$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: Y2Oszz0kKnZxI55/rtjLZ1XU54F3srDYs2r62Lc005I= Subject key identifier: D5:53:2C:FB:4C:97:4B:88:7E:29:F9:39:59:C4:E8:D1:B5:96:51:A4 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 1D1C1A441F2DC45A0F313E7CFBDF07DFEC53F61E Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa Signing time: Tue 28 Jul 2026 00:02:46 +0000 ROA not before: Mon 27 Jul 2026 23:57:46 +0000 ROA not after: Tue 27 Jul 2027 00:02:46 +0000 asID: 396356 IP address blocks: 140.99.164.0/24 maxlen: 24 140.99.216.0/24 maxlen: 24 140.99.217.0/24 maxlen: 24 140.99.218.0/24 maxlen: 24 140.99.219.0/24 maxlen: 24 140.99.222.0/24 maxlen: 24 140.99.224.0/24 maxlen: 24 140.99.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 18:05:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:1c:1a:44:1f:2d:c4:5a:0f:31:3e:7c:fb:df:07:df:ec:53:f6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jul 27 23:57:46 2026 GMT Not After : Jul 27 00:02:46 2027 GMT Subject: CN=D5532CFB4C974B887E29F93959C4E8D1B59651A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:b2:bc:b8:41:0d:bf:f8:69:41:d3:ca:27: 34:b2:c1:41:eb:49:2b:f3:52:20:de:4c:b2:77:f3: 3d:53:19:47:3a:7f:85:89:e7:90:d8:09:b2:8b:5b: 49:e1:48:b8:d7:8d:e6:87:fe:79:2d:07:d1:62:1e: 32:88:85:2d:43:65:6b:b3:e5:61:55:1a:e1:db:16: 7c:06:2b:1a:8e:09:b4:8d:12:ff:af:4d:ae:12:3b: 1e:cc:9c:e2:93:c7:d0:b5:4f:cc:6c:94:9a:7e:74: 56:3a:4f:d9:4a:6c:94:53:8d:e9:e0:91:1e:ce:cd: dc:93:47:17:45:72:aa:60:a1:49:3b:c0:8f:32:28: c9:b0:95:64:99:45:a6:43:00:ae:15:2c:db:8f:ee: c5:a2:3a:8d:30:fd:44:c3:6e:6c:7a:ba:41:cc:13: 0f:84:c3:32:8e:4b:cf:bf:f4:c4:f0:34:c9:b5:20: 07:a4:4c:c3:76:e1:40:36:00:da:83:a0:39:e6:1b: f8:16:b7:98:43:e7:c9:39:b7:f1:92:b8:c4:e9:15: f4:6a:e5:25:c7:38:3d:62:30:85:9d:30:14:a4:50: 63:42:a7:2c:b4:79:8b:84:1e:f1:43:03:53:0c:7e: 7f:d0:e8:ff:b2:9a:b9:86:33:bc:71:bd:2b:f7:90: 2c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:2C:FB:4C:97:4B:88:7E:29:F9:39:59:C4:E8:D1:B5:96:51:A4 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.164.0/24 140.99.216.0/22 140.99.222.0/24 140.99.224.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:f2:ea:c4:b7:c0:21:3e:e8:1d:2b:e4:2f:46:e6:5b:d5:58: 5e:ff:0b:0e:aa:31:6d:24:89:87:b2:61:52:2b:a6:16:67:47: 34:ff:e9:ad:a4:89:e5:51:f0:60:66:e4:19:9b:55:18:d0:46: 3d:c0:01:16:33:e4:34:3e:8a:a8:6f:7b:97:fe:ba:eb:8e:bf: 80:70:0c:83:b4:88:f6:a6:00:42:9b:66:0b:06:a3:96:80:9b: 40:7e:44:50:20:66:e2:aa:52:02:4f:25:65:67:56:ef:09:51: e7:f5:cc:86:45:cc:eb:c5:0f:e6:fd:a4:aa:d2:91:ec:81:47: ed:79:c4:c2:1c:0d:b2:c9:a0:93:55:68:29:1c:f2:df:59:06: ff:7d:9d:f6:3f:dc:20:9f:e9:06:9d:c1:6a:1c:99:ae:df:74: d8:51:58:c2:ea:8d:73:09:47:36:12:d8:58:ac:51:7b:55:83: 69:67:a7:88:18:e8:78:37:6d:a7:0e:65:ca:b8:12:99:6a:86: 4f:9b:2d:ad:03:c0:48:da:0f:e6:bc:5d:42:02:26:47:5a:f0: ca:c4:0f:92:dd:26:49:85:5f:a2:d1:a3:a3:cc:fa:66:6b:c8: 75:8c:d2:93:06:9c:e2:a7:ff:5c:57:d3:ab:61:45:ef:c8:74: 79:7d:24:57 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUHRwaRB8txFoPMT58+98H3+xT9h4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjYwNzI3MjM1NzQ2WhcNMjcwNzI3MDAwMjQ2 WjAzMTEwLwYDVQQDEyhENTUzMkNGQjRDOTc0Qjg4N0UyOUY5Mzk1OUM0RThEMUI1 OTY1MUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI6yvLhBDb/4 aUHTyic0ssFB60kr81Ig3kyyd/M9UxlHOn+FieeQ2Amyi1tJ4Ui4143mh/55LQfR Yh4yiIUtQ2Vrs+VhVRrh2xZ8Bisajgm0jRL/r02uEjsezJzik8fQtU/MbJSafnRW Ok/ZSmyUU43p4JEezs3ck0cXRXKqYKFJO8CPMijJsJVkmUWmQwCuFSzbj+7FojqN MP1Ew25serpBzBMPhMMyjkvPv/TE8DTJtSAHpEzDduFANgDag6A55hv4FreYQ+fJ ObfxkrjE6RX0auUlxzg9YjCFnTAUpFBjQqcstHmLhB7xQwNTDH5/0Oj/spq5hjO8 cb0r95AsEwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFNVTLPtMl0uIfin5OVnE6NG1 llGkMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAIxjpAMEAoxj2AMEAIxj3gMEAYxj 4DANBgkqhkiG9w0BAQsFAAOCAQEADPLqxLfAIT7oHSvkL0bmW9VYXv8LDqoxbSSJ h7JhUiumFmdHNP/praSJ5VHwYGbkGZtVGNBGPcABFjPkND6KqG97l/66646/gHAM g7SI9qYAQptmCwajloCbQH5EUCBm4qpSAk8lZWdW7wlR5/XMhkXM68UP5v2kqtKR 7IFH7XnEwhwNssmgk1VoKRzy31kG/32d9j/cIJ/pBp3BahyZrt902FFYwuqNcwlH NhLYWKxRe1WDaWeniBjoeDdtpw5lyrgSmWqGT5strQPASNoP5rxdQgImR1rwysQP kt0mSYVfotGjo8z6ZmvIdYzSkwac4qf/XFfTq2FF78h0eX0kVw== -----END CERTIFICATE-----Generated at Tue Jul 28 21:12:27 2026 by rpki-client