$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396998.roa File: AS396998.roa (raw, json) Hash identifier: JCZSi3OjoCDzrJHlTO9iXIpyIF3ecUNTH9r0fnYD6+M= Subject key identifier: 14:BE:82:AD:F9:DE:BA:74:2A:60:02:70:CC:A1:96:A5:B4:B5:79:AD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3AA51D6BE428B798A9B14929A7CA4B4F38CA9003 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396998.roa Signing time: Tue 16 Sep 2025 07:40:47 +0000 ROA not before: Tue 16 Sep 2025 07:35:47 +0000 ROA not after: Tue 15 Sep 2026 07:40:47 +0000 asID: 396998 IP address blocks: 157.254.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 10:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:a5:1d:6b:e4:28:b7:98:a9:b1:49:29:a7:ca:4b:4f:38:ca:90:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Sep 16 07:35:47 2025 GMT Not After : Sep 15 07:40:47 2026 GMT Subject: CN=14BE82ADF9DEBA742A600270CCA196A5B4B579AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:29:b2:b3:df:36:2f:57:93:ca:ed:79:6a: d1:30:a2:0a:4f:38:89:f1:a7:20:cf:db:8b:5a:7c: 5d:2f:8d:ad:93:f9:18:c7:6a:8c:96:38:58:7e:6f: ef:7c:b4:02:e0:2a:1a:d4:da:72:3f:20:a2:cc:4c: 35:1e:38:7e:6f:a4:69:86:6a:7b:29:0a:6b:54:fe: b1:4d:13:c0:a1:2d:b6:51:ce:03:da:32:b6:91:78: 65:92:ec:58:ab:1c:54:eb:96:f0:42:09:a6:de:83: 8d:e7:69:12:a3:61:66:b6:71:90:70:ff:e8:a1:88: 8d:97:87:5a:52:8e:fc:8b:97:30:43:4e:2a:6a:f5: 96:eb:e6:c4:8d:11:ef:87:62:60:f6:78:08:97:51: 9e:88:65:fb:f3:ec:55:cd:9b:a0:c3:61:af:05:fd: fc:6d:17:5f:23:56:19:e1:16:d5:1a:c2:fb:a3:65: 61:a1:27:f3:9e:70:87:4e:81:b1:b0:17:49:06:8b: c3:a9:3d:f3:40:80:8f:5d:0f:72:a0:c2:40:be:46: da:78:91:74:fc:57:0a:1f:78:cb:e6:9c:bc:41:98: 05:6d:c5:de:14:c2:1e:c2:d2:0b:f7:5c:07:80:fb: de:dd:c1:ef:bf:8b:b7:ee:86:cf:73:c2:c1:59:85: 2a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BE:82:AD:F9:DE:BA:74:2A:60:02:70:CC:A1:96:A5:B4:B5:79:AD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396998.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.27.0/24 Signature Algorithm: sha256WithRSAEncryption 01:ff:70:d8:75:06:4f:22:3b:68:80:0e:e5:12:5b:96:9d:f8: 91:63:47:82:5b:f2:28:fa:30:5a:a7:ad:43:eb:0f:f0:5a:3f: 68:93:4b:7f:25:0b:05:90:12:d7:97:f6:59:73:c7:64:67:42: 57:09:fa:60:ea:d2:86:ab:82:46:4c:7d:af:bc:7a:e2:af:01: 8d:af:80:f0:ad:da:1d:9c:97:8a:6e:48:ed:7d:3f:c0:65:54: 34:03:7e:c1:62:4c:70:3e:79:c5:77:e2:d6:1d:df:b9:d1:e5: b9:ca:fa:04:1c:10:fd:f1:4d:0c:69:d1:96:b8:41:d6:77:13: 4b:72:73:73:5d:cf:b8:03:3a:24:31:ac:cc:fb:4d:23:3f:c6: 06:5a:b3:5d:1f:69:af:19:63:b4:3e:e4:6e:70:b1:ac:e2:26: 2b:18:66:6e:c5:23:a0:f1:0b:bc:53:2a:ff:84:2a:39:53:66: 16:d5:bd:a0:b9:16:66:71:7c:bc:a5:83:56:92:6a:47:9f:46: 92:91:c4:fd:2c:bb:3e:07:44:e8:4e:64:b1:0e:c0:b1:d1:88: 9f:a6:60:89:89:bb:86:34:48:3a:8d:be:7c:82:0c:ab:44:ec: 3e:57:bf:2a:cb:82:50:59:5f:d9:c9:89:d1:d0:36:67:c2:35: dd:a3:38:87 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUOqUda+Qot5ipsUkpp8pLTzjKkAMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwOTE2MDczNTQ3WhcNMjYwOTE1MDc0MDQ3 WjAzMTEwLwYDVQQDEygxNEJFODJBREY5REVCQTc0MkE2MDAyNzBDQ0ExOTZBNUI0 QjU3OUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8opsrPfNi9X k8rteWrRMKIKTziJ8acgz9uLWnxdL42tk/kYx2qMljhYfm/vfLQC4Coa1NpyPyCi zEw1Hjh+b6Rphmp7KQprVP6xTRPAoS22Uc4D2jK2kXhlkuxYqxxU65bwQgmm3oON 52kSo2FmtnGQcP/ooYiNl4daUo78i5cwQ04qavWW6+bEjRHvh2Jg9ngIl1GeiGX7 8+xVzZugw2GvBf38bRdfI1YZ4RbVGsL7o2VhoSfznnCHToGxsBdJBovDqT3zQICP XQ9yoMJAvkbaeJF0/FcKH3jL5py8QZgFbcXeFMIewtIL91wHgPve3cHvv4u37obP c8LBWYUq1QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBS+gq353rp0KmACcMyhlqW0 tXmtMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5Njk5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GzANBgkqhkiG9w0BAQsFAAOC AQEAAf9w2HUGTyI7aIAO5RJblp34kWNHglvyKPowWqetQ+sP8Fo/aJNLfyULBZAS 15f2WXPHZGdCVwn6YOrShquCRkx9r7x64q8Bja+A8K3aHZyXim5I7X0/wGVUNAN+ wWJMcD55xXfi1h3fudHlucr6BBwQ/fFNDGnRlrhB1ncTS3Jzc13PuAM6JDGszPtN Iz/GBlqzXR9prxljtD7kbnCxrOImKxhmbsUjoPELvFMq/4QqOVNmFtW9oLkWZnF8 vKWDVpJqR59GkpHE/Sy7PgdE6E5ksQ7AsdGIn6ZgiYm7hjRIOo2+fIIMq0TsPle/ KsuCUFlf2cmJ0dA2Z8I13aM4hw== -----END CERTIFICATE-----Generated at Tue Sep 16 12:46:15 2025 by rpki-client