$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: AWItTQs4Hw5WTga9LJEyVT1orE3+24zQP98wABbZS9k= Subject key identifier: 27:61:35:0C:6D:8A:5E:0D:6D:89:A8:80:84:B1:0F:54:C2:EE:4D:29 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 454A2BAEA3AABC97AEE5F05617343240643303E5 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa Signing time: Tue 17 Mar 2026 11:30:29 +0000 ROA not before: Tue 17 Mar 2026 11:25:29 +0000 ROA not after: Tue 16 Mar 2027 11:30:29 +0000 asID: 214025 IP address blocks: 157.254.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 21:04:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4a:2b:ae:a3:aa:bc:97:ae:e5:f0:56:17:34:32:40:64:33:03:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Mar 17 11:25:29 2026 GMT Not After : Mar 16 11:30:29 2027 GMT Subject: CN=2761350C6D8A5E0D6D89A88084B10F54C2EE4D29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:f0:34:10:e3:b6:96:01:f5:3d:6d:ab:29: 50:05:78:01:20:c2:9c:8d:75:c1:41:20:c4:c2:10: 49:f9:e5:63:30:98:d6:0e:6f:a4:60:68:f2:57:9e: 85:a1:77:db:1d:dd:b0:9b:16:1b:96:ab:dc:fd:76: 2d:d5:66:45:72:8a:89:ce:c4:ae:c5:78:f4:cf:8f: 77:09:c3:63:77:8d:7f:ec:e4:1b:0f:f5:01:c2:4f: 05:a9:46:a5:d9:15:66:cd:63:9b:cb:fd:89:46:24: 11:b8:f4:47:53:7d:8e:c4:85:7e:01:1d:2e:e0:7e: 95:e7:56:14:e4:32:16:b8:26:ec:30:d7:9c:0e:8f: d4:a6:7d:2b:be:09:ee:10:86:e2:40:f7:b8:e1:e5: 00:3f:e5:86:af:be:83:c5:56:ac:b0:e3:4a:bb:27: 1a:be:78:3c:d2:fc:00:2b:a4:6b:2e:22:32:4b:2b: 0d:c5:23:f2:60:80:31:ba:45:93:c6:ef:a4:aa:3b: 57:66:5f:72:0f:5e:08:ec:f6:24:b8:fb:44:38:06: 30:92:2b:85:bc:d4:17:e4:82:4c:14:e6:ed:80:96: ab:15:70:59:a8:02:e7:30:37:e2:c5:82:9e:98:29: a3:b3:ff:6f:9f:98:0c:4b:54:72:cf:bf:e5:83:52: 5e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:61:35:0C:6D:8A:5E:0D:6D:89:A8:80:84:B1:0F:54:C2:EE:4D:29 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.152.0/24 Signature Algorithm: sha256WithRSAEncryption a5:2b:b0:25:47:be:b0:06:5c:82:96:2b:7a:ad:1e:a9:e0:32: 4c:72:8a:05:57:b9:6c:ec:79:e9:6c:82:f5:15:39:2a:67:7a: f8:5d:4e:f2:aa:6c:75:7f:02:7f:12:96:29:3e:65:4a:1c:1f: da:3b:8c:ee:67:9c:e4:9d:21:87:b2:09:8e:46:5b:58:10:0e: 88:b3:4c:23:43:ad:a6:dd:1d:3e:c0:20:70:58:78:83:58:5b: 8c:8b:3c:3d:7e:51:2d:e5:2d:9e:ac:6a:ba:d1:54:13:69:72: 9a:a6:13:ab:a3:f2:31:33:95:63:92:72:53:5c:89:df:16:b3: 98:a8:d7:37:05:cc:dd:a4:6e:ab:76:3b:86:49:21:a1:55:c7: 94:de:7a:9d:09:90:61:8a:07:7e:5d:21:a0:93:bc:a5:4c:f3: 17:a2:f0:ae:f2:8b:22:dc:64:e0:57:9f:a8:dd:c2:66:5d:ee: 30:d6:d7:ae:37:44:ad:d2:93:17:03:5a:40:6c:29:0c:4d:a9: 41:89:11:f2:55:e3:2f:75:a6:49:61:d8:03:c8:c0:c9:3d:02: 6f:d6:82:6b:62:f4:fd:4d:a8:95:56:0a:3c:9c:ea:bc:b3:e2: 36:b0:89:91:a2:97:49:45:98:1d:7c:51:55:dd:6a:d3:11:81: 85:ba:e1:d2 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIURUorrqOqvJeu5fBWFzQyQGQzA+UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMzE3MTEyNTI5WhcNMjcwMzE2MTEzMDI5 WjAzMTEwLwYDVQQDEygyNzYxMzUwQzZEOEE1RTBENkQ4OUE4ODA4NEIxMEY1NEMy RUU0RDI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ7wNBDjtpYB 9T1tqylQBXgBIMKcjXXBQSDEwhBJ+eVjMJjWDm+kYGjyV56FoXfbHd2wmxYblqvc /XYt1WZFcoqJzsSuxXj0z493CcNjd41/7OQbD/UBwk8FqUal2RVmzWOby/2JRiQR uPRHU32OxIV+AR0u4H6V51YU5DIWuCbsMNecDo/Upn0rvgnuEIbiQPe44eUAP+WG r76DxVassONKuycavng80vwAK6RrLiIySysNxSPyYIAxukWTxu+kqjtXZl9yD14I 7PYkuPtEOAYwkiuFvNQX5IJMFObtgJarFXBZqALnMDfixYKemCmjs/9vn5gMS1Ry z7/lg1Je0QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCdhNQxtil4NbYmogISxD1TC 7k0pMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+mDANBgkqhkiG9w0BAQsFAAOC AQEApSuwJUe+sAZcgpYreq0eqeAyTHKKBVe5bOx56WyC9RU5Kmd6+F1O8qpsdX8C fxKWKT5lShwf2juM7mec5J0hh7IJjkZbWBAOiLNMI0Otpt0dPsAgcFh4g1hbjIs8 PX5RLeUtnqxqutFUE2lymqYTq6PyMTOVY5JyU1yJ3xazmKjXNwXM3aRuq3Y7hkkh oVXHlN56nQmQYYoHfl0hoJO8pUzzF6LwrvKLItxk4FefqN3CZl3uMNbXrjdErdKT FwNaQGwpDE2pQYkR8lXjL3WmSWHYA8jAyT0Cb9aCa2L0/U2olVYKPJzqvLPiNrCJ kaKXSUWYHXxRVd1q0xGBhbrh0g== -----END CERTIFICATE-----Generated at Mon Mar 23 04:35:42 2026 by rpki-client