$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: tXcW7wGHc+e4FFU/fKgozzjYP6jfPcmCZ+hQS8juU5M= Subject key identifier: CD:74:E1:8C:2A:58:E1:98:65:A8:09:EE:1A:AC:52:42:C0:49:6D:C7 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 7D25D029E715B735EE34F7F300720C2DBC42EA84 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa Signing time: Thu 04 Sep 2025 13:13:32 +0000 ROA not before: Thu 04 Sep 2025 13:08:32 +0000 ROA not after: Thu 03 Sep 2026 13:13:32 +0000 asID: 25198 IP address blocks: 40.183.143.0/24 maxlen: 24 40.183.214.0/24 maxlen: 24 40.223.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 02:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:25:d0:29:e7:15:b7:35:ee:34:f7:f3:00:72:0c:2d:bc:42:ea:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 4 13:08:32 2025 GMT Not After : Sep 3 13:13:32 2026 GMT Subject: CN=CD74E18C2A58E19865A809EE1AAC5242C0496DC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:2f:ae:b5:14:c7:2c:5d:2c:bb:47:a9:b6:dd: 83:1f:33:d0:ac:1d:88:91:1e:64:d5:9f:e6:5b:fe: 80:ae:1c:c1:da:7f:24:99:d5:97:dd:18:2f:46:b0: a2:9a:95:7d:8c:7c:e0:b5:33:e6:a1:16:19:b5:a3: 6a:ab:13:65:7a:ab:03:1c:05:d9:f1:cc:24:e3:bd: 7b:bd:27:c0:91:ad:f6:c5:25:56:aa:0a:82:4f:ef: cb:30:83:85:ab:cf:a7:0d:e4:bf:86:42:4d:1b:68: f0:de:78:7f:31:0a:ce:69:92:ba:dc:c9:2b:e0:fb: c3:f2:15:45:cd:d1:09:bb:4d:eb:4f:b0:73:42:19: c0:ac:cc:bd:89:c8:12:6e:a7:ef:a9:2f:fe:b5:70: fc:99:95:b1:00:17:da:57:64:b3:20:c4:df:fa:b3: c7:16:c3:c0:c1:e1:53:5d:ba:56:1b:4d:f4:7a:6b: cf:dc:33:50:df:8f:6e:46:ee:a4:11:d3:e8:fa:d8: 53:1b:02:21:b7:b3:2f:b4:bf:c1:55:17:bb:4b:91: de:2d:53:ac:70:8e:b3:d4:78:c4:28:05:f6:29:24: 5b:31:71:6f:0c:2d:02:2c:66:4f:b9:06:6c:6b:59: 35:df:61:8d:71:d3:0c:96:04:03:60:e8:7c:a2:a6: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:74:E1:8C:2A:58:E1:98:65:A8:09:EE:1A:AC:52:42:C0:49:6D:C7 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.143.0/24 40.183.214.0/24 40.223.86.0/24 Signature Algorithm: sha256WithRSAEncryption 57:1e:ad:52:22:c6:0b:2d:6c:d0:78:b9:e3:2d:f3:9c:f6:07: 61:30:e6:28:61:ff:89:52:13:4c:62:c3:c7:f7:d7:21:eb:f1: 69:03:eb:8a:95:94:ea:c8:af:03:a0:47:b1:bd:24:62:f9:6b: 02:c1:51:ee:cd:b0:f6:a2:a7:42:42:2b:5e:be:7a:e0:a7:ab: 8a:a1:3c:92:27:f9:37:cd:c9:a0:91:24:3d:a0:25:b8:6c:ab: df:2a:69:8f:55:37:76:97:3e:be:3f:8a:50:c6:18:11:87:88: 5e:17:89:3d:7c:42:9a:4a:ab:5d:5c:96:da:16:d3:bf:d4:73: 48:ac:eb:38:8a:ad:9c:8b:33:d3:f5:d2:e6:68:07:fa:cb:c5: 88:f7:0b:69:d8:b3:45:03:4c:b4:b3:cd:20:06:e1:5b:0c:ac: 92:1a:34:75:3b:7e:14:37:b4:2c:d3:2b:d7:25:17:a4:55:b1: 20:30:a5:42:c1:30:a6:d3:93:fe:52:c3:61:aa:f7:1b:98:76: 44:b4:16:25:6a:42:a6:c9:d4:5f:1b:0b:6b:24:67:75:90:41: 6d:cf:e3:6c:00:d8:57:b8:51:9f:55:82:8e:8e:dd:26:b0:5c: a9:a2:c6:fd:8d:c9:e3:11:7b:4e:3d:df:ce:f2:bc:21:32:85: f6:89:71:e4 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUfSXQKecVtzXuNPfzAHIMLbxC6oQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTA0MTMwODMyWhcNMjYwOTAzMTMxMzMy WjAzMTEwLwYDVQQDEyhDRDc0RTE4QzJBNThFMTk4NjVBODA5RUUxQUFDNTI0MkMw NDk2REM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0i+utRTHLF0s u0eptt2DHzPQrB2IkR5k1Z/mW/6ArhzB2n8kmdWX3RgvRrCimpV9jHzgtTPmoRYZ taNqqxNleqsDHAXZ8cwk4717vSfAka32xSVWqgqCT+/LMIOFq8+nDeS/hkJNG2jw 3nh/MQrOaZK63Mkr4PvD8hVFzdEJu03rT7BzQhnArMy9icgSbqfvqS/+tXD8mZWx ABfaV2SzIMTf+rPHFsPAweFTXbpWG030emvP3DNQ349uRu6kEdPo+thTGwIht7Mv tL/BVRe7S5HeLVOscI6z1HjEKAX2KSRbMXFvDC0CLGZPuQZsa1k132GNcdMMlgQD YOh8oqZbdwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFM104YwqWOGYZagJ7hqsUkLA SW3HMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAKLePAwQAKLfWAwQAKN9WMA0GCSqG SIb3DQEBCwUAA4IBAQBXHq1SIsYLLWzQeLnjLfOc9gdhMOYoYf+JUhNMYsPH99ch 6/FpA+uKlZTqyK8DoEexvSRi+WsCwVHuzbD2oqdCQitevnrgp6uKoTySJ/k3zcmg kSQ9oCW4bKvfKmmPVTd2lz6+P4pQxhgRh4heF4k9fEKaSqtdXJbaFtO/1HNIrOs4 iq2cizPT9dLmaAf6y8WI9wtp2LNFA0y0s80gBuFbDKySGjR1O34UN7Qs0yvXJRek VbEgMKVCwTCm05P+UsNhqvcbmHZEtBYlakKmydRfGwtrJGd1kEFtz+NsANhXuFGf VYKOjt0msFyposb9jcnjEXtOPd/O8rwhMoX2iXHk -----END CERTIFICATE-----Generated at Sat Sep 6 05:22:36 2025 by rpki-client