$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa File: AS401507.roa (raw, json) Hash identifier: 3BQzEEgYunDB95ozTXkIrPHKyLBbkutuUbznnnhU7lg= Subject key identifier: 5A:25:2D:EF:60:B6:78:34:95:95:13:51:EB:6F:9A:BC:F5:2C:5C:B8 Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 6824FF167A6BBA9E160F37D34F37B9CF52CD23A8 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa Signing time: Sat 07 Jun 2025 16:54:03 +0000 ROA not before: Sat 07 Jun 2025 16:49:03 +0000 ROA not after: Sat 06 Jun 2026 16:54:03 +0000 asID: 401507 IP address blocks: 2a14:7584:6000::/36 maxlen: 48 2a14:7584:61c1::/48 maxlen: 48 2a14:7584:61c7::/48 maxlen: 48 2a14:7584:61cc::/48 maxlen: 48 2a14:7584:61cd::/48 maxlen: 48 2a14:7584:61ce::/48 maxlen: 48 2a14:7584:622d::/48 maxlen: 48 2a14:7584:638d::/48 maxlen: 48 2a14:7584:6396::/48 maxlen: 48 2a14:7584:64d1::/48 maxlen: 48 2a14:7584:6511::/48 maxlen: 48 2a14:7584:652b::/48 maxlen: 48 2a14:7584:655b::/48 maxlen: 48 2a14:7584:6563::/48 maxlen: 48 2a14:7584:658c::/48 maxlen: 48 2a14:7584:6596::/48 maxlen: 48 2a14:7584:65f6::/48 maxlen: 48 2a14:7584:66b1::/48 maxlen: 48 2a14:7584:66bc::/48 maxlen: 48 2a14:7584:66c9::/48 maxlen: 48 2a14:7584:6718::/48 maxlen: 48 2a14:7584:67e7::/48 maxlen: 48 2a14:7584:6893::/48 maxlen: 48 2a14:7584:699e::/48 maxlen: 48 2a14:7584:69aa::/48 maxlen: 48 2a14:7584:69fa::/48 maxlen: 48 2a14:7584:6a8d::/48 maxlen: 48 2a14:7584:6ac5::/48 maxlen: 48 2a14:7584:6c45::/48 maxlen: 48 2a14:7584:6c92::/48 maxlen: 48 2a14:7584:6de6::/48 maxlen: 48 2a14:7584:6e05::/48 maxlen: 48 2a14:7584:6e33::/48 maxlen: 48 2a14:7584:6e4d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Jun 2025 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:24:ff:16:7a:6b:ba:9e:16:0f:37:d3:4f:37:b9:cf:52:cd:23:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jun 7 16:49:03 2025 GMT Not After : Jun 6 16:54:03 2026 GMT Subject: CN=5A252DEF60B6783495951351EB6F9ABCF52C5CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:42:a4:cf:90:37:93:ea:6f:fc:fc:2f:a5: 94:d8:f2:c0:d2:c7:53:27:a0:8f:e8:70:8c:ca:70: 6b:aa:a5:98:a2:70:a7:46:18:54:58:fb:c4:6e:4e: 27:7d:f4:aa:99:3b:52:76:cf:73:5b:06:75:f4:a8: f5:4b:b9:ad:5d:be:7b:bb:1d:77:ee:25:97:b4:65: 91:3e:89:a6:9f:4b:18:15:ae:d4:6d:06:d5:9d:99: d2:73:30:93:5d:eb:55:c6:45:74:49:0d:52:cc:40: b7:2f:9e:f1:24:06:23:7c:36:04:09:f3:a6:5f:78: a6:e7:f6:9e:fa:37:1a:39:b4:66:6e:b1:7d:e0:d7: 24:d2:f6:a7:63:27:b6:d9:22:9d:41:0e:1c:e1:8b: d5:a4:36:8a:75:9c:8b:97:dc:c3:cd:1f:ea:3e:c8: 04:05:53:38:a3:76:16:1f:90:88:48:83:26:6a:98: 