$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa File: AS2914.roa (raw, json) Hash identifier: 70zE6yJ2Tan4KHZyheqt7iwQlvIss/5u4B4Gfwtu4Zk= Subject key identifier: 34:8B:A9:CC:7E:BA:57:DD:71:F1:D6:88:38:A3:52:11:18:EA:D0:A3 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 500B1E77362D5B507CFEF0ED310102BB4A34B4F6 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa Signing time: Tue 25 Aug 2026 02:13:27 +0000 ROA not before: Tue 25 Aug 2026 02:08:27 +0000 ROA not after: Tue 24 Aug 2027 02:13:27 +0000 asID: 2914 IP address blocks: 40.27.48.0/24 maxlen: 24 40.27.49.0/24 maxlen: 24 40.27.50.0/24 maxlen: 24 40.27.52.0/24 maxlen: 24 40.27.53.0/24 maxlen: 24 40.27.54.0/24 maxlen: 24 40.27.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:0b:1e:77:36:2d:5b:50:7c:fe:f0:ed:31:01:02:bb:4a:34:b4:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 25 02:08:27 2026 GMT Not After : Aug 24 02:13:27 2027 GMT Subject: CN=348BA9CC7EBA57DD71F1D68838A3521118EAD0A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:70:01:72:3e:78:31:98:d6:19:15:37:1c: 37:e7:39:75:a7:1e:35:10:6d:86:16:5e:54:7a:3c: c9:29:4a:a8:67:c4:06:a0:67:a7:ab:53:54:07:77: 3e:a0:d7:08:2c:fa:6c:e5:82:18:fd:4b:a5:a1:e9: 39:db:d0:93:67:26:0b:8f:b5:a4:4d:98:10:2f:33: 54:67:ba:b6:b7:87:53:00:b5:3a:b6:d0:a8:d2:2e: 81:b7:bc:70:64:ba:a5:49:36:ec:f0:7f:3e:2f:39: 7d:5a:f0:2e:da:f6:4d:22:10:f3:15:12:61:22:15: 19:09:13:92:44:6a:73:18:4f:99:49:68:4d:53:b8: b1:a0:2c:c5:35:0e:f0:24:a0:73:ba:0b:fc:b9:77: 95:7b:d1:a3:b0:1a:31:f3:7e:72:18:99:d9:97:6d: 78:01:af:8b:0a:f1:a4:84:52:be:26:33:1c:49:82: 01:8d:18:c0:7f:54:d0:2b:ee:97:11:2c:63:f5:04: 3c:b0:26:f9:d0:e2:b0:c4:cf:46:ae:1d:c0:6c:a2: 21:af:a6:df:c1:a8:61:83:22:50:cd:ee:d6:61:27: 24:c7:f3:ef:d4:ab:f6:7d:b7:2e:48:f5:f8:28:37: 6d:1d:44:f4:8e:83:5b:4d:77:c5:d6:db:77:7a:4e: 19:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8B:A9:CC:7E:BA:57:DD:71:F1:D6:88:38:A3:52:11:18:EA:D0:A3 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS2914.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.48.0-40.27.50.255 40.27.52.0-40.27.54.255 40.27.133.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:88:78:6c:31:67:d5:d1:82:63:5b:b6:1c:71:c2:9c:05:19: 7a:6a:e5:97:d1:1e:f0:ff:20:dd:8e:19:fa:e0:e4:d4:ff:33: ed:1e:ed:16:5b:68:89:21:f7:6c:c4:56:d1:a4:77:5c:d3:93: 7d:5f:d5:e8:d3:af:b2:d4:76:f4:71:7b:72:37:f8:06:f1:a7: 04:ca:76:ad:13:c1:08:d4:9b:92:6d:30:86:d4:04:70:5c:56: 2d:1c:66:0a:b7:8b:9e:7f:48:8c:fb:d4:62:9a:74:40:09:4c: a5:0e:ce:8a:f6:1f:35:93:2c:35:7b:a5:11:6e:e9:db:4d:d5: 54:09:7c:be:39:76:34:52:b8:dc:e3:7a:43:ac:77:07:ba:e2: 7d:2b:9b:9a:ac:24:2f:00:67:cd:92:68:06:c2:94:96:7b:e3: 92:2b:ba:9c:92:db:2a:72:fe:c5:2e:4c:fd:e9:07:38:45:40: 39:eb:e8:9c:60:48:2f:61:13:10:2f:fb:b8:35:da:42:2e:ef: 41:d9:84:a9:1e:58:d7:a9:f1:5d:54:bd:be:16:dc:74:00:bd: 2a:cc:52:ac:8f:57:18:76:30:26:d2:1a:66:f8:d1:65:ff:58: 13:b9:f1:81:5e:4e:1d:69:30:da:36:d1:28:e8:52:f9:6b:61: 04:cd:24:60 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUUAsedzYtW1B8/vDtMQECu0o0tPYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODI1MDIwODI3WhcNMjcwODI0MDIxMzI3 WjAzMTEwLwYDVQQDEygzNDhCQTlDQzdFQkE1N0RENzFGMUQ2ODgzOEEzNTIxMTE4 RUFEMEEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDNwAXI+eDGY 1hkVNxw35zl1px41EG2GFl5UejzJKUqoZ8QGoGenq1NUB3c+oNcILPps5YIY/Uul oek529CTZyYLj7WkTZgQLzNUZ7q2t4dTALU6ttCo0i6Bt7xwZLqlSTbs8H8+Lzl9 WvAu2vZNIhDzFRJhIhUZCROSRGpzGE+ZSWhNU7ixoCzFNQ7wJKBzugv8uXeVe9Gj sBox835yGJnZl214Aa+LCvGkhFK+JjMcSYIBjRjAf1TQK+6XESxj9QQ8sCb50OKw xM9Grh3AbKIhr6bfwahhgyJQze7WYSckx/Pv1Kv2fbcuSPX4KDdtHUT0joNbTXfF 1tt3ek4ZxQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFDSLqcx+ulfdcfHWiDijUhEY 6tCjMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzI5MTQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwOwYI KwYBBQUHAQcBAf8ELDAqMCgEAgABMCIwDAMEBCgbMAMEACgbMjAMAwQCKBs0AwQA KBs2AwQAKBuFMA0GCSqGSIb3DQEBCwUAA4IBAQBsiHhsMWfV0YJjW7YcccKcBRl6 auWX0R7w/yDdjhn64OTU/zPtHu0WW2iJIfdsxFbRpHdc05N9X9Xo06+y1Hb0cXty N/gG8acEynatE8EI1JuSbTCG1ARwXFYtHGYKt4uef0iM+9RimnRACUylDs6K9h81 kyw1e6URbunbTdVUCXy+OXY0Urjc43pDrHcHuuJ9K5uarCQvAGfNkmgGwpSWe+OS K7qcktsqcv7FLkz96Qc4RUA56+icYEgvYRMQL/u4NdpCLu9B2YSpHljXqfFdVL2+ Ftx0AL0qzFKsj1cYdjAm0hpm+NFl/1gTufGBXk4daTDaNtEo6FL5a2EEzSRg -----END CERTIFICATE-----Generated at Fri Sep 4 20:35:33 2026 by rpki-client