8EjZtus+itpKv/Vt6wPZlKUm8K5uP6avMm vEMXmSptu7cmutzSi0h07C7QpKz4bKmW4IDzMl0QpnVG79e6Pbj9M5dYfSkUfXMp ELvyz60cXt+Mu4ygSGbs3dUtc33ul+jEaAHyDN6y73iYtxFm -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:37 2025 by rpki-client