$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205502.roa File: AS205502.roa (raw, json) Hash identifier: QN9CGK7qag9KgVQAER9Uz5G/0WLTB//0Ubcf/0aLpR8= Subject key identifier: E3:A5:E6:43:62:1D:EF:45:D8:F3:FC:F0:4D:29:A1:D4:9C:3D:99:A3 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1865F513388B8B6DF04868D1C42A2621BEEEF1D6 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205502.roa Signing time: Sun 26 Apr 2026 11:24:47 +0000 ROA not before: Sun 26 Apr 2026 11:19:47 +0000 ROA not after: Sun 25 Apr 2027 11:24:47 +0000 asID: 205502 IP address blocks: 157.254.205.0/24 maxlen: 24 157.254.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 13:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:65:f5:13:38:8b:8b:6d:f0:48:68:d1:c4:2a:26:21:be:ee:f1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 26 11:19:47 2026 GMT Not After : Apr 25 11:24:47 2027 GMT Subject: CN=E3A5E643621DEF45D8F3FCF04D29A1D49C3D99A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b3:7e:c6:13:5b:c1:15:d9:5e:df:23:29:68: 74:56:a8:8c:4c:ea:41:58:54:01:a6:29:fe:f0:14: a6:92:28:28:3c:9b:2f:7f:cb:a5:a7:36:52:3c:75: d6:9f:16:71:e2:1d:33:f1:0c:ec:fa:78:28:f3:f0: b2:14:90:0d:0a:89:a6:fb:2d:80:d6:3d:80:dd:df: ec:0e:f9:6b:75:ac:5b:91:a9:34:b4:e6:e8:97:65: fb:07:b6:12:e4:08:dd:be:59:dd:12:01:50:23:32: ef:31:ec:d5:2e:14:94:39:66:fb:e1:6b:6e:79:2c: 74:ce:23:95:d1:9b:f7:7c:e8:f1:73:82:c2:7c:a7: b7:2d:c6:f2:2f:88:31:bb:36:d3:e8:84:8d:58:4c: 39:6f:d0:bb:a7:c0:e9:c1:40:11:2d:fb:b8:8d:9e: f1:5c:4a:7f:25:ed:f1:23:d0:4a:6c:07:16:65:de: 41:d7:66:0a:c6:01:ed:27:93:02:e8:9f:64:c8:93: ba:19:83:77:13:a9:72:fe:16:b0:e1:9a:54:ae:ec: 7e:83:ef:60:54:49:76:8b:24:f9:b4:02:58:89:71: 10:af:d9:eb:33:a2:1e:f3:45:59:07:22:17:04:8a: 79:17:b6:5e:e7:41:2e:ef:18:92:98:a5:ea:63:60: 5b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A5:E6:43:62:1D:EF:45:D8:F3:FC:F0:4D:29:A1:D4:9C:3D:99:A3 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS205502.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.205.0-157.254.206.255 Signature Algorithm: sha256WithRSAEncryption 3f:11:00:33:3d:d5:10:cd:4e:b2:83:31:fc:42:7c:ae:c4:0f: 0f:54:ba:07:3c:4d:17:0e:83:d4:f9:13:ed:48:8e:a7:26:43: 21:16:54:4c:6d:e4:70:c0:08:87:8d:15:15:f4:4a:f5:7b:81: 10:60:75:f3:a0:13:0c:74:ee:68:97:07:98:ec:42:4d:85:86: 46:b0:98:ff:3e:d2:7d:af:7b:c8:c5:39:d7:48:f9:6b:c4:c5: 84:1f:7d:a7:51:88:01:04:eb:87:52:3d:45:5a:bd:31:3a:51: 75:3c:45:61:fd:38:d2:0c:9a:b2:c3:87:2e:0e:a0:ca:f4:16: 83:fb:ae:d4:c5:52:59:3d:0b:cf:55:61:67:40:6b:ec:56:39: 64:b1:52:10:1f:b0:4c:a6:cd:26:a2:ec:86:d2:cc:d0:28:c7: f6:80:d8:7f:a2:f4:a1:02:1f:a3:5c:17:01:a5:42:4c:ff:7c: b4:6d:51:6c:26:5c:85:c7:0c:3f:3a:e5:8e:20:51:1e:7b:bc: 46:bc:9e:6c:0d:27:72:ce:29:7a:7c:06:60:c4:57:b9:8b:74: d6:42:b5:d3:ab:9b:6a:40:7a:54:5e:18:43:74:10:30:5f:43: c0:e6:b6:68:a3:83:84:b7:1f:41:81:fc:32:f0:f6:91:bf:17: ff:c7:16:40 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUGGX1EziLi23wSGjRxComIb7u8dYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDI2MTExOTQ3WhcNMjcwNDI1MTEyNDQ3 WjAzMTEwLwYDVQQDEyhFM0E1RTY0MzYyMURFRjQ1RDhGM0ZDRjA0RDI5QTFENDlD M0Q5OUEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7N+xhNbwRXZ Xt8jKWh0VqiMTOpBWFQBpin+8BSmkigoPJsvf8ulpzZSPHXWnxZx4h0z8Qzs+ngo 8/CyFJANComm+y2A1j2A3d/sDvlrdaxbkak0tObol2X7B7YS5AjdvlndEgFQIzLv MezVLhSUOWb74WtueSx0ziOV0Zv3fOjxc4LCfKe3LcbyL4gxuzbT6ISNWEw5b9C7 p8DpwUARLfu4jZ7xXEp/Je3xI9BKbAcWZd5B12YKxgHtJ5MC6J9kyJO6GYN3E6ly /haw4ZpUrux+g+9gVEl2iyT5tAJYiXEQr9nrM6Ie80VZByIXBIp5F7Ze50Eu7xiS mKXqY2BbNQIDAQABo4IChzCCAoMwHQYDVR0OBBYEFOOl5kNiHe9F2PP88E0podSc PZmjMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwNTUwMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAnf7NAwQAnf7OMA0GCSqGSIb3 DQEBCwUAA4IBAQA/EQAzPdUQzU6ygzH8QnyuxA8PVLoHPE0XDoPU+RPtSI6nJkMh FlRMbeRwwAiHjRUV9Er1e4EQYHXzoBMMdO5olweY7EJNhYZGsJj/PtJ9r3vIxTnX SPlrxMWEH32nUYgBBOuHUj1FWr0xOlF1PEVh/TjSDJqyw4cuDqDK9BaD+67UxVJZ PQvPVWFnQGvsVjlksVIQH7BMps0mouyG0szQKMf2gNh/ovShAh+jXBcBpUJM/3y0 bVFsJlyFxww/OuWOIFEee7xGvJ5sDSdyzil6fAZgxFe5i3TWQrXTq5tqQHpUXhhD dBAwX0PA5rZoo4OEtx9Bgfwy8PaRvxf/xxZA -----END CERTIFICATE-----Generated at Mon Apr 27 11:52:33 2026 by rpki-client