$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209697.roa File: AS209697.roa (raw, json) Hash identifier: 5EMemdZq2/Fmfl2jBc7mOq67fpwGLzTiAYdRltazbt4= Subject key identifier: 69:D2:42:48:AB:69:6D:B6:F7:8F:C6:89:F7:5F:87:74:87:04:5C:0C Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1823C5B80B474B70018388EB93BC309DED8CBD81 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209697.roa Signing time: Thu 19 Mar 2026 07:41:14 +0000 ROA not before: Thu 19 Mar 2026 07:36:14 +0000 ROA not after: Thu 18 Mar 2027 07:41:14 +0000 asID: 209697 IP address blocks: 157.254.28.0/24 maxlen: 24 157.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 06:29:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:23:c5:b8:0b:47:4b:70:01:83:88:eb:93:bc:30:9d:ed:8c:bd:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 19 07:36:14 2026 GMT Not After : Mar 18 07:41:14 2027 GMT Subject: CN=69D24248AB696DB6F78FC689F75F877487045C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:10:58:a3:7b:f3:26:16:9b:b4:ed:4e:9c: 05:22:33:d1:e9:1c:54:2f:91:56:5b:5d:a8:79:57: 24:9c:dc:51:60:e3:c7:87:d4:44:ed:f1:d5:44:04: 04:8f:f0:2f:51:1e:d9:7c:fa:d6:93:63:bc:f9:b4: 2c:ce:2f:79:15:cd:61:64:89:c0:4f:15:39:96:76: f3:a9:4b:d5:9a:f5:9e:d4:03:4f:59:a0:41:d4:f6: b2:7b:1b:ed:3b:6d:70:7e:d3:e8:f1:ca:b3:d8:05: c5:6b:8d:10:6a:01:8c:27:f6:05:7d:9f:3a:16:6a: 35:8e:83:1b:03:8a:11:49:76:86:72:53:5a:2b:8d: a8:19:1d:10:e2:b2:c7:5a:60:17:04:99:2f:8c:d8: e1:6c:79:89:41:a3:e9:4c:a3:45:1c:a6:4f:95:aa: 18:5a:85:ff:49:05:f4:85:db:d9:29:99:ac:00:28: 80:50:7f:7c:ab:34:39:51:60:1e:2d:19:dc:e9:22: 77:45:79:a2:01:92:95:a2:d7:c2:a7:9b:69:2c:08: fd:92:2e:e9:74:ce:e8:35:81:bc:4a:9e:eb:ed:9b: 0b:69:9a:5c:2a:a5:6d:9c:a6:5c:6a:fe:2c:84:53: 62:f2:ab:03:78:ff:ad:34:b2:5d:e6:82:22:8e:7a: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D2:42:48:AB:69:6D:B6:F7:8F:C6:89:F7:5F:87:74:87:04:5C:0C X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209697.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.28.0/24 157.254.31.0/24 Signature Algorithm: sha256WithRSAEncryption 21:8f:35:18:6d:4b:15:cc:50:45:60:0f:44:1d:29:f8:74:94: 79:17:7b:d1:5c:4b:d8:79:bc:45:9f:44:b8:e1:ee:d0:4b:8a: 31:c0:5e:0c:d5:20:9a:2f:31:5c:88:06:9a:cc:8e:58:1b:31: bb:52:8d:3b:9e:99:a7:d6:3e:36:1c:a0:97:ee:9e:d5:26:c9: 13:fd:04:3a:5f:e5:24:c7:9f:70:a5:4d:ed:b4:a9:91:bc:eb: 8d:d9:d2:a2:fd:a5:3c:a4:4a:a9:85:4c:8c:41:21:94:96:16: da:35:3e:e8:9c:82:7e:8e:a2:37:bd:5f:0b:84:03:11:de:42: 0e:de:15:ad:f3:92:4f:e5:d9:be:9c:7d:2e:a4:e3:65:67:ef: d9:9c:64:16:c7:2d:d1:53:12:25:21:41:bb:3d:e9:65:b5:9c: 3f:88:80:db:a9:ba:5a:70:53:ba:46:93:b6:aa:a1:79:ec:da: b5:21:19:65:bf:b9:81:ef:24:ec:1c:61:61:6d:b4:17:c2:82: d5:1f:29:a8:91:bd:db:94:b0:4e:ce:43:31:c4:e1:d1:60:46: c1:98:35:dc:67:af:ab:12:08:99:73:54:ad:8f:33:4a:77:88: 52:b5:fe:c5:78:de:55:f1:84:35:7d:82:e4:fc:b9:1c:23:42: ef:27:77:a7 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUGCPFuAtHS3ABg4jrk7wwne2MvYEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzE5MDczNjE0WhcNMjcwMzE4MDc0MTE0 WjAzMTEwLwYDVQQDEyg2OUQyNDI0OEFCNjk2REI2Rjc4RkM2ODlGNzVGODc3NDg3 MDQ1QzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWEQWKN78yYW m7TtTpwFIjPR6RxUL5FWW12oeVcknNxRYOPHh9RE7fHVRAQEj/AvUR7ZfPrWk2O8 +bQszi95Fc1hZInATxU5lnbzqUvVmvWe1ANPWaBB1PayexvtO21wftPo8cqz2AXF a40QagGMJ/YFfZ86Fmo1joMbA4oRSXaGclNaK42oGR0Q4rLHWmAXBJkvjNjhbHmJ QaPpTKNFHKZPlaoYWoX/SQX0hdvZKZmsACiAUH98qzQ5UWAeLRnc6SJ3RXmiAZKV otfCp5tpLAj9ki7pdM7oNYG8Sp7r7ZsLaZpcKqVtnKZcav4shFNi8qsDeP+tNLJd 5oIijnq1SwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFGnSQkiraW2294/Gifdfh3SH BFwMMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwOTY5Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAJ3+HAMEAJ3+HzANBgkqhkiG9w0B AQsFAAOCAQEAIY81GG1LFcxQRWAPRB0p+HSUeRd70VxL2Hm8RZ9EuOHu0EuKMcBe DNUgmi8xXIgGmsyOWBsxu1KNO56Zp9Y+Nhygl+6e1SbJE/0EOl/lJMefcKVN7bSp kbzrjdnSov2lPKRKqYVMjEEhlJYW2jU+6JyCfo6iN71fC4QDEd5CDt4VrfOST+XZ vpx9LqTjZWfv2ZxkFsct0VMSJSFBuz3pZbWcP4iA26m6WnBTukaTtqqheezatSEZ Zb+5ge8k7BxhYW20F8KC1R8pqJG925SwTs5DMcTh0WBGwZg13GevqxIImXNUrY8z SneIUrX+xXjeVfGENX2C5Py5HCNC7yd3pw== -----END CERTIFICATE-----Generated at Fri Mar 20 15:54:40 2026 by rpki-client