$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: 5IZMcNNs9TCiwHC+2fhxj/IOd06p78iZUtPMxzLNKBA= Subject key identifier: 21:46:2E:63:8A:6D:8E:64:F6:23:CE:8E:E0:A0:01:66:DC:E7:E8:2F Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2B99198A0C1A8FD65772D183F31F0F7A89487598 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401838.roa Signing time: Mon 06 Jul 2026 18:13:38 +0000 ROA not before: Mon 06 Jul 2026 18:08:38 +0000 ROA not after: Mon 05 Jul 2027 18:13:38 +0000 asID: 401838 IP address blocks: 157.254.28.0/24 maxlen: 24 157.254.31.0/24 maxlen: 24 157.254.34.0/23 maxlen: 24 157.254.176.0/23 maxlen: 24 157.254.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 19:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:99:19:8a:0c:1a:8f:d6:57:72:d1:83:f3:1f:0f:7a:89:48:75:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 6 18:08:38 2026 GMT Not After : Jul 5 18:13:38 2027 GMT Subject: CN=21462E638A6D8E64F623CE8EE0A00166DCE7E82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:99:81:95:90:a7:b8:fe:0d:da:dc:b4:12:af: da:ce:c0:7c:d3:08:1a:6c:16:87:59:fd:57:9e:8a: 03:be:9e:19:7d:e1:24:96:e4:cb:c4:86:51:36:a4: ce:c4:d5:f6:ca:8a:5b:c5:70:ce:45:cf:63:1c:b4: 6a:f2:ff:d5:c1:65:7b:4b:45:ba:30:66:91:36:be: 10:2d:f4:2b:e0:0f:7d:63:c0:8d:fc:59:ae:7a:60: ff:fb:c9:05:90:d4:9a:a1:03:44:16:92:fa:6a:39: dd:22:29:4d:61:94:94:50:2e:c3:55:a1:fe:78:6e: 65:e1:ab:7a:c3:4b:64:29:9a:c6:d9:c3:b8:95:7b: 60:df:af:91:1f:c3:df:de:ae:ea:71:52:8b:50:77: 57:5a:89:96:e1:9b:f2:b3:05:ed:db:ea:5c:f2:97: 67:ea:31:68:c4:e6:7e:29:f6:7f:f0:5f:00:c6:d2: 7f:49:ec:ac:46:9b:e8:a1:93:97:14:48:62:8f:90: d5:0b:e5:4e:e4:01:cb:f9:54:8f:0d:62:9a:fa:b9: 80:df:8b:7c:ad:1e:11:5c:34:12:7d:76:47:b0:9d: 86:75:d9:71:9a:14:11:1a:5d:3f:8a:e5:c7:50:89: fc:45:6e:80:84:df:38:58:03:fc:55:63:bd:99:e3: c1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:46:2E:63:8A:6D:8E:64:F6:23:CE:8E:E0:A0:01:66:DC:E7:E8:2F X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.28.0/24 157.254.31.0/24 157.254.34.0/23 157.254.176.0/23 157.254.254.0/23 Signature Algorithm: sha256WithRSAEncryption 0d:41:93:32:28:b1:8e:7e:17:a7:7e:9c:18:af:10:ee:34:27: e2:9a:5a:e1:c4:fd:b6:fb:6a:95:a6:20:c3:ca:1c:26:ce:a8: b7:23:4f:33:a8:24:6c:cb:ce:5e:31:ea:88:a1:b5:4d:70:ab: 56:98:7f:19:51:b8:40:39:f5:72:e1:27:fd:dc:38:d1:ae:ca: ec:60:9a:49:2d:9b:e7:c6:a1:d3:92:50:cd:a5:6e:12:29:71: 0d:2e:cd:b1:64:bc:e7:5f:2b:c7:03:b5:04:de:29:65:c1:04: d6:ba:44:36:a5:2c:a5:4d:f6:be:b8:e7:23:3f:59:f7:6c:0b: f4:84:0e:16:a6:21:0d:b5:20:d1:17:5d:c0:ef:95:7a:1d:38: 7c:d8:a0:1f:cd:d0:09:e3:cf:13:bf:45:2b:47:3f:50:d5:44: 89:59:ca:6d:a8:95:ad:0f:ab:5b:46:5c:96:81:83:d8:16:fa: 5e:a6:5a:3f:07:d4:7f:df:5e:66:d2:7d:91:54:4a:ce:ba:a5: 82:bd:07:07:b7:b8:b9:c9:5d:2b:15:22:75:92:e6:06:0a:c0: f4:e6:90:f8:c0:07:28:bf:0e:c6:3c:65:0e:e9:da:30:91:9e: 53:74:bd:42:8a:49:0d:0c:df:14:a7:17:fe:da:90:6f:f7:b7: ed:49:d4:4b -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUK5kZigwaj9ZXctGD8x8PeolIdZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNzA2MTgwODM4WhcNMjcwNzA1MTgxMzM4 WjAzMTEwLwYDVQQDEygyMTQ2MkU2MzhBNkQ4RTY0RjYyM0NFOEVFMEEwMDE2NkRD RTdFODJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpmBlZCnuP4N 2ty0Eq/azsB80wgabBaHWf1XnooDvp4ZfeEkluTLxIZRNqTOxNX2yopbxXDORc9j HLRq8v/VwWV7S0W6MGaRNr4QLfQr4A99Y8CN/FmuemD/+8kFkNSaoQNEFpL6ajnd IilNYZSUUC7DVaH+eG5l4at6w0tkKZrG2cO4lXtg36+RH8Pf3q7qcVKLUHdXWomW 4ZvyswXt2+pc8pdn6jFoxOZ+KfZ/8F8AxtJ/SeysRpvooZOXFEhij5DVC+VO5AHL +VSPDWKa+rmA34t8rR4RXDQSfXZHsJ2GddlxmhQRGl0/iuXHUIn8RW6AhN84WAP8 VWO9mePBVQIDAQABo4IClzCCApMwHQYDVR0OBBYEFCFGLmOKbY5k9iPOjuCgAWbc 5+gvMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMTgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAJ3+HAMEAJ3+HwMEAZ3+IgMEAZ3+ sAMEAZ3+/jANBgkqhkiG9w0BAQsFAAOCAQEADUGTMiixjn4Xp36cGK8Q7jQn4ppa 4cT9tvtqlaYgw8ocJs6otyNPM6gkbMvOXjHqiKG1TXCrVph/GVG4QDn1cuEn/dw4 0a7K7GCaSS2b58ah05JQzaVuEilxDS7NsWS8518rxwO1BN4pZcEE1rpENqUspU32 vrjnIz9Z92wL9IQOFqYhDbUg0RddwO+Veh04fNigH83QCePPE79FK0c/UNVEiVnK baiVrQ+rW0ZcloGD2Bb6XqZaPwfUf99eZtJ9kVRKzrqlgr0HB7e4ucldKxUidZLm BgrA9OaQ+MAHKL8OxjxlDunaMJGeU3S9QopJDQzfFKcX/tqQb/e37UnUSw== -----END CERTIFICATE-----Generated at Tue Jul 21 12:27:34 2026 by rpki-client