$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: mDYqI3Hz5Go+JVNnRTJpa/2Fde5K8axNpqnUAbxca/U= Subject key identifier: 4A:84:72:14:A1:B8:04:0F:37:60:5F:57:B5:A2:A4:89:96:57:C9:48 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 223B184FDB3A3B52DD41BC68E3C14C26D7239C7C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa Signing time: Tue 04 Aug 2026 01:39:38 +0000 ROA not before: Tue 04 Aug 2026 01:34:38 +0000 ROA not after: Tue 03 Aug 2027 01:39:38 +0000 asID: 152868 IP address blocks: 40.27.112.0/24 maxlen: 24 40.27.124.0/24 maxlen: 24 40.27.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 19:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3b:18:4f:db:3a:3b:52:dd:41:bc:68:e3:c1:4c:26:d7:23:9c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 4 01:34:38 2026 GMT Not After : Aug 3 01:39:38 2027 GMT Subject: CN=4A847214A1B8040F37605F57B5A2A4899657C948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:23:fb:f6:9a:4a:3f:ed:8c:43:8a:df:d8: df:ab:f1:73:95:5d:aa:ff:ee:81:e6:ea:b7:3c:e6: 26:f7:b4:ff:8d:0f:4b:61:b5:bd:67:ec:ab:4f:56: 3c:bb:d2:1b:04:0b:f4:f7:85:ea:5c:bc:36:a1:19: 1c:5a:70:0d:8d:b5:89:50:09:6a:eb:ba:f0:94:9a: 08:81:97:b0:cd:7b:b3:f0:49:e4:21:bc:bd:c6:7d: c7:0a:b6:8b:48:eb:a1:3d:81:df:c6:36:aa:80:f7: 8a:57:01:3a:43:08:7a:8e:c5:c2:8f:ac:2b:6a:47: ac:93:80:c5:af:84:eb:57:68:cd:58:aa:84:9a:b3: 8d:e2:73:cf:5d:40:ca:71:2a:c7:ce:a9:d8:2b:5c: bd:81:55:4b:49:a3:8c:ae:60:f2:91:dd:3e:1f:51: 34:c5:51:5e:5f:62:78:fa:3f:39:a5:dd:ef:e3:ed: 10:d6:c6:d3:75:fe:aa:35:b4:98:9b:ed:c8:2c:b5: 42:fe:35:7c:f1:8c:60:67:2c:78:6c:35:77:c2:74: 7e:23:3d:51:bb:53:e0:dc:67:1a:eb:a9:2d:37:23: c2:03:ce:c2:39:f5:66:fa:5f:df:81:bc:40:dd:32: d2:cd:9d:c4:49:92:c5:0c:39:db:d6:6b:09:eb:37: 7a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:84:72:14:A1:B8:04:0F:37:60:5F:57:B5:A2:A4:89:96:57:C9:48 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.112.0/24 40.27.124.0/24 40.27.126.0/24 Signature Algorithm: sha256WithRSAEncryption 39:be:f2:b6:23:39:1c:76:89:2e:41:63:42:05:5c:19:2a:4f: 73:9c:d1:81:c8:4b:e9:14:a8:f8:30:57:cc:a6:e0:00:d5:bb: c3:90:f1:90:1e:52:8a:9a:34:63:1e:e9:f4:15:24:be:d7:cd: 94:96:b0:3b:06:ae:80:17:f7:df:00:5c:2c:4f:c0:b9:87:51: cd:a3:7a:6e:58:50:bd:1b:12:f8:43:e0:2c:4d:af:8a:5f:18: 27:33:74:a7:76:e7:62:93:f4:86:d4:29:6e:75:bb:77:61:e4: 3f:f5:c8:58:cd:96:42:04:cd:34:98:b3:6a:6a:e0:b6:0d:2a: dc:2e:18:a1:ab:e8:56:32:1a:97:ae:51:32:cc:66:03:d6:45: 1c:23:69:8a:34:7b:cf:45:07:71:7d:0d:cc:41:c5:4c:95:73: 2a:d7:a6:10:72:08:9e:d6:56:05:39:fe:df:5b:a8:30:bc:1e: 7f:22:9a:51:87:1d:35:99:f3:b7:39:fb:1c:19:8a:09:dc:00: 95:74:49:a8:6c:91:68:d4:8b:fe:8a:85:5a:91:23:bb:54:ba: f3:f3:08:44:de:4d:40:d1:ae:29:a2:2b:6e:8e:94:bf:f8:aa: 80:ae:c9:06:e3:ce:10:9e:a9:c1:f2:73:ad:7c:64:2d:a4:ec: 3d:15:c4:1f -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUIjsYT9s6O1LdQbxo48FMJtcjnHwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODA0MDEzNDM4WhcNMjcwODAzMDEzOTM4 WjAzMTEwLwYDVQQDEyg0QTg0NzIxNEExQjgwNDBGMzc2MDVGNTdCNUEyQTQ4OTk2 NTdDOTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Ij+/aaSj/t jEOK39jfq/FzlV2q/+6B5uq3POYm97T/jQ9LYbW9Z+yrT1Y8u9IbBAv094XqXLw2 oRkcWnANjbWJUAlq67rwlJoIgZewzXuz8EnkIby9xn3HCraLSOuhPYHfxjaqgPeK VwE6Qwh6jsXCj6wrakesk4DFr4TrV2jNWKqEmrON4nPPXUDKcSrHzqnYK1y9gVVL SaOMrmDykd0+H1E0xVFeX2J4+j85pd3v4+0Q1sbTdf6qNbSYm+3ILLVC/jV88Yxg Zyx4bDV3wnR+Iz1Ru1Pg3Gca66ktNyPCA87COfVm+l/fgbxA3TLSzZ3ESZLFDDnb 1msJ6zd6wwIDAQABo4ICizCCAocwHQYDVR0OBBYEFEqEchShuAQPN2BfV7WipImW V8lIMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEACgbcAMEACgbfAMEACgbfjANBgkq hkiG9w0BAQsFAAOCAQEAOb7ytiM5HHaJLkFjQgVcGSpPc5zRgchL6RSo+DBXzKbg ANW7w5DxkB5Sipo0Yx7p9BUkvtfNlJawOwaugBf33wBcLE/AuYdRzaN6blhQvRsS +EPgLE2vil8YJzN0p3bnYpP0htQpbnW7d2HkP/XIWM2WQgTNNJizamrgtg0q3C4Y oavoVjIal65RMsxmA9ZFHCNpijR7z0UHcX0NzEHFTJVzKtemEHIIntZWBTn+31uo MLwefyKaUYcdNZnztzn7HBmKCdwAlXRJqGyRaNSL/oqFWpEju1S68/MIRN5NQNGu KaIrbo6Uv/iqgK7JBuPOEJ6pwfJzrXxkLaTsPRXEHw== -----END CERTIFICATE-----Generated at Tue Sep 1 02:22:06 2026 by rpki-client