$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401710.roa File: AS401710.roa (raw, json) Hash identifier: kzQ+8DgcRTKzyh94rUy3Iqt2L5CQJfEt2Drz098xqoo= Subject key identifier: A4:0C:6C:C5:DC:4C:E7:09:55:B5:FD:D3:45:73:AA:A8:A6:5D:A2:7A Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 57C6881F0387329F8046665C932A18363F1DE899 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401710.roa Signing time: Fri 16 May 2025 19:00:57 +0000 ROA not before: Fri 16 May 2025 18:55:57 +0000 ROA not after: Fri 15 May 2026 19:00:57 +0000 asID: 401710 IP address blocks: 157.254.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 12:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c6:88:1f:03:87:32:9f:80:46:66:5c:93:2a:18:36:3f:1d:e8:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: May 16 18:55:57 2025 GMT Not After : May 15 19:00:57 2026 GMT Subject: CN=A40C6CC5DC4CE70955B5FDD34573AAA8A65DA27A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:17:19:b0:e2:93:61:5a:b2:2f:64:de:50:52: 7b:6f:b7:a1:f6:bf:12:00:a8:11:2c:98:10:38:26: 6a:cc:5a:f4:13:9b:ff:a7:6e:61:9c:54:45:f1:18: 6d:75:bf:da:65:9b:62:8b:33:a9:f4:0d:a8:36:17: c9:b5:bc:bc:aa:3c:06:e9:84:12:99:27:f2:94:2f: 79:f6:1e:51:07:06:d7:34:61:27:cc:c7:84:70:3c: 0e:a1:a1:90:f0:cb:d8:fa:4a:a6:dd:9a:0d:89:9a: c6:80:b5:d8:94:a1:8e:7b:ba:1f:0c:3b:f2:ba:a9: 5b:40:24:97:da:8e:42:74:43:57:5c:25:75:31:90: 67:a0:00:e9:71:8f:8f:1a:48:a5:22:bb:c9:d2:6e: 32:ea:64:49:80:41:e9:e8:cf:36:ae:a8:28:bb:52: 70:15:d3:30:6d:99:07:0d:c4:35:42:54:31:4b:c7: 82:7d:08:37:6c:d4:1a:e2:aa:ea:0b:f0:47:1d:12: 61:c9:2a:85:67:15:79:35:4e:ee:db:90:7c:2c:39: dc:54:31:f4:70:b6:86:9f:d7:a8:b6:6a:6b:a7:03: 49:36:8e:df:01:3d:e8:00:d2:0a:37:c5:e0:4c:fd: ef:b9:fb:4f:96:5b:d6:f1:3c:fc:c0:a7:ef:95:3c: 12:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0C:6C:C5:DC:4C:E7:09:55:B5:FD:D3:45:73:AA:A8:A6:5D:A2:7A X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401710.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.228.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:b1:14:1f:96:86:37:16:de:71:49:e2:de:2f:a0:15:fd:55: 86:61:bd:d3:f2:7a:a4:c0:6b:b2:b4:f9:1a:0f:c7:65:4c:ea: f6:8e:2b:48:75:0b:cc:7f:a4:32:d9:4a:92:0a:1c:67:75:8f: 47:e5:b2:e3:3e:07:39:57:2c:aa:ff:37:3b:2e:7d:c8:89:bd: b1:2b:4e:30:0a:a4:52:dc:51:c4:e5:a7:ec:a3:f4:db:6e:83: ec:47:bd:f5:c4:ec:54:b4:2c:40:e7:64:ac:9b:54:51:57:04: 1d:eb:08:3d:f4:bd:6c:f0:af:69:b0:5d:d3:ed:c7:71:80:97: 49:b1:46:90:54:e3:a7:63:6f:c5:27:fb:1b:5d:f4:1f:d0:b4: 4c:03:31:c4:68:66:e3:5e:b1:16:31:f7:ef:62:6d:91:b9:92: 98:18:1e:44:58:09:dc:b8:b7:f4:9b:d8:20:d3:aa:64:88:9e: 35:8b:e2:68:1e:bd:39:2b:f7:c3:dc:f0:f6:a5:36:89:b0:35: c6:85:39:52:2d:cb:a0:ab:ea:d9:ec:22:24:7f:77:03:3f:4d: 31:16:0f:ce:5f:3c:f0:b1:74:50:17:a9:cc:85:15:23:77:12: 87:d0:7d:1b:85:cf:1e:c0:28:67:de:c3:ef:34:e6:46:f8:a2: 15:3b:99:75 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUV8aIHwOHMp+ARmZckyoYNj8d6JkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNTE2MTg1NTU3WhcNMjYwNTE1MTkwMDU3 WjAzMTEwLwYDVQQDEyhBNDBDNkNDNURDNENFNzA5NTVCNUZERDM0NTczQUFBOEE2 NURBMjdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hcZsOKTYVqy L2TeUFJ7b7eh9r8SAKgRLJgQOCZqzFr0E5v/p25hnFRF8Rhtdb/aZZtiizOp9A2o NhfJtby8qjwG6YQSmSfylC959h5RBwbXNGEnzMeEcDwOoaGQ8MvY+kqm3ZoNiZrG gLXYlKGOe7ofDDvyuqlbQCSX2o5CdENXXCV1MZBnoADpcY+PGkilIrvJ0m4y6mRJ gEHp6M82rqgou1JwFdMwbZkHDcQ1QlQxS8eCfQg3bNQa4qrqC/BHHRJhySqFZxV5 NU7u25B8LDncVDH0cLaGn9eotmprpwNJNo7fAT3oANIKN8XgTP3vuftPllvW8Tz8 wKfvlTwSZQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKQMbMXcTOcJVbX900Vzqqim XaJ6MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMTcxMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+5DANBgkqhkiG9w0BAQsFAAOC AQEAbLEUH5aGNxbecUni3i+gFf1VhmG90/J6pMBrsrT5Gg/HZUzq9o4rSHULzH+k MtlKkgocZ3WPR+Wy4z4HOVcsqv83Oy59yIm9sStOMAqkUtxRxOWn7KP0226D7Ee9 9cTsVLQsQOdkrJtUUVcEHesIPfS9bPCvabBd0+3HcYCXSbFGkFTjp2NvxSf7G130 H9C0TAMxxGhm416xFjH372JtkbmSmBgeRFgJ3Li39JvYINOqZIieNYviaB69OSv3 w9zw9qU2ibA1xoU5Ui3LoKvq2ewiJH93Az9NMRYPzl888LF0UBepzIUVI3cSh9B9 G4XPHsAoZ97D7zTmRviiFTuZdQ== -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:37 2025 by rpki-client