$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS148996.roa File: AS148996.roa (raw, json) Hash identifier: Vmsw3vILbbSgjxPQ2Gkaml2V8lHJdiWG9/2R77VcrKo= Subject key identifier: C7:90:AD:0C:DA:90:73:37:CD:00:FB:3A:47:BA:46:E4:9A:3C:B2:68 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6D0902ED24833E102F87FDB76B612D8D14709FB8 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS148996.roa Signing time: Wed 02 Sep 2026 07:40:04 +0000 ROA not before: Wed 02 Sep 2026 07:35:04 +0000 ROA not after: Wed 01 Sep 2027 07:40:04 +0000 asID: 148996 IP address blocks: 40.223.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:09:02:ed:24:83:3e:10:2f:87:fd:b7:6b:61:2d:8d:14:70:9f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 2 07:35:04 2026 GMT Not After : Sep 1 07:40:04 2027 GMT Subject: CN=C790AD0CDA907337CD00FB3A47BA46E49A3CB268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0e:b3:e5:3e:15:1d:df:16:e6:e3:d7:a4:2e: 1e:5e:82:e6:63:0a:64:38:dc:5e:df:36:70:72:59: aa:63:d8:78:bb:89:b9:e1:b6:34:c6:b6:fa:ea:96: 1a:e0:8f:96:8e:eb:f6:7d:bb:9f:7b:7d:8d:37:6f: e6:f1:d0:bf:4b:0c:e9:e5:22:13:88:f0:4e:38:39: 9c:8e:4a:88:05:fe:c1:51:63:1f:5e:bc:b1:3d:67: 77:64:3c:60:2b:0c:74:62:1b:43:a8:57:37:c7:8b: 73:15:eb:6b:5d:8f:a1:23:ca:a4:26:30:3a:35:76: 3b:24:0b:4f:9f:df:21:2a:52:9e:46:bd:c6:80:cb: 1c:c2:82:cf:fd:89:c7:ef:52:24:cc:2a:b9:81:48: 86:29:ad:75:13:c3:5c:99:7e:1d:64:93:a4:bf:48: f8:6e:05:c3:87:a3:a0:99:cc:23:4f:69:a1:be:3a: f0:0f:47:0a:c7:4f:95:04:97:33:4d:6c:15:2e:8f: 3d:3c:6d:3c:e8:77:df:09:f3:a3:87:95:1a:ac:28: 04:b9:99:06:ac:a3:78:70:5c:fe:ca:32:9c:83:59: a7:90:ed:75:dc:29:d0:de:f3:a9:6d:de:a6:bc:fa: ca:a4:75:77:b0:5a:77:1d:6f:99:9e:f2:3c:d9:e2: 41:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:90:AD:0C:DA:90:73:37:CD:00:FB:3A:47:BA:46:E4:9A:3C:B2:68 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS148996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.12.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a5:2e:bb:84:cf:64:b4:f3:81:ea:c4:12:3e:3b:f5:96:97: 03:42:16:d9:9b:09:1d:2a:44:90:4d:ac:96:2d:3c:48:3f:ca: 1e:d2:e9:84:fe:a7:33:fb:ee:e8:6b:0d:64:9f:fb:d7:f4:56: 9a:83:f5:49:7d:d4:ab:60:97:43:ce:b8:6e:e2:e2:1a:d7:56: 42:b9:52:7f:8b:2b:6b:9b:a5:3d:22:ab:12:0b:4f:16:80:30: ae:d6:40:86:82:7a:74:58:98:25:16:a2:37:30:c8:9e:70:8b: f0:10:96:5c:f5:cd:79:75:39:41:89:7d:9a:ab:0a:99:06:64: ca:c3:51:9a:fa:c1:81:d6:e9:5d:95:af:ae:12:b8:a5:9e:2a: 4f:a9:2b:75:e5:59:a6:33:6c:6e:08:ee:92:b8:20:52:f1:a7: e7:e6:ae:98:0b:0d:29:0d:35:36:78:15:34:dc:1f:f3:8d:cb: ba:26:63:9c:91:28:51:31:76:e4:fd:5f:fb:1e:e2:27:f1:d0: 52:d7:ab:d1:74:22:c0:ad:d5:92:81:96:f9:b9:97:aa:5a:39: 06:03:23:76:8a:95:d4:8f:36:0e:49:99:4d:b5:58:b8:c7:4d: 77:0d:7c:4c:fa:cb:5a:c8:9c:12:92:9e:e8:9c:87:58:d8:63: 0c:b0:17:ff -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUbQkC7SSDPhAvh/23a2EtjRRwn7gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTAyMDczNTA0WhcNMjcwOTAxMDc0MDA0 WjAzMTEwLwYDVQQDEyhDNzkwQUQwQ0RBOTA3MzM3Q0QwMEZCM0E0N0JBNDZFNDlB M0NCMjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ6z5T4VHd8W 5uPXpC4eXoLmYwpkONxe3zZwclmqY9h4u4m54bY0xrb66pYa4I+Wjuv2fbufe32N N2/m8dC/Swzp5SITiPBOODmcjkqIBf7BUWMfXryxPWd3ZDxgKwx0YhtDqFc3x4tz FetrXY+hI8qkJjA6NXY7JAtPn98hKlKeRr3GgMscwoLP/YnH71IkzCq5gUiGKa11 E8NcmX4dZJOkv0j4bgXDh6OgmcwjT2mhvjrwD0cKx0+VBJczTWwVLo89PG086Hff CfOjh5UarCgEuZkGrKN4cFz+yjKcg1mnkO113CnQ3vOpbd6mvPrKpHV3sFp3HW+Z nvI82eJB4wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMeQrQzakHM3zQD7Oke6RuSa PLJoMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE0ODk5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACjfDDANBgkqhkiG9w0BAQsFAAOC AQEAh6Uuu4TPZLTzgerEEj479ZaXA0IW2ZsJHSpEkE2sli08SD/KHtLphP6nM/vu 6GsNZJ/71/RWmoP1SX3Uq2CXQ864buLiGtdWQrlSf4sra5ulPSKrEgtPFoAwrtZA hoJ6dFiYJRaiNzDInnCL8BCWXPXNeXU5QYl9mqsKmQZkysNRmvrBgdbpXZWvrhK4 pZ4qT6krdeVZpjNsbgjukrggUvGn5+aumAsNKQ01NngVNNwf843LuiZjnJEoUTF2 5P1f+x7iJ/HQUter0XQiwK3VkoGW+bmXqlo5BgMjdoqV1I82DkmZTbVYuMdNdw18 TPrLWsicEpKe6JyHWNhjDLAX/w== -----END CERTIFICATE-----Generated at Fri Sep 4 16:28:51 2026 by rpki-client