$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS395470.roa File: AS395470.roa (raw, json) Hash identifier: 4QvJK0IxvGwcnAPgCGG7n6i5CQLnfFxmm39nVZDIKSY= Subject key identifier: F8:CE:29:04:94:B6:49:08:A6:0B:DA:69:A3:00:E1:CA:D8:56:C6:64 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 528A23D69304A475066F91D8298E35F1EF2E765B Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS395470.roa Signing time: Mon 20 Apr 2026 12:38:04 +0000 ROA not before: Mon 20 Apr 2026 12:33:04 +0000 ROA not after: Mon 19 Apr 2027 12:38:04 +0000 asID: 395470 IP address blocks: 157.254.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 13:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:8a:23:d6:93:04:a4:75:06:6f:91:d8:29:8e:35:f1:ef:2e:76:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 20 12:33:04 2026 GMT Not After : Apr 19 12:38:04 2027 GMT Subject: CN=F8CE290494B64908A60BDA69A300E1CAD856C664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:cd:48:5b:cc:4a:d9:1e:63:87:88:ef:a8: a3:b7:02:d9:f5:fb:63:08:c8:da:ba:34:68:bb:c2: 12:88:15:1b:d7:fa:5d:61:c4:61:92:56:32:4e:17: c6:75:48:57:a8:3b:44:3b:bc:bb:8e:10:e0:bd:68: 19:ea:6f:bc:66:61:7b:91:dd:92:f3:6b:1b:4b:52: e3:c2:8e:66:46:3a:5b:6c:a6:f8:34:ad:09:eb:ce: da:f2:a0:88:cf:1e:1c:0c:ec:5d:d3:47:e1:25:0c: 4b:ae:4a:9b:1a:55:70:e3:2a:01:37:bb:53:c8:f0: e7:92:0e:1e:6a:40:f0:30:ff:6c:8c:9c:72:f0:ee: 0d:81:90:b2:f0:52:bd:a0:c1:d8:96:94:df:37:1f: b0:ac:c1:da:f6:e1:aa:76:f8:32:a4:cf:bf:e9:63: 1f:72:a8:22:ee:ab:e9:9e:91:ed:65:9f:a7:c7:fe: 12:65:73:83:36:88:3e:e8:ce:59:39:e6:93:38:8c: 14:8f:6f:97:8e:08:14:36:75:1e:9c:08:e8:01:4b: 25:00:07:07:df:5e:64:4e:75:14:98:77:8a:f1:6e: 94:5c:d6:8d:a4:b7:f8:c2:52:0f:f1:cc:8e:ca:b0: ec:e3:1b:4a:af:2c:87:34:b5:ef:08:b9:38:92:68: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CE:29:04:94:B6:49:08:A6:0B:DA:69:A3:00:E1:CA:D8:56:C6:64 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS395470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.27.0/24 Signature Algorithm: sha256WithRSAEncryption 44:22:d8:fe:de:da:99:37:1a:04:98:7a:90:80:53:b5:fa:62: 73:40:f0:1d:8f:12:e4:0a:79:fe:c0:5a:56:10:e4:5a:2d:f7: d0:3d:b3:26:60:13:60:73:46:2f:4a:95:6b:47:14:91:c2:b2: d3:ff:ce:df:56:9d:46:17:96:de:04:6f:92:da:8a:9d:fb:c6: 9a:c1:57:b2:b6:d9:cf:b0:f1:9c:87:1d:9b:26:29:0e:8e:08: e4:8f:9a:76:f1:ec:0c:46:6c:30:0a:7d:92:28:8c:be:a1:19: bf:29:e3:3c:20:54:02:27:f3:f2:52:e8:49:f4:7c:e9:47:92: d9:fb:c4:ce:ee:5f:34:cb:3a:2e:5c:71:92:b3:ef:86:34:9b: 14:a3:c7:df:31:58:1a:28:a7:e5:04:88:06:c2:03:5d:4a:8b: 4d:4d:66:82:21:40:1d:da:2a:21:15:bf:ec:97:ef:df:f8:16: d1:ef:12:6a:b8:ab:97:43:55:6a:33:d9:6f:2c:13:9e:3a:a5: 87:34:ba:6a:4e:ee:fb:cd:1f:36:28:27:d2:b9:52:5b:7d:1d: a0:15:c7:aa:67:b6:cc:cd:51:f1:f3:d0:42:63:a4:2e:05:f2: 9b:42:ff:e1:7a:a1:76:af:ec:12:c7:a8:81:c5:fc:97:34:24: f1:30:3e:f0 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUUooj1pMEpHUGb5HYKY418e8udlswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDIwMTIzMzA0WhcNMjcwNDE5MTIzODA0 WjAzMTEwLwYDVQQDEyhGOENFMjkwNDk0QjY0OTA4QTYwQkRBNjlBMzAwRTFDQUQ4 NTZDNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SvNSFvMStke Y4eI76ijtwLZ9ftjCMjaujRou8ISiBUb1/pdYcRhklYyThfGdUhXqDtEO7y7jhDg vWgZ6m+8ZmF7kd2S82sbS1Ljwo5mRjpbbKb4NK0J687a8qCIzx4cDOxd00fhJQxL rkqbGlVw4yoBN7tTyPDnkg4eakDwMP9sjJxy8O4NgZCy8FK9oMHYlpTfNx+wrMHa 9uGqdvgypM+/6WMfcqgi7qvpnpHtZZ+nx/4SZXODNog+6M5ZOeaTOIwUj2+XjggU NnUenAjoAUslAAcH315kTnUUmHeK8W6UXNaNpLf4wlIP8cyOyrDs4xtKryyHNLXv CLk4kmibjQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPjOKQSUtkkIpgvaaaMA4crY VsZkMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NTQ3MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GzANBgkqhkiG9w0BAQsFAAOC AQEARCLY/t7amTcaBJh6kIBTtfpic0DwHY8S5Ap5/sBaVhDkWi330D2zJmATYHNG L0qVa0cUkcKy0//O31adRheW3gRvktqKnfvGmsFXsrbZz7DxnIcdmyYpDo4I5I+a dvHsDEZsMAp9kiiMvqEZvynjPCBUAifz8lLoSfR86UeS2fvEzu5fNMs6LlxxkrPv hjSbFKPH3zFYGiin5QSIBsIDXUqLTU1mgiFAHdoqIRW/7Jfv3/gW0e8Sarirl0NV ajPZbywTnjqlhzS6ak7u+80fNign0rlSW30doBXHqme2zM1R8fPQQmOkLgXym0L/ 4Xqhdq/sEseogcX8lzQk8TA+8A== -----END CERTIFICATE-----Generated at Mon Apr 27 11:52:32 2026 by rpki-client