$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: yhybWBva98S6/MaQjiCSids+VfHV1MJD9Qz6zEIAMqU= Subject key identifier: 6A:64:7F:EA:E4:58:9F:6F:21:A3:C6:FF:D8:65:11:33:F2:C3:8E:F5 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1FEC6145DC1E0F0EAFD558FF40B3D8F475933B98 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa Signing time: Tue 21 Apr 2026 09:29:58 +0000 ROA not before: Tue 21 Apr 2026 09:24:58 +0000 ROA not after: Tue 20 Apr 2027 09:29:58 +0000 asID: 397423 IP address blocks: 157.254.48.0/24 maxlen: 24 157.254.211.0/24 maxlen: 24 157.254.213.0/24 maxlen: 24 157.254.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 08:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ec:61:45:dc:1e:0f:0e:af:d5:58:ff:40:b3:d8:f4:75:93:3b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 21 09:24:58 2026 GMT Not After : Apr 20 09:29:58 2027 GMT Subject: CN=6A647FEAE4589F6F21A3C6FFD8651133F2C38EF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:13:19:d0:1b:bc:d0:0b:8a:63:cf:8a:31:d9: 9a:40:79:f7:4a:46:c2:ac:a5:61:90:fc:9f:d8:19: de:48:07:10:71:21:ce:76:9d:45:14:7a:9d:b4:c1: 8e:ba:44:1f:75:ae:25:75:94:34:7e:93:9f:8a:dd: aa:a0:1c:ae:ee:d5:13:dd:29:7e:39:f5:72:cb:f9: 36:e0:e6:8a:f9:9f:7e:a0:92:e3:70:a9:97:e2:4e: c5:68:bf:aa:d8:06:67:40:2f:fb:04:ee:84:4a:26: d3:ae:4d:62:2b:67:1f:4d:56:50:76:f8:b5:13:71: 62:72:4d:53:4f:1b:19:31:5d:6b:40:4c:f6:29:24: 27:12:e2:5b:1b:6a:84:36:f4:ac:97:47:43:49:8f: a2:cc:ed:09:e1:f9:3d:56:8b:f4:70:b9:44:3e:2f: 82:97:ee:55:60:9c:3d:2b:f6:f0:7f:59:fe:4a:68: 49:7f:d3:3a:5e:ea:40:14:5c:15:0e:1e:f8:78:1c: df:2f:e5:d8:34:04:55:4c:4f:52:24:27:74:51:84: 5f:f2:53:f5:5c:0a:52:e8:2d:bd:6a:1d:68:f2:32: 88:10:1f:5f:e1:db:63:0f:a8:cf:61:ec:ed:c3:a0: 76:96:a5:04:11:2d:ab:32:10:de:93:4e:4e:76:dd: 6c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:64:7F:EA:E4:58:9F:6F:21:A3:C6:FF:D8:65:11:33:F2:C3:8E:F5 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.48.0/24 157.254.211.0/24 157.254.213.0/24 157.254.219.0/24 Signature Algorithm: sha256WithRSAEncryption 37:fc:fa:c0:bb:6e:d0:8e:c3:08:48:da:ff:d3:90:04:f8:4b: a8:05:3e:f6:9b:f7:df:58:b8:15:67:63:63:ad:00:a6:54:6b: a0:bf:4b:ac:e0:d3:59:50:7f:00:06:55:36:4c:fd:1b:be:c0: 56:e5:da:c3:95:ea:d7:9a:6a:fc:be:42:9d:1f:a8:d2:f5:54: 8f:dd:1b:ee:2b:c2:f9:27:3f:f4:c5:f0:6f:cf:b5:a9:c5:1a: 9c:6d:47:ae:a6:1b:7d:c5:80:45:aa:4c:df:7d:aa:2d:c6:74: 4a:7e:c2:9a:5b:82:3e:41:b8:27:fa:a8:c4:7d:f7:14:22:a2: c8:5b:d3:4c:60:c4:8a:3d:4f:77:81:2b:a0:f9:c5:be:dc:f7: f2:cd:b8:04:2e:32:3d:3f:ab:87:32:52:c5:93:5c:7a:82:e7: 56:ba:28:5b:c5:82:47:ef:87:6b:4b:c9:a2:57:dd:bf:58:07: cd:a2:8f:6a:dd:59:51:97:c3:4c:53:b9:7a:9f:bd:58:e5:93: 6b:48:55:74:22:1c:40:a2:17:db:7b:ac:75:25:ff:cd:ae:97: 88:44:be:bd:c1:f1:ca:95:4d:4a:07:63:7d:b3:84:d4:26:4e: 6b:16:a6:72:27:c7:f2:b8:ec:4d:d7:02:a0:8d:09:1e:14:7e: 76:fb:17:56 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUH+xhRdweDw6v1Vj/QLPY9HWTO5gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDIxMDkyNDU4WhcNMjcwNDIwMDkyOTU4 WjAzMTEwLwYDVQQDEyg2QTY0N0ZFQUU0NTg5RjZGMjFBM0M2RkZEODY1MTEzM0Yy QzM4RUY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRMZ0Bu80AuK Y8+KMdmaQHn3SkbCrKVhkPyf2BneSAcQcSHOdp1FFHqdtMGOukQfda4ldZQ0fpOf it2qoByu7tUT3Sl+OfVyy/k24OaK+Z9+oJLjcKmX4k7FaL+q2AZnQC/7BO6ESibT rk1iK2cfTVZQdvi1E3Fick1TTxsZMV1rQEz2KSQnEuJbG2qENvSsl0dDSY+izO0J 4fk9Vov0cLlEPi+Cl+5VYJw9K/bwf1n+SmhJf9M6XupAFFwVDh74eBzfL+XYNARV TE9SJCd0UYRf8lP1XApS6C29ah1o8jKIEB9f4dtjD6jPYeztw6B2lqUEES2rMhDe k05Odt1sewIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFGpkf+rkWJ9vIaPG/9hlETPy w471MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAJ3+MAMEAJ3+0wMEAJ3+1QMEAJ3+ 2zANBgkqhkiG9w0BAQsFAAOCAQEAN/z6wLtu0I7DCEja/9OQBPhLqAU+9pv331i4 FWdjY60AplRroL9LrODTWVB/AAZVNkz9G77AVuXaw5Xq15pq/L5CnR+o0vVUj90b 7ivC+Sc/9MXwb8+1qcUanG1HrqYbfcWARapM332qLcZ0Sn7CmluCPkG4J/qoxH33 FCKiyFvTTGDEij1Pd4EroPnFvtz38s24BC4yPT+rhzJSxZNceoLnVrooW8WCR++H a0vJolfdv1gHzaKPat1ZUZfDTFO5ep+9WOWTa0hVdCIcQKIX23usdSX/za6XiES+ vcHxypVNSgdjfbOE1CZOaxamcifH8rjsTdcCoI0JHhR+dvsXVg== -----END CERTIFICATE-----Generated at Sun May 10 14:04:54 2026 by rpki-client