$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7843.roa File: AS7843.roa (raw, json) Hash identifier: kofmt0LUNZiNPnDFQnZwgHrxOZBvLr8dVcs3rOLE7fY= Subject key identifier: 5D:90:7B:16:D0:C0:28:B1:20:DC:70:54:97:D7:31:60:0A:27:CD:FA Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5C90A30BFA18A533E5D7B94AE54200FFB7206BAE Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7843.roa Signing time: Fri 29 Aug 2025 15:44:06 +0000 ROA not before: Fri 29 Aug 2025 15:39:06 +0000 ROA not after: Fri 28 Aug 2026 15:44:06 +0000 asID: 7843 IP address blocks: 40.27.0.0/21 maxlen: 24 40.27.40.0/21 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 02:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:90:a3:0b:fa:18:a5:33:e5:d7:b9:4a:e5:42:00:ff:b7:20:6b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 29 15:39:06 2025 GMT Not After : Aug 28 15:44:06 2026 GMT Subject: CN=5D907B16D0C028B120DC705497D731600A27CDFA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:19:fb:11:63:83:a6:c9:a4:a1:b3:41:b8:63: 78:c2:ca:81:24:3c:59:eb:f8:53:6f:02:0a:a9:14: 6e:3a:00:30:73:85:70:a3:05:43:25:ba:33:17:fa: 3e:64:42:31:a1:aa:3d:cd:bc:29:68:d3:b6:94:c8: 8d:5f:6a:6e:ee:c1:e4:ca:f1:f6:8b:cf:1f:b2:c4: 28:51:bb:dd:9c:c5:f2:a8:05:f1:d4:21:58:6d:b2: fb:bf:3e:59:2f:5d:b5:c1:6f:09:f0:75:79:e0:c7: 06:63:1e:cf:82:22:38:a2:b4:e2:03:fa:12:44:8c: e0:f4:85:3d:23:92:55:2f:60:17:57:5d:2c:23:f6: b9:b8:6d:00:ad:2f:3d:2d:f8:8b:a4:71:71:5f:5f: b2:94:4c:e6:a8:d2:81:09:ec:7e:47:40:dd:46:2f: 81:d3:bb:9b:58:32:f7:a1:56:bf:89:63:e5:d0:08: 90:34:bd:c5:d0:d3:90:38:ad:d4:d1:ef:d5:e5:8c: 1d:9b:3b:c4:dc:d3:e0:8c:08:41:10:a9:c0:a1:eb: a4:93:b3:df:dd:bc:33:94:ef:a7:95:1f:46:e7:be: 5c:9c:54:02:54:18:67:4f:89:a5:b6:9f:d9:50:c6: ab:89:ee:4a:d5:a4:d7:ec:d8:a0:31:c9:b5:16:0e: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:90:7B:16:D0:C0:28:B1:20:DC:70:54:97:D7:31:60:0A:27:CD:FA X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS7843.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/21 40.27.40.0/21 40.223.122.0/24 40.223.245.0/24 Signature Algorithm: sha256WithRSAEncryption 22:3b:ee:44:b9:ff:02:a5:05:ba:70:85:c5:b7:c3:c0:15:f5: d1:fd:16:44:f5:b1:49:c2:70:28:62:31:0a:48:3b:39:af:ab: 19:86:d5:62:09:15:22:12:57:6d:bc:80:14:d2:ff:00:d8:28: d7:18:6d:1e:ce:89:68:ee:77:65:6e:7a:8a:5b:09:4a:4a:5c: a5:6b:38:bc:b9:be:cf:98:26:5d:53:2f:ee:85:44:47:90:50: 1b:59:77:11:da:47:51:87:f1:6f:73:05:51:92:52:2b:3a:53: f5:94:a0:11:66:a0:a8:f9:16:e2:66:8f:d6:84:0c:52:d4:cf: 65:dd:cc:a1:0f:cc:f2:1a:97:bc:cf:a3:73:4d:81:a2:c0:06: 27:22:95:d6:43:c5:23:24:0e:7f:40:a2:96:79:c3:3b:9d:86: 84:25:60:a0:3f:e8:0d:df:12:b9:9d:3c:2e:8d:4a:68:5b:88: 72:4d:59:2d:36:af:55:a1:e9:44:73:7b:99:64:bc:25:6b:56: 80:76:da:ac:4f:0f:20:4d:30:f8:82:0d:24:59:f6:a6:c3:ab: 66:e3:8b:12:8f:a1:ea:02:3d:b5:88:84:8a:bc:a0:1b:c2:5b: a9:d9:e9:e0:44:c6:80:d7:1e:e7:12:fe:2a:39:9d:bc:56:24: f6:02:89:ba -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIUXJCjC/oYpTPl17lK5UIA/7cga64wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODI5MTUzOTA2WhcNMjYwODI4MTU0NDA2 WjAzMTEwLwYDVQQDEyg1RDkwN0IxNkQwQzAyOEIxMjBEQzcwNTQ5N0Q3MzE2MDBB MjdDREZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhn7EWODpsmk obNBuGN4wsqBJDxZ6/hTbwIKqRRuOgAwc4VwowVDJbozF/o+ZEIxoao9zbwpaNO2 lMiNX2pu7sHkyvH2i88fssQoUbvdnMXyqAXx1CFYbbL7vz5ZL121wW8J8HV54McG Yx7PgiI4orTiA/oSRIzg9IU9I5JVL2AXV10sI/a5uG0ArS89LfiLpHFxX1+ylEzm qNKBCex+R0DdRi+B07ubWDL3oVa/iWPl0AiQNL3F0NOQOK3U0e/V5YwdmzvE3NPg jAhBEKnAoeukk7Pf3bwzlO+nlR9G575cnFQCVBhnT4mltp/ZUMarie5K1aTX7Nig Mcm1Fg6suQIDAQABo4ICjzCCAoswHQYDVR0OBBYEFF2QexbQwCixINxwVJfXMWAK J836MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzc4NDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYI KwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBAMoGwADBAMoGygDBAAo33oDBAAo3/Uw DQYJKoZIhvcNAQELBQADggEBACI77kS5/wKlBbpwhcW3w8AV9dH9FkT1sUnCcChi MQpIOzmvqxmG1WIJFSISV228gBTS/wDYKNcYbR7OiWjud2VueopbCUpKXKVrOLy5 vs+YJl1TL+6FREeQUBtZdxHaR1GH8W9zBVGSUis6U/WUoBFmoKj5FuJmj9aEDFLU z2XdzKEPzPIal7zPo3NNgaLABicildZDxSMkDn9AopZ5wzudhoQlYKA/6A3fErmd PC6NSmhbiHJNWS02r1Wh6URze5lkvCVrVoB22qxPDyBNMPiCDSRZ9qbDq2bjixKP oeoCPbWIhIq8oBvCW6nZ6eBExoDXHucS/io5nbxWJPYCibo= -----END CERTIFICATE-----Generated at Sat Sep 6 05:22:23 2025 by rpki-client