$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: Pshqt75rACc44dMVYsD+ynDlSehDHv1pIVXHcvYDmy0= Subject key identifier: 28:55:32:D9:58:F9:7D:53:36:04:47:4B:C2:F4:A1:EB:CA:C3:68:F1 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 268464B51A46969EABB6F9F2AC3E2369D28894DF Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa Signing time: Tue 01 Jul 2025 14:32:57 +0000 ROA not before: Tue 01 Jul 2025 14:27:57 +0000 ROA not after: Tue 30 Jun 2026 14:32:57 +0000 asID: 152868 IP address blocks: 40.27.21.0/24 maxlen: 24 40.27.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Jul 2025 13:38:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:84:64:b5:1a:46:96:9e:ab:b6:f9:f2:ac:3e:23:69:d2:88:94:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 1 14:27:57 2025 GMT Not After : Jun 30 14:32:57 2026 GMT Subject: CN=285532D958F97D533604474BC2F4A1EBCAC368F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:4f:2e:83:63:47:2c:03:d9:ae:8f:11:84:74: 4c:27:7a:0a:b6:b9:d6:e9:00:5d:43:f1:63:86:31: a3:39:47:e7:67:34:35:21:d0:33:82:19:a6:8d:6f: 9d:f5:ce:05:ee:52:1b:44:c7:65:2c:40:35:9e:8a: 10:d5:ae:ff:9b:88:2a:3c:72:3e:14:70:48:76:2e: 68:70:64:27:df:82:70:95:5f:3e:40:09:19:52:00: 4c:e3:0f:58:8f:e4:ec:22:18:21:a9:83:73:06:69: a5:57:97:56:af:d3:ec:3e:3e:5b:79:82:90:03:42: 7b:91:bd:c4:88:12:4d:58:06:e5:46:c6:ba:6c:9a: 2b:8c:98:28:6a:bc:f9:a8:3d:52:36:91:08:9f:ae: 45:94:fe:67:7d:9d:aa:8b:3e:1d:c6:18:f8:21:3b: e5:72:4d:36:aa:cb:54:c6:cc:23:3f:ce:26:fe:15: 30:21:e7:10:c0:ce:63:a3:1c:a8:f7:98:26:fc:f4: 0e:b8:d2:d6:67:cd:44:b7:b9:ce:2c:92:c0:2e:83: 50:8f:1d:39:49:ba:73:1a:b8:b1:2f:2d:82:6f:04: 30:35:1e:1f:8c:9d:f8:a1:7d:5a:16:3c:71:7c:8e: 44:4f:e5:66:d7:95:1e:bb:bb:0b:e2:07:06:07:8a: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:55:32:D9:58:F9:7D:53:36:04:47:4B:C2:F4:A1:EB:CA:C3:68:F1 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.21.0/24 40.27.137.0/24 Signature Algorithm: sha256WithRSAEncryption 66:98:6e:a2:b3:94:4d:0c:2d:8f:cf:eb:5c:cc:27:0e:d9:0a: e8:eb:2a:c2:e5:0e:84:2a:d6:53:4f:9d:4c:01:61:1c:3b:6d: b5:e0:ec:a2:5a:93:ee:8a:50:79:d2:55:0c:72:2f:4f:cc:e7: 90:95:c5:99:16:4f:be:63:f6:12:31:2e:58:1e:11:e0:7e:86: 53:c0:62:b8:d0:ca:6c:12:a6:6f:aa:2f:24:26:03:72:33:94: 47:65:76:80:ca:af:0b:26:bc:c3:75:42:e6:e3:37:f1:fc:90: 39:63:6a:35:e2:89:75:78:b3:e8:38:11:43:9d:3d:84:58:1f: 95:b4:d6:d3:6b:58:c9:c2:30:09:42:a7:44:a3:75:6d:9c:97: a4:37:ff:ba:44:a2:13:dc:1a:7a:60:ae:9a:ec:51:92:fb:de: ba:e3:25:04:cb:f6:6f:dc:da:6b:0c:75:e9:e0:ec:f3:05:0d: 8a:ad:f6:55:65:85:74:ee:85:ee:1a:b0:61:fa:e6:4d:49:04: f1:cc:85:13:93:46:65:96:76:61:c8:31:60:f2:59:fc:ff:56: 59:cb:56:d9:ea:25:16:75:7e:82:52:84:5b:79:07:de:d5:5f: b4:68:7c:dc:bc:41:ec:61:dd:5a:6e:56:2d:98:93:2b:6e:cd: a9:15:09:4e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUJoRktRpGlp6rtvnyrD4jadKIlN8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzAxMTQyNzU3WhcNMjYwNjMwMTQzMjU3 WjAzMTEwLwYDVQQDEygyODU1MzJEOTU4Rjk3RDUzMzYwNDQ3NEJDMkY0QTFFQkNB QzM2OEYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk8ug2NHLAPZ ro8RhHRMJ3oKtrnW6QBdQ/FjhjGjOUfnZzQ1IdAzghmmjW+d9c4F7lIbRMdlLEA1 nooQ1a7/m4gqPHI+FHBIdi5ocGQn34JwlV8+QAkZUgBM4w9Yj+TsIhghqYNzBmml V5dWr9PsPj5beYKQA0J7kb3EiBJNWAblRsa6bJorjJgoarz5qD1SNpEIn65FlP5n fZ2qiz4dxhj4ITvlck02qstUxswjP84m/hUwIecQwM5joxyo95gm/PQOuNLWZ81E t7nOLJLALoNQjx05SbpzGrixLy2CbwQwNR4fjJ34oX1aFjxxfI5ET+Vm15Ueu7sL 4gcGB4rcawIDAQABo4IChTCCAoEwHQYDVR0OBBYEFChVMtlY+X1TNgRHS8L0oevK w2jxMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACgbFQMEACgbiTANBgkqhkiG9w0B AQsFAAOCAQEAZphuorOUTQwtj8/rXMwnDtkK6OsqwuUOhCrWU0+dTAFhHDttteDs olqT7opQedJVDHIvT8znkJXFmRZPvmP2EjEuWB4R4H6GU8BiuNDKbBKmb6ovJCYD cjOUR2V2gMqvCya8w3VC5uM38fyQOWNqNeKJdXiz6DgRQ509hFgflbTW02tYycIw CUKnRKN1bZyXpDf/ukSiE9waemCumuxRkvveuuMlBMv2b9zaawx16eDs8wUNiq32 VWWFdO6F7hqwYfrmTUkE8cyFE5NGZZZ2YcgxYPJZ/P9WWctW2eolFnV+glKEW3kH 3tVftGh83LxB7GHdWm5WLZiTK27NqRUJTg== -----END CERTIFICATE-----Generated at Sat Jul 5 04:39:25 2025 by rpki-client