$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: 5sVxheARX3zGPRzUTX/RLpXs+OOnybs7Kjpj3c4hbxw= Subject key identifier: FA:38:21:CF:C0:99:F6:AD:6E:6E:26:40:5B:48:49:DE:8D:EE:4C:04 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1C0B595948730779264DA44011DE32A835AE91D4 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa Signing time: Thu 25 Sep 2025 13:59:24 +0000 ROA not before: Thu 25 Sep 2025 13:54:24 +0000 ROA not after: Thu 24 Sep 2026 13:59:24 +0000 asID: 25198 IP address blocks: 157.254.50.0/24 maxlen: 24 157.254.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 09:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0b:59:59:48:73:07:79:26:4d:a4:40:11:de:32:a8:35:ae:91:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Sep 25 13:54:24 2025 GMT Not After : Sep 24 13:59:24 2026 GMT Subject: CN=FA3821CFC099F6AD6E6E26405B4849DE8DEE4C04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4e:15:16:45:84:86:88:4c:d6:2d:e5:d4:b9: 3e:2a:69:ff:91:b1:53:a3:b0:39:79:b3:70:cc:a4: 06:91:6e:22:95:10:9a:22:d4:bc:71:6f:74:9f:bc: 2e:f1:a7:14:9f:31:16:90:04:b9:6d:bd:57:cf:07: f8:82:49:ee:c4:51:2e:22:d4:22:a5:20:ab:ff:42: 1a:d7:d7:f4:f2:51:14:fe:ad:58:82:01:46:fe:69: 41:4d:94:54:d3:4e:50:bc:28:77:cd:39:8c:24:e2: 36:e5:66:d5:4f:20:86:65:c1:bc:a1:9a:50:00:af: 22:c9:b6:fc:76:4b:9f:86:2c:b4:4a:83:e3:64:d6: 60:a4:45:cc:7a:fb:51:fa:32:b3:6e:9b:4d:88:4e: 04:a9:8f:08:4d:b6:79:98:de:df:05:38:d5:df:9d: 7c:92:d2:63:98:d1:be:5d:08:90:cd:7f:b7:34:dc: ef:29:96:f3:44:ba:6f:6f:69:d8:e5:a0:e9:e7:9c: 98:15:02:62:19:c6:da:c2:91:fe:59:2e:f4:95:86: c7:13:70:75:5e:e6:77:a6:84:0f:28:3e:09:08:0f: c9:7b:5f:c8:ff:1a:18:10:9d:70:31:01:c3:d4:ce: d0:ca:53:d2:7e:7f:8a:2d:2c:05:a6:dd:85:b8:60: 9e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:38:21:CF:C0:99:F6:AD:6E:6E:26:40:5B:48:49:DE:8D:EE:4C:04 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.50.0/24 157.254.155.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:50:50:bd:aa:f8:43:5b:80:90:b3:79:24:ba:48:9b:dc:4e: d7:9a:b1:d1:15:95:02:3c:f9:ae:8c:93:c0:34:50:b5:00:f4: 15:2f:eb:e0:f5:d1:7a:bb:a2:ee:40:dd:58:14:c5:f6:9e:c9: d2:f1:19:80:17:ae:47:5a:7e:47:f6:76:1c:0a:63:98:88:f8: 81:87:2b:23:fe:8d:8f:26:c3:6a:89:8c:09:37:23:f3:a4:a7: bf:2a:60:ba:d1:95:a9:bf:1b:3f:fb:19:78:80:4a:4b:f9:75: 83:c4:fe:07:c7:a2:a9:ff:68:d6:ae:a8:55:36:6f:1d:44:d6: 7c:7b:1f:2b:fb:91:16:69:d1:94:1e:3e:fd:6b:43:c8:31:ed: 73:41:3a:f1:95:ce:03:c6:34:01:90:26:19:b7:b3:01:7f:d5: 0b:71:e0:d4:e6:85:2e:d6:30:20:58:64:7e:bb:31:95:e1:29: 59:33:f1:b7:5b:43:9e:88:02:86:de:9e:0d:17:23:6d:b3:fa: 22:69:75:1d:9e:7d:1e:dc:66:31:d6:2e:af:3c:25:3a:de:2d: d2:b8:06:b8:64:d0:79:1e:19:7a:62:ea:28:8c:19:4b:09:74: 1c:65:d5:a5:2b:c0:df:1d:52:9f:a3:ef:c7:de:b2:f0:6e:6f: 40:e8:4a:95 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUHAtZWUhzB3kmTaRAEd4yqDWukdQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwOTI1MTM1NDI0WhcNMjYwOTI0MTM1OTI0 WjAzMTEwLwYDVQQDEyhGQTM4MjFDRkMwOTlGNkFENkU2RTI2NDA1QjQ4NDlERThE RUU0QzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk4VFkWEhohM 1i3l1Lk+Kmn/kbFTo7A5ebNwzKQGkW4ilRCaItS8cW90n7wu8acUnzEWkAS5bb1X zwf4gknuxFEuItQipSCr/0Ia19f08lEU/q1YggFG/mlBTZRU005QvCh3zTmMJOI2 5WbVTyCGZcG8oZpQAK8iybb8dkufhiy0SoPjZNZgpEXMevtR+jKzbptNiE4EqY8I TbZ5mN7fBTjV3518ktJjmNG+XQiQzX+3NNzvKZbzRLpvb2nY5aDp55yYFQJiGcba wpH+WS70lYbHE3B1XuZ3poQPKD4JCA/Je1/I/xoYEJ1wMQHD1M7QylPSfn+KLSwF pt2FuGCeDQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFPo4Ic/Amfatbm4mQFtISd6N 7kwEMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnf4yAwQAnf6bMA0GCSqGSIb3DQEB CwUAA4IBAQBcUFC9qvhDW4CQs3kkukib3E7XmrHRFZUCPPmujJPANFC1APQVL+vg 9dF6u6LuQN1YFMX2nsnS8RmAF65HWn5H9nYcCmOYiPiBhysj/o2PJsNqiYwJNyPz pKe/KmC60ZWpvxs/+xl4gEpL+XWDxP4Hx6Kp/2jWrqhVNm8dRNZ8ex8r+5EWadGU Hj79a0PIMe1zQTrxlc4DxjQBkCYZt7MBf9ULceDU5oUu1jAgWGR+uzGV4SlZM/G3 W0OeiAKG3p4NFyNts/oiaXUdnn0e3GYx1i6vPCU63i3SuAa4ZNB5Hhl6YuoojBlL CXQcZdWlK8DfHVKfo+/H3rLwbm9A6EqV -----END CERTIFICATE-----Generated at Mon Oct 20 15:29:42 2025 by rpki-client