$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401881.roa File: AS401881.roa (raw, json) Hash identifier: bMzwzJyzbUEPA7dPGFOTQ0X7oyQAs2oiXPlrvNALDgo= Subject key identifier: E4:61:61:13:27:90:4A:DD:8C:6A:FD:D0:D3:94:0F:91:4A:B1:0B:50 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 4ED91AF4B5B4479A6A335EFEA40C81FA3E4596B0 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401881.roa Signing time: Mon 27 Apr 2026 14:10:48 +0000 ROA not before: Mon 27 Apr 2026 14:05:48 +0000 ROA not after: Mon 26 Apr 2027 14:10:48 +0000 asID: 401881 IP address blocks: 157.254.232.0/24 maxlen: 24 157.254.233.0/24 maxlen: 24 157.254.234.0/24 maxlen: 24 157.254.235.0/24 maxlen: 24 157.254.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 11:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d9:1a:f4:b5:b4:47:9a:6a:33:5e:fe:a4:0c:81:fa:3e:45:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 27 14:05:48 2026 GMT Not After : Apr 26 14:10:48 2027 GMT Subject: CN=E461611327904ADD8C6AFDD0D3940F914AB10B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cd:ab:81:88:e5:66:91:dc:8b:f6:07:66:82: cc:4a:c7:b2:f5:ce:de:9d:9c:ae:24:9f:6e:d8:72: e3:10:82:60:0a:40:47:7f:5e:c3:d4:f6:76:65:5b: 48:b9:7d:c8:8a:c1:8b:db:5c:55:c1:24:72:c2:2d: 37:59:68:f1:09:e8:3e:93:38:76:e9:a8:14:74:26: b9:b5:69:12:9c:9a:94:46:81:96:93:eb:a6:9c:34: 90:d3:7e:86:15:ef:9b:11:6c:0f:35:79:72:80:f8: e2:7a:f6:a1:85:4c:c0:ae:ae:d1:51:92:b6:81:e0: 8d:ba:9a:37:01:42:c0:cb:ef:1b:c8:d2:3f:a7:60: 6f:76:3d:b8:40:fe:f8:cc:5d:18:5c:af:e2:e0:d3: 60:e4:09:ca:2d:0a:9a:40:1a:86:98:08:f2:d4:7e: d2:60:08:96:04:ba:18:03:f4:07:a1:a0:5c:a8:c5: 6e:b8:aa:b6:34:23:18:5e:a6:bd:55:3c:49:b8:cb: cc:4f:ac:e6:ad:76:0d:b5:dd:14:3d:03:9b:38:f9: a1:8f:89:c5:50:79:e4:92:28:62:3d:c5:46:06:5f: bc:81:56:3b:62:e5:8b:2b:16:e8:9c:6e:d1:eb:8d: 31:50:1f:0a:3f:f0:75:51:24:32:74:d9:47:0f:07: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:61:13:27:90:4A:DD:8C:6A:FD:D0:D3:94:0F:91:4A:B1:0B:50 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS401881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.232.0/22 157.254.238.0/24 Signature Algorithm: sha256WithRSAEncryption 46:88:d6:37:a9:23:21:6b:37:a1:bc:00:10:57:f2:f1:5c:bc: 8a:99:3f:f4:d7:cb:ca:c6:44:60:99:e5:86:25:78:71:76:f3: 16:26:ec:4b:1b:34:15:f3:d8:98:48:3d:38:0b:4f:0d:36:70: 06:d8:41:df:97:32:00:5b:6a:1a:3c:ea:cd:4d:5a:05:70:3b: 31:ec:9a:48:68:8b:83:1d:41:3b:32:a6:b0:75:c0:b7:ac:e6: c5:97:13:48:98:01:4a:bb:0e:9e:a1:18:89:39:54:b3:bc:52: 39:aa:11:75:f3:df:7d:b5:65:38:b1:35:f6:21:58:e7:45:99: 8d:46:36:13:f6:50:ca:a4:c4:5d:82:1e:1b:97:86:51:23:b2: c5:62:19:21:b8:88:01:25:3f:17:09:28:2e:80:5a:65:8f:a0: 98:5a:96:45:81:d1:1e:55:de:6e:d9:ff:d6:4c:06:00:2b:49: 17:3d:1f:6e:5d:a8:d1:ed:17:c8:c4:89:b9:06:83:24:89:01: e1:66:7a:68:be:86:b7:da:be:df:e2:f8:ee:40:0b:c3:e3:ca: af:65:90:5b:b1:76:e9:4f:8a:cf:f2:61:70:d2:eb:fd:c1:ab: 0f:64:bc:87:2d:9e:d7:eb:ed:c9:f8:18:91:49:78:ac:0a:00: 56:6f:eb:1c -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUTtka9LW0R5pqM17+pAyB+j5FlrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDI3MTQwNTQ4WhcNMjcwNDI2MTQxMDQ4 WjAzMTEwLwYDVQQDEyhFNDYxNjExMzI3OTA0QUREOEM2QUZERDBEMzk0MEY5MTRB QjEwQjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsM2rgYjlZpHc i/YHZoLMSsey9c7enZyuJJ9u2HLjEIJgCkBHf17D1PZ2ZVtIuX3IisGL21xVwSRy wi03WWjxCeg+kzh26agUdCa5tWkSnJqURoGWk+umnDSQ036GFe+bEWwPNXlygPji evahhUzArq7RUZK2geCNupo3AULAy+8byNI/p2Bvdj24QP74zF0YXK/i4NNg5AnK LQqaQBqGmAjy1H7SYAiWBLoYA/QHoaBcqMVuuKq2NCMYXqa9VTxJuMvMT6zmrXYN td0UPQObOPmhj4nFUHnkkihiPcVGBl+8gVY7YuWLKxbonG7R640xUB8KP/B1USQy dNlHDwcdBwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFORhYRMnkErdjGr90NOUD5FK sQtQMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMTg4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAp3+6AMEAJ3+7jANBgkqhkiG9w0B AQsFAAOCAQEARojWN6kjIWs3obwAEFfy8Vy8ipk/9NfLysZEYJnlhiV4cXbzFibs Sxs0FfPYmEg9OAtPDTZwBthB35cyAFtqGjzqzU1aBXA7MeyaSGiLgx1BOzKmsHXA t6zmxZcTSJgBSrsOnqEYiTlUs7xSOaoRdfPffbVlOLE19iFY50WZjUY2E/ZQyqTE XYIeG5eGUSOyxWIZIbiIASU/FwkoLoBaZY+gmFqWRYHRHlXebtn/1kwGACtJFz0f bl2o0e0XyMSJuQaDJIkB4WZ6aL6Gt9q+3+L47kALw+PKr2WQW7F26U+Kz/JhcNLr /cGrD2S8hy2e1+vtyfgYkUl4rAoAVm/rHA== -----END CERTIFICATE-----Generated at Tue Apr 28 11:33:48 2026 by rpki-client