$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402298.roa File: AS402298.roa (raw, json) Hash identifier: gsfedWoiam/22yJSn/UvfPTUoGcCwge9C2YMFP2FBkA= Subject key identifier: 3C:AA:40:CF:12:AA:CE:39:52:A9:1C:41:D1:FE:CD:E6:5C:D8:7A:D5 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 0CA56E7043656FF0A6B46EC33CA29ED74E562302 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402298.roa Signing time: Wed 29 Apr 2026 17:10:16 +0000 ROA not before: Wed 29 Apr 2026 17:05:16 +0000 ROA not after: Wed 28 Apr 2027 17:10:16 +0000 asID: 402298 IP address blocks: 40.27.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 12:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a5:6e:70:43:65:6f:f0:a6:b4:6e:c3:3c:a2:9e:d7:4e:56:23:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 29 17:05:16 2026 GMT Not After : Apr 28 17:10:16 2027 GMT Subject: CN=3CAA40CF12AACE3952A91C41D1FECDE65CD87AD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3c:5a:02:14:52:fe:07:0f:a1:67:80:59:96: c4:40:97:c2:90:8e:a2:64:8d:59:9a:bd:31:64:cf: 52:7f:73:22:8c:7b:8e:21:f3:d2:b8:26:22:6e:a0: 88:73:3b:de:05:e0:08:e6:d1:7e:6c:b9:a1:56:0b: 78:89:bb:ff:09:be:69:89:25:66:bc:54:d4:13:6c: 60:f1:92:32:be:d1:f0:92:f1:f1:d9:71:b8:e6:d5: da:c8:96:e6:54:37:d5:4e:46:d8:6f:98:d5:39:c8: b4:1e:2b:c0:5d:f8:58:72:8c:e9:96:0f:5d:c6:e6: 7d:5b:6c:01:aa:60:1d:42:52:14:b9:07:98:40:59: f0:c5:70:90:07:3b:8b:71:68:68:ab:8c:a7:60:30: a4:48:a9:f9:4c:93:b4:58:1b:3f:17:b6:32:d2:61: 2e:2d:71:d4:14:67:51:99:36:a5:e1:81:2b:d8:9a: db:44:ac:e8:1c:38:76:95:1e:4f:11:d0:74:a7:4f: 77:be:7b:a5:a5:01:fe:c0:b2:a0:fc:c6:46:03:1d: dc:e1:68:d2:ac:41:0d:28:d6:dd:bf:5c:85:74:71: a3:af:a3:0e:59:8e:08:6a:3f:b0:7a:e1:0d:89:6a: 7b:19:b9:1b:29:23:c5:18:50:01:ef:a8:22:b8:7a: 77:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AA:40:CF:12:AA:CE:39:52:A9:1C:41:D1:FE:CD:E6:5C:D8:7A:D5 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.23.0/24 Signature Algorithm: sha256WithRSAEncryption ad:39:89:6d:8e:fc:84:4c:9b:f6:0c:7e:6c:58:7e:0b:81:b8: 8a:14:87:95:89:33:af:15:5a:21:ab:62:c3:c5:4e:86:a6:2d: e9:4b:13:1c:f7:8c:b3:f1:96:1b:a7:c6:fe:5f:48:e1:9f:7d: f1:43:35:d3:d9:76:8c:45:4f:db:8d:0b:0f:ca:5e:96:9b:a2: 4f:07:ce:f4:54:f6:98:fe:ab:9e:e2:ee:61:70:04:84:e1:97: 94:9b:f0:8d:9a:c8:15:72:35:1a:2c:4b:da:ef:5b:9e:76:57: c6:3f:c7:5b:42:e0:16:70:85:83:1e:e1:6b:79:5e:f5:d8:da: b9:71:7a:7d:06:fc:b2:88:c6:19:e2:9e:51:cc:fd:92:f4:7f: d9:9c:e4:b1:2b:68:ee:a5:e7:22:e5:85:7b:1f:71:41:41:42: 0e:80:3c:e3:1e:2c:25:c3:b3:b4:28:c8:cf:d8:df:6f:1e:60: 9e:1a:a4:36:0c:4a:bc:f8:4b:89:84:d8:34:f4:ca:fe:f8:82: 50:f7:fc:de:ad:a9:ce:9e:1d:c0:d4:e2:07:0c:d2:40:28:6d: 5f:48:27:68:4a:71:06:cb:02:37:eb:98:5b:19:8d:5f:9c:44: e3:3a:bf:35:8c:61:19:76:72:b3:4f:c7:b0:6e:1f:91:b0:09: be:e1:b6:3d -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUDKVucENlb/CmtG7DPKKe105WIwIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDI5MTcwNTE2WhcNMjcwNDI4MTcxMDE2 WjAzMTEwLwYDVQQDEygzQ0FBNDBDRjEyQUFDRTM5NTJBOTFDNDFEMUZFQ0RFNjVD RDg3QUQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zxaAhRS/gcP oWeAWZbEQJfCkI6iZI1Zmr0xZM9Sf3MijHuOIfPSuCYibqCIczveBeAI5tF+bLmh Vgt4ibv/Cb5piSVmvFTUE2xg8ZIyvtHwkvHx2XG45tXayJbmVDfVTkbYb5jVOci0 HivAXfhYcozplg9dxuZ9W2wBqmAdQlIUuQeYQFnwxXCQBzuLcWhoq4ynYDCkSKn5 TJO0WBs/F7Yy0mEuLXHUFGdRmTal4YEr2JrbRKzoHDh2lR5PEdB0p093vnulpQH+ wLKg/MZGAx3c4WjSrEENKNbdv1yFdHGjr6MOWY4Iaj+weuENiWp7GbkbKSPFGFAB 76giuHp3owIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDyqQM8Sqs45UqkcQdH+zeZc 2HrVMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwMjI5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACgbFzANBgkqhkiG9w0BAQsFAAOC AQEArTmJbY78hEyb9gx+bFh+C4G4ihSHlYkzrxVaIatiw8VOhqYt6UsTHPeMs/GW G6fG/l9I4Z998UM109l2jEVP240LD8pelpuiTwfO9FT2mP6rnuLuYXAEhOGXlJvw jZrIFXI1GixL2u9bnnZXxj/HW0LgFnCFgx7ha3le9djauXF6fQb8sojGGeKeUcz9 kvR/2ZzksSto7qXnIuWFex9xQUFCDoA84x4sJcOztCjIz9jfbx5gnhqkNgxKvPhL iYTYNPTK/viCUPf83q2pzp4dwNTiBwzSQChtX0gnaEpxBssCN+uYWxmNX5xE4zq/ NYxhGXZys0/HsG4fkbAJvuG2PQ== -----END CERTIFICATE-----Generated at Thu Apr 30 17:26:09 2026 by rpki-client