$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3257.roa File: AS3257.roa (raw, json) Hash identifier: FCBqqJ2ZZ4BjqPQc9s9cPK7XdHkHa0L7ok5uHV1r2MI= Subject key identifier: A6:06:3F:87:16:83:72:8E:8B:A7:0A:7A:59:D3:9E:B3:E4:90:2B:73 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1A23833B6079A5F73FBD03961007D2739A85EF65 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3257.roa Signing time: Mon 27 Apr 2026 13:56:27 +0000 ROA not before: Mon 27 Apr 2026 13:51:27 +0000 ROA not after: Mon 26 Apr 2027 13:56:27 +0000 asID: 3257 IP address blocks: 157.254.232.0/24 maxlen: 24 157.254.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 11:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:23:83:3b:60:79:a5:f7:3f:bd:03:96:10:07:d2:73:9a:85:ef:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 27 13:51:27 2026 GMT Not After : Apr 26 13:56:27 2027 GMT Subject: CN=A6063F871683728E8BA70A7A59D39EB3E4902B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:81:dd:9c:c6:2c:96:45:fd:8d:1e:84:c7: a0:f6:ba:3a:8a:6c:4a:92:bd:2a:8e:a5:3f:b8:e9: c8:93:eb:12:3c:6f:fc:8b:8a:cf:c5:5f:25:61:57: cf:1b:06:cb:87:78:fb:1f:19:18:1a:00:5d:4c:bc: 08:8e:54:5e:a0:ef:3a:d6:36:0c:2d:fb:12:87:b1: 00:fa:c4:67:b2:e4:25:47:01:f9:de:b8:c6:ca:9e: 95:36:05:49:d6:89:33:c7:e8:7d:9a:be:7d:e9:3a: dd:55:65:5f:c0:39:39:23:7a:22:5a:55:b4:89:d6: 68:4f:83:77:2b:c7:d1:8d:47:bc:9f:f7:19:37:65: 3c:ba:0f:09:e4:9d:dc:ef:a1:d1:38:ed:59:a3:96: df:83:9e:cc:6e:cd:d6:4b:e0:4e:81:a0:d5:12:4e: 5a:09:9b:fe:c6:ca:f8:59:8a:ff:32:d0:9d:ab:2a: 9d:5f:99:4c:bc:93:01:00:59:d3:31:bc:f3:26:35: 4f:d0:03:84:52:98:0b:9d:3d:18:ae:b3:7c:19:1b: 1b:1a:d1:97:0f:38:2e:fa:79:cf:bc:93:29:b7:46: fc:b2:4f:f7:4e:1f:b7:34:07:2c:23:9d:ab:41:5d: 16:a5:78:5b:fe:c4:13:30:fa:8c:ed:21:ca:f0:b8: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:06:3F:87:16:83:72:8E:8B:A7:0A:7A:59:D3:9E:B3:E4:90:2B:73 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS3257.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.232.0/23 Signature Algorithm: sha256WithRSAEncryption 92:fa:b7:b5:77:e6:f5:08:7c:87:ae:4d:8e:4d:f7:b9:73:78: 25:df:bd:97:0b:c0:9d:48:a6:b7:30:0a:2d:b8:f2:da:04:f4: f1:51:70:15:ca:f5:4e:12:94:8c:ea:5c:7b:f5:b8:fe:25:7a: 2b:5f:98:7a:55:e3:ce:3b:7f:4b:41:d4:f6:cc:47:32:ea:30: ba:d4:5b:ec:94:97:6f:95:4e:e7:36:42:e5:23:c7:f8:89:a3: 70:48:16:2f:03:d4:8b:e5:80:b9:8e:3b:c2:5e:71:b1:77:9e: 5b:68:ae:a9:91:2a:31:c7:08:58:b4:25:31:65:2c:06:d6:90: ec:f7:bf:b8:df:0c:b0:9e:44:5f:6b:61:83:4c:93:0a:b7:4e: 36:8a:2e:31:5a:5d:7f:50:b2:74:f6:b4:2a:76:ad:3c:79:da: 64:b9:bc:78:85:81:ff:da:0b:ba:f1:c2:c4:d2:73:b0:70:c7: e1:26:8c:a8:b7:df:5f:8e:47:f6:94:38:ef:66:0a:47:9a:2a: fb:d7:c4:e6:ea:2f:35:42:e9:73:83:f9:9e:62:35:c5:01:3b: 2c:ab:cd:88:ea:77:99:3a:98:40:9f:ae:d2:cb:bc:a4:45:35: ff:a9:eb:45:bf:a7:25:84:7d:11:3d:c8:fb:16:fc:8f:1c:e8: 86:aa:28:b3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUGiODO2B5pfc/vQOWEAfSc5qF72UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDI3MTM1MTI3WhcNMjcwNDI2MTM1NjI3 WjAzMTEwLwYDVQQDEyhBNjA2M0Y4NzE2ODM3MjhFOEJBNzBBN0E1OUQzOUVCM0U0 OTAyQjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxV+B3ZzGLJZF /Y0ehMeg9ro6imxKkr0qjqU/uOnIk+sSPG/8i4rPxV8lYVfPGwbLh3j7HxkYGgBd TLwIjlReoO861jYMLfsSh7EA+sRnsuQlRwH53rjGyp6VNgVJ1okzx+h9mr596Trd VWVfwDk5I3oiWlW0idZoT4N3K8fRjUe8n/cZN2U8ug8J5J3c76HROO1Zo5bfg57M bs3WS+BOgaDVEk5aCZv+xsr4WYr/MtCdqyqdX5lMvJMBAFnTMbzzJjVP0AOEUpgL nT0YrrN8GRsbGtGXDzgu+nnPvJMpt0b8sk/3Th+3NAcsI52rQV0WpXhb/sQTMPqM 7SHK8LjrzwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFKYGP4cWg3KOi6cKelnTnrPk kCtzMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzMyNTcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGd/ugwDQYJKoZIhvcNAQELBQADggEB AJL6t7V35vUIfIeuTY5N97lzeCXfvZcLwJ1IprcwCi248toE9PFRcBXK9U4SlIzq XHv1uP4leitfmHpV4847f0tB1PbMRzLqMLrUW+yUl2+VTuc2QuUjx/iJo3BIFi8D 1IvlgLmOO8JecbF3nltorqmRKjHHCFi0JTFlLAbWkOz3v7jfDLCeRF9rYYNMkwq3 TjaKLjFaXX9QsnT2tCp2rTx52mS5vHiFgf/aC7rxwsTSc7Bwx+EmjKi331+OR/aU OO9mCkeaKvvXxObqLzVC6XOD+Z5iNcUBOyyrzYjqd5k6mECfrtLLvKRFNf+p60W/ pyWEfRE9yPsW/I8c6IaqKLM= -----END CERTIFICATE-----Generated at Tue Apr 28 11:33:48 2026 by rpki-client