62:9b:26:47:bc:4b:0e:15:b3:db:f7:e1:57:f0:40: 23:5f:ad:1c:69:46:90:a3:d1:61:0d:6c:f3:60:ef: fe:57:dd:35:84:b7:6a:96:da:cd:13:33:c7:34:92: 97:29:bf:d0:2c:92:38:22:ba:ce:35:ba:55:43:dc: e3:50:91:de:0f:61:51:02:9f:5b:0a:cd:9e:c2:bf: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:25:2D:EF:60:B6:78:34:95:95:13:51:EB:6F:9A:BC:F5:2C:5C:B8 X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6000::/36 Signature Algorithm: sha256WithRSAEncryption 95:94:bd:3f:c3:15:71:5a:53:de:5d:22:ca:9b:62:27:2f:a9: c2:06:fe:5c:67:50:80:2f:f9:4c:d3:27:2f:48:86:06:21:3c: b5:f6:1b:e8:2f:74:ae:8a:ea:fe:a1:d8:3a:fa:fa:a3:96:42: 3d:93:13:f9:b8:3d:93:04:3e:18:a7:24:ac:8e:c5:47:5c:51: 96:4b:43:01:9f:bf:4f:cf:fb:9c:b7:21:d4:69:91:36:f0:a8: 96:48:9b:69:c5:dd:61:fc:72:29:b3:f1:22:7d:0c:e7:45:01: c5:13:6e:bf:c9:dd:49:7f:8c:26:6b:b7:44:89:07:17:20:9b: c1:fa:ff:cb:a1:36:a2:89:2b:f2:0f:c7:5e:2d:54:9e:67:d6: 89:70:b6:f1:e1:31:ea:5b:70:d6:7e:a5:3c:3f:24:8b:53:7a: 00:75:b3:09:6e:a1:c2:1c:e8:b2:84:64:91:c3:82:c1:1f:cb: 07:13:bb:7f:be:2c:7f:1e:da:42:33:a5:7a:32:e7:9d:7f:6b: 8f:17:3c:03:a5:06:08:69:f1:ae:11:c7:fc:e0:46:68:29:96: 26:d3:0a:79:12:6d:65:85:2b:8f:8c:f6:f3:26:6f:04:d1:4e: d9:f4:c9:38:d1:1e:38:95:fb:dc:0f:02:f3:8f:2d:f4:8e:ea: 2a:e8:6d:14 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUaCT/Fnprup4WDzfTTze5z1LNI6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTA2MDcxNjQ5MDNaFw0yNjA2MDYxNjU0MDNaMDMxMTAvBgNV BAMTKDVBMjUyREVGNjBCNjc4MzQ5NTk1MTM1MUVCNkY5QUJDRjUyQzVDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVG0Kkz5A3k+pv/PwvpZTY8sDS x1MnoI/ocIzKcGuqpZiicKdGGFRY+8RuTid99KqZO1J2z3NbBnX0qPVLua1dvnu7 HXfuJZe0ZZE+iaafSxgVrtRtBtWdmdJzMJNd61XGRXRJDVLMQLcvnvEkBiN8NgQJ 86ZfeKbn9p76Nxo5tGZusX3g1yTS9qdjJ7bZIp1BDhzhi9WkNop1nIuX3MPNH+o+ yAQFUzijdhYfkIhIgyZqmGKbJke8Sw4Vs9v34VfwQCNfrRxpRpCj0WENbPNg7/5X 3TWEt2qW2s0TM8c0kpcpv9Askjgius41ulVD3ONQkd4PYVECn1sKzZ7CvwsJAgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUWiUt72C2eDSVlRNR62+avPUsXLgwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEw ZWE2Njg3LzEvQVM0MDE1MDcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqFHWEYDANBgkqhkiG9w0BAQsF AAOCAQEAlZS9P8MVcVpT3l0iyptiJy+pwgb+XGdQgC/5TNMnL0iGBiE8tfYb6C90 rorq/qHYOvr6o5ZCPZMT+bg9kwQ+GKckrI7FR1xRlktDAZ+/T8/7nLch1GmRNvCo lkibacXdYfxyKbPxIn0M50UBxRNuv8ndSX+MJmu3RIkHFyCbwfr/y6E2ookr8g/H Xi1UnmfWiXC28eEx6ltw1n6lPD8ki1N6AHWzCW6hwhzosoRkkcOCwR/LBxO7f74s fx7aQjOlejLnnX9rjxc8A6UGCGnxrhHH/OBGaCmWJtMKeRJtZYUrj4z28yZvBNFO 2fTJONEeOJX73A8C848t9I7qKuhtFA== -----END CERTIFICATE-----Generated at Sat Jun 7 23:26:12 2025 by rpki-client