$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa File: AS209888.roa (raw, json) Hash identifier: UVzexdYWdUXBKJymEY/mcWajAYxotTVHZybc6E/srDg= Subject key identifier: D2:25:3F:FF:41:16:4D:85:D8:EA:D7:63:27:87:70:CF:52:2E:19:12 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 473AE588C66FB4B61F72B2E8915CFACB1A53F794 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa Signing time: Thu 14 May 2026 14:42:50 +0000 ROA not before: Thu 14 May 2026 14:37:50 +0000 ROA not after: Thu 13 May 2027 14:42:50 +0000 asID: 209888 IP address blocks: 40.27.113.0/24 maxlen: 24 40.27.132.0/24 maxlen: 24 40.27.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 05 Jun 2026 08:38:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:3a:e5:88:c6:6f:b4:b6:1f:72:b2:e8:91:5c:fa:cb:1a:53:f7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: May 14 14:37:50 2026 GMT Not After : May 13 14:42:50 2027 GMT Subject: CN=D2253FFF41164D85D8EAD763278770CF522E1912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a4:e4:bb:64:9b:e2:4a:06:86:1a:5f:99:92: 6a:93:5b:30:47:35:f2:b4:96:0b:b9:9a:a5:a9:40: c7:8b:43:d6:4f:01:3e:ec:0d:23:cc:c8:88:9a:52: 39:39:c1:32:74:13:aa:0d:7a:6b:52:7d:dc:f5:8c: 9d:4f:cd:93:8f:ba:c3:ba:6a:4a:0b:7e:db:f6:b3: 98:78:86:a8:0c:48:8b:ff:50:31:03:5e:5f:f4:e7: e0:25:9d:7a:cc:b0:27:38:4f:5b:04:c1:e4:2c:97: a1:6a:20:54:84:74:81:98:32:f7:46:c4:30:9b:9b: 5b:22:37:3a:e0:bd:b0:c8:2c:37:3a:b9:0f:14:ff: 28:c7:aa:ca:8e:83:55:01:49:23:d2:8d:3a:fa:51: 98:0d:e6:c8:e3:3d:70:f3:84:62:a9:0c:88:5a:76: 23:03:1f:4c:91:c8:c7:d4:c4:14:76:d2:3e:97:60: 4d:f9:e3:f1:e4:26:52:b4:7c:71:8c:37:26:3f:71: de:e8:4c:de:76:3c:e3:8b:25:f6:c2:18:e4:f1:36: 21:77:3a:24:1d:21:76:c6:f3:af:af:c2:8f:cf:d0: 45:3c:08:a9:0b:eb:b5:c6:2b:be:a6:d2:63:61:cf: 49:3d:a0:45:6c:17:13:67:16:b6:10:ba:11:99:57: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:3F:FF:41:16:4D:85:D8:EA:D7:63:27:87:70:CF:52:2E:19:12 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.113.0/24 40.27.132.0/24 40.27.135.0/24 Signature Algorithm: sha256WithRSAEncryption 99:f6:9c:e6:84:85:41:a2:6c:1c:0b:5f:9a:9b:8e:7d:96:83: cc:6d:16:c5:5e:2e:db:3d:61:3d:7f:83:a4:53:1c:b1:d1:00: 81:50:d0:f4:a0:49:70:93:34:19:9c:e6:d3:06:a7:3e:43:94: 00:be:32:05:5f:c7:14:5f:4a:fb:80:14:f5:e8:4b:77:8d:bc: b2:c7:c8:c2:08:0a:13:1c:34:3d:1a:d1:cd:98:40:8b:18:c8: ac:63:2a:80:56:bf:7e:0f:a0:7c:8b:2b:af:07:6a:a5:cb:af: 0c:f3:10:4a:b9:8f:6c:cb:3e:c8:08:9f:4f:ee:42:af:87:23: 3b:8b:7b:15:0d:e7:54:36:7d:54:d1:6e:37:15:bb:d7:d6:ad: 7f:70:2c:f1:c9:3f:cf:5b:01:98:1e:7b:0c:32:87:73:40:49: 02:53:d3:1d:09:2e:42:9c:d6:46:45:5e:7c:19:ee:58:d9:b0: 37:3e:0e:2c:c3:69:45:fd:64:85:bd:60:6b:9f:09:a7:08:4b: d4:57:fb:55:19:f5:9b:27:93:a7:97:10:16:40:bc:b5:a8:6e: aa:e5:ea:7b:5b:e3:4e:b0:e1:50:d4:b0:0a:84:7d:38:24:83: 54:22:cb:8a:c2:bd:b4:6c:68:02:ef:c4:ce:f1:3f:ef:9f:48: 89:5c:c3:e8 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIURzrliMZvtLYfcrLokVz6yxpT95QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNTE0MTQzNzUwWhcNMjcwNTEzMTQ0MjUw WjAzMTEwLwYDVQQDEyhEMjI1M0ZGRjQxMTY0RDg1RDhFQUQ3NjMyNzg3NzBDRjUy MkUxOTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKTku2Sb4koG hhpfmZJqk1swRzXytJYLuZqlqUDHi0PWTwE+7A0jzMiImlI5OcEydBOqDXprUn3c 9YydT82Tj7rDumpKC37b9rOYeIaoDEiL/1AxA15f9OfgJZ16zLAnOE9bBMHkLJeh aiBUhHSBmDL3RsQwm5tbIjc64L2wyCw3OrkPFP8ox6rKjoNVAUkj0o06+lGYDebI 4z1w84RiqQyIWnYjAx9MkcjH1MQUdtI+l2BN+ePx5CZStHxxjDcmP3He6Ezedjzj iyX2whjk8TYhdzokHSF2xvOvr8KPz9BFPAipC+u1xiu+ptJjYc9JPaBFbBcTZxa2 ELoRmVf7TQIDAQABo4ICizCCAocwHQYDVR0OBBYEFNIlP/9BFk2F2OrXYyeHcM9S LhkSMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEACgbcQMEACgbhAMEACgbhzANBgkq hkiG9w0BAQsFAAOCAQEAmfac5oSFQaJsHAtfmpuOfZaDzG0WxV4u2z1hPX+DpFMc sdEAgVDQ9KBJcJM0GZzm0wanPkOUAL4yBV/HFF9K+4AU9ehLd428ssfIwggKExw0 PRrRzZhAixjIrGMqgFa/fg+gfIsrrwdqpcuvDPMQSrmPbMs+yAifT+5Cr4cjO4t7 FQ3nVDZ9VNFuNxW719atf3As8ck/z1sBmB57DDKHc0BJAlPTHQkuQpzWRkVefBnu WNmwNz4OLMNpRf1khb1ga58JpwhL1Ff7VRn1myeTp5cQFkC8tahuquXqe1vjTrDh UNSwCoR9OCSDVCLLisK9tGxoAu/EzvE/759IiVzD6A== -----END CERTIFICATE-----Generated at Thu Jun 4 13:02:17 2026 by rpki-client