$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: VxuaL1cVPy0atbToFA7NGWCb70hAVBGuE2QJZ3pkXJE= Subject key identifier: 31:E1:82:66:D4:88:0C:49:1C:2A:55:BA:DB:EE:73:FF:54:70:81:FA Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 097EBCD4389307FF482D8273E7CC92FF8920D0E0 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa Signing time: Fri 02 Oct 2026 10:52:59 +0000 ROA not before: Fri 02 Oct 2026 10:47:59 +0000 ROA not after: Fri 01 Oct 2027 10:52:59 +0000 asID: 25198 IP address blocks: 40.27.107.0/24 maxlen: 24 40.27.125.0/24 maxlen: 24 40.223.9.0/24 maxlen: 24 40.223.250.0/24 maxlen: 24 40.223.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 05:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:7e:bc:d4:38:93:07:ff:48:2d:82:73:e7:cc:92:ff:89:20:d0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 2 10:47:59 2026 GMT Not After : Oct 1 10:52:59 2027 GMT Subject: CN=31E18266D4880C491C2A55BADBEE73FF547081FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:ad:81:67:72:f9:da:3c:af:6e:5d:21:a4: 22:8a:b8:44:31:82:44:66:87:d9:2c:d2:5c:0e:b6: ea:11:9c:a9:a5:9f:f7:f3:91:56:31:3b:d1:b0:aa: 82:f3:c4:6e:7e:ef:5c:7e:b5:1c:c2:8b:46:e0:1b: bc:57:21:bc:26:75:4a:9b:a3:59:e4:ae:b7:c6:94: dd:0c:a3:b6:94:37:28:42:54:d4:a7:01:37:ab:20: ca:9d:e6:49:2e:84:07:7f:70:92:dc:6f:7c:aa:b7: 23:05:69:cf:6e:df:98:6c:10:64:a8:08:80:60:11: 7d:2a:a9:52:f2:34:ad:77:d4:09:f6:86:14:8c:b8: 11:42:5a:32:74:6b:39:77:45:fe:f5:04:a3:d4:89: 24:1c:37:ad:ae:3c:79:f5:26:33:6b:cb:85:2f:15: 30:c1:f4:44:8e:7a:2e:c9:e1:c1:82:c5:b5:18:af: c0:d7:4e:ee:21:9e:e8:12:9d:fd:95:45:03:fa:83: a3:d9:87:17:90:0b:fb:53:9a:97:da:13:40:6b:12: 79:3e:cd:02:20:a4:3b:1c:7e:d7:37:85:f3:ab:17: 0e:2b:c8:2b:a8:09:4d:45:a3:c5:d7:c6:ba:c3:6c: 3f:ac:73:b3:b9:27:73:40:39:53:d1:70:ec:ed:9b: 6e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E1:82:66:D4:88:0C:49:1C:2A:55:BA:DB:EE:73:FF:54:70:81:FA X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.107.0/24 40.27.125.0/24 40.223.9.0/24 40.223.250.0/24 40.223.255.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:16:51:62:78:86:6f:06:4c:d0:42:ac:0a:4d:6a:d6:f4:17: d1:39:53:1c:2e:c6:e2:ad:80:24:b8:fb:3c:e8:6f:af:8e:95: be:28:28:8d:38:43:fe:d6:bd:e6:25:e8:c8:e5:48:ce:63:24: e2:e2:7b:87:b3:dc:a2:ff:f1:6a:15:2f:54:e0:7c:a7:57:b2: ed:c5:c7:a1:9f:0c:26:dc:0f:a0:65:c5:8f:ca:c7:26:8e:b1: 8d:aa:3d:ab:08:1a:fe:30:b3:52:51:74:75:4a:20:4d:e7:31: b5:ce:26:ce:8c:d4:4f:94:3e:6c:41:71:4a:e0:ad:c4:e2:a2: a6:33:2f:86:20:0b:0d:4b:eb:a7:59:ea:38:1c:25:bc:35:19: b7:88:90:37:00:65:48:c8:76:e3:29:7a:58:f7:b8:30:5a:c8: 7b:9c:84:1e:40:ad:b8:51:ac:c1:e5:f6:53:ef:d4:0b:1a:e9: 6d:d4:c4:29:5d:46:a4:f4:f9:ad:f4:dd:3d:7a:b3:bc:2a:c6: 16:ff:0f:c9:8b:11:0e:37:3d:47:26:da:c3:f9:df:60:7a:22: 21:a9:25:27:cd:c9:ae:cf:5c:28:e3:7a:49:c3:63:b4:6f:41: 73:4f:a7:3b:66:01:3f:91:eb:d4:99:4e:5d:2c:1d:e2:79:86: 8f:e9:46:43 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUCX681DiTB/9ILYJz58yS/4kg0OAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMDAyMTA0NzU5WhcNMjcxMDAxMTA1MjU5 WjAzMTEwLwYDVQQDEygzMUUxODI2NkQ0ODgwQzQ5MUMyQTU1QkFEQkVFNzNGRjU0 NzA4MUZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJKtgWdy+do8 r25dIaQiirhEMYJEZofZLNJcDrbqEZyppZ/385FWMTvRsKqC88Rufu9cfrUcwotG 4Bu8VyG8JnVKm6NZ5K63xpTdDKO2lDcoQlTUpwE3qyDKneZJLoQHf3CS3G98qrcj BWnPbt+YbBBkqAiAYBF9KqlS8jStd9QJ9oYUjLgRQloydGs5d0X+9QSj1IkkHDet rjx59SYza8uFLxUwwfREjnouyeHBgsW1GK/A107uIZ7oEp39lUUD+oOj2YcXkAv7 U5qX2hNAaxJ5Ps0CIKQ7HH7XN4XzqxcOK8grqAlNRaPF18a6w2w/rHOzuSdzQDlT 0XDs7ZtupwIDAQABo4ICljCCApIwHQYDVR0OBBYEFDHhgmbUiAxJHCpVutvuc/9U cIH6MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAKBtrAwQAKBt9AwQAKN8JAwQAKN/6 AwQAKN//MA0GCSqGSIb3DQEBCwUAA4IBAQCbFlFieIZvBkzQQqwKTWrW9BfROVMc LsbirYAkuPs86G+vjpW+KCiNOEP+1r3mJejI5UjOYyTi4nuHs9yi//FqFS9U4Hyn V7Ltxcehnwwm3A+gZcWPyscmjrGNqj2rCBr+MLNSUXR1SiBN5zG1zibOjNRPlD5s QXFK4K3E4qKmMy+GIAsNS+unWeo4HCW8NRm3iJA3AGVIyHbjKXpY97gwWsh7nIQe QK24UazB5fZT79QLGult1MQpXUak9Pmt9N09erO8KsYW/w/JixEONz1HJtrD+d9g eiIhqSUnzcmuz1wo43pJw2O0b0FzT6c7ZgE/kevUmU5dLB3ieYaP6UZD -----END CERTIFICATE-----Generated at Mon Oct 19 13:14:53 2026 by rpki-client