$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402257.roa File: AS402257.roa (raw, json) Hash identifier: L66apPmKIadiLjGnjk/RM+vnMrr8XPyF2kadzkArnCQ= Subject key identifier: FB:3E:3D:96:6C:46:D2:85:C1:5A:CB:25:F2:ED:72:B2:92:10:9D:40 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: AC070796A730DCCA33C71C52E2A95409748ED8 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402257.roa Signing time: Thu 02 Apr 2026 11:04:03 +0000 ROA not before: Thu 02 Apr 2026 10:59:03 +0000 ROA not after: Thu 01 Apr 2027 11:04:03 +0000 asID: 402257 IP address blocks: 40.183.120.0/24 maxlen: 24 40.183.141.0/24 maxlen: 24 40.183.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 Apr 2026 05:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ac:07:07:96:a7:30:dc:ca:33:c7:1c:52:e2:a9:54:09:74:8e:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 2 10:59:03 2026 GMT Not After : Apr 1 11:04:03 2027 GMT Subject: CN=FB3E3D966C46D285C15ACB25F2ED72B292109D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3e:3e:72:83:97:33:c3:62:98:6c:41:9f:2e: e2:90:4c:54:45:cf:76:1e:71:ea:84:c2:0b:70:51: a3:61:70:09:4f:0e:a6:62:e2:47:5b:69:d0:cb:e9: ea:17:d3:4c:42:f7:13:41:6f:d8:40:f1:94:7a:dc: 16:0a:6d:81:40:b3:f2:67:ed:46:ac:6c:dc:82:3e: 6f:be:2d:38:7e:42:0c:21:d8:17:f9:ca:5f:dd:0f: 9d:ec:0d:79:42:e0:80:df:15:ae:26:03:2e:af:91: 19:1e:d3:47:8e:10:b9:0b:2e:36:91:d1:2a:08:0f: c8:66:1d:c6:5c:d6:41:01:11:66:6d:59:b9:5e:6d: b7:43:f0:09:66:41:cb:b1:23:0d:fa:09:8c:ad:6e: b1:a4:13:43:69:04:82:b3:d3:7d:d2:ec:05:4d:5e: a8:50:eb:af:7b:7a:4a:70:02:a6:06:fc:dd:22:ad: 08:54:ff:bb:e5:dc:d9:bb:4f:fa:a8:b3:cd:70:bf: e1:c3:03:3c:2a:37:85:6c:5b:af:a8:cc:30:ea:7a: fe:68:56:0b:47:12:27:43:de:6b:6e:70:94:96:47: e5:13:89:ad:7e:43:3f:6b:12:ce:f4:76:f3:e5:ef: 17:87:03:45:a4:cc:47:fc:e5:2f:0b:a0:b1:d8:d8: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3E:3D:96:6C:46:D2:85:C1:5A:CB:25:F2:ED:72:B2:92:10:9D:40 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.120.0/24 40.183.141.0/24 40.183.236.0/24 Signature Algorithm: sha256WithRSAEncryption a0:74:b6:af:11:c9:fa:99:f4:bc:7a:ef:36:6c:c3:43:0a:55: 0e:0e:27:82:54:d5:b7:28:35:51:4a:80:e1:59:46:98:17:bc: 80:07:be:a3:f7:77:a7:ed:b5:88:68:89:00:d7:f1:02:c5:68: f3:5c:67:75:09:74:14:f3:e1:0f:a9:7e:6c:07:95:68:6e:b4: 65:e3:b6:c4:fd:df:7f:60:75:53:5a:5f:b2:4e:a5:70:21:1a: 6d:ae:39:4e:e4:43:25:fc:52:da:a4:3d:90:2d:f2:21:db:7b: 07:f0:a4:39:a0:cb:6b:b4:61:f2:37:b8:b3:6a:61:8b:c8:79: 53:82:9b:41:ba:be:ef:e9:a5:d9:e2:44:98:a6:8c:f6:a8:e9: 2a:91:bb:dd:e0:59:9a:06:10:fa:3b:ec:51:ec:93:ae:65:1a: 67:d7:dc:c3:ac:ac:90:63:c0:24:bb:2d:b3:d0:15:c5:bf:61: ea:81:d8:6c:92:99:72:a7:c2:55:9c:e7:44:2f:68:8a:a3:f1: 53:ad:e1:80:7b:f4:de:f1:42:1c:d1:8f:17:28:71:eb:8f:fa: b4:5d:55:3c:d4:e9:56:ea:18:27:65:c6:2f:ac:f0:b2:53:6b: 22:f7:90:df:6e:1f:93:08:5f:93:e8:db:64:bd:dc:8f:24:5a: a9:1b:a1:22 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUAKwHB5anMNzKM8ccUuKpVAl0jtgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDAyMTA1OTAzWhcNMjcwNDAxMTEwNDAz WjAzMTEwLwYDVQQDEyhGQjNFM0Q5NjZDNDZEMjg1QzE1QUNCMjVGMkVENzJCMjky MTA5RDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz4+coOXM8Ni mGxBny7ikExURc92HnHqhMILcFGjYXAJTw6mYuJHW2nQy+nqF9NMQvcTQW/YQPGU etwWCm2BQLPyZ+1GrGzcgj5vvi04fkIMIdgX+cpf3Q+d7A15QuCA3xWuJgMur5EZ HtNHjhC5Cy42kdEqCA/IZh3GXNZBARFmbVm5Xm23Q/AJZkHLsSMN+gmMrW6xpBND aQSCs9N90uwFTV6oUOuve3pKcAKmBvzdIq0IVP+75dzZu0/6qLPNcL/hwwM8KjeF bFuvqMww6nr+aFYLRxInQ95rbnCUlkflE4mtfkM/axLO9Hbz5e8XhwNFpMxH/OUv C6Cx2NjMtQIDAQABo4ICizCCAocwHQYDVR0OBBYEFPs+PZZsRtKFwVrLJfLtcrKS EJ1AMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwMjI1Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEACi3eAMEACi3jQMEACi37DANBgkq hkiG9w0BAQsFAAOCAQEAoHS2rxHJ+pn0vHrvNmzDQwpVDg4nglTVtyg1UUqA4VlG mBe8gAe+o/d3p+21iGiJANfxAsVo81xndQl0FPPhD6l+bAeVaG60ZeO2xP3ff2B1 U1pfsk6lcCEaba45TuRDJfxS2qQ9kC3yIdt7B/CkOaDLa7Rh8je4s2phi8h5U4Kb Qbq+7+ml2eJEmKaM9qjpKpG73eBZmgYQ+jvsUeyTrmUaZ9fcw6yskGPAJLsts9AV xb9h6oHYbJKZcqfCVZznRC9oiqPxU63hgHv03vFCHNGPFyhx64/6tF1VPNTpVuoY J2XGL6zwslNrIveQ324fkwhfk+jbZL3cjyRaqRuhIg== -----END CERTIFICATE-----Generated at Sat Apr 4 16:55:58 2026 by rpki-client