$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa File: AS7922.roa (raw, json) Hash identifier: uiBbCkftJhX7sK/GEdu3omV+kFT0gm2HGh+0C2tvlwM= Subject key identifier: AA:26:8E:F0:49:39:2B:60:F7:94:55:BD:AE:D9:10:A0:2B:30:30:FA Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 5FCFD46C01671EADD0978B019F89FB579DB1E6F2 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa Signing time: Tue 28 Oct 2025 11:30:39 +0000 ROA not before: Tue 28 Oct 2025 11:25:39 +0000 ROA not after: Tue 27 Oct 2026 11:30:39 +0000 asID: 7922 IP address blocks: 140.99.49.0/24 maxlen: 24 140.99.77.0/24 maxlen: 24 140.99.79.0/24 maxlen: 24 140.99.127.0/24 maxlen: 24 140.99.132.0/22 maxlen: 24 140.99.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 14:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cf:d4:6c:01:67:1e:ad:d0:97:8b:01:9f:89:fb:57:9d:b1:e6:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Oct 28 11:25:39 2025 GMT Not After : Oct 27 11:30:39 2026 GMT Subject: CN=AA268EF049392B60F79455BDAED910A02B3030FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:df:22:7b:c3:83:47:57:84:69:f3:f6:71:6f: 5b:b3:c8:77:b1:a7:2c:7a:4f:5b:61:63:e9:6d:8b: 8e:96:33:ba:09:9a:35:2b:e0:5c:5a:7a:b1:e8:12: 52:1b:8d:31:d9:64:22:d2:74:15:29:e0:2b:56:50: 12:81:58:db:3d:09:62:a2:5c:11:6a:3a:96:6f:8e: d3:ec:c7:36:42:d2:33:07:61:98:af:e5:2f:99:4d: 6d:02:92:9d:4b:8d:c4:91:87:7a:4b:93:67:38:09: 66:ae:ed:1d:a9:09:21:a1:ae:3a:10:9d:40:d1:9a: 7f:ce:8e:b0:7d:be:21:8c:8f:c4:ed:15:0f:82:f1: 07:0e:c6:4c:cc:55:3d:79:56:81:fb:07:17:f7:6a: e5:a5:a5:20:eb:84:c1:b1:13:41:f4:0b:99:f0:36: d8:70:28:4d:d6:04:bc:e1:3b:7d:6c:5a:0a:d2:de: 76:f8:a7:c5:ef:50:3c:28:3e:83:df:f5:37:b2:94: cc:09:18:15:8e:2b:28:8f:6f:72:24:e8:6d:3b:f4: 50:5e:40:50:1c:29:fd:cc:e2:73:ff:13:83:13:35: 9b:99:5f:7e:7f:88:7c:da:24:12:14:b7:76:36:8f: fc:90:f2:04:5e:a2:ca:d9:90:d8:c0:60:98:7d:01: b2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:26:8E:F0:49:39:2B:60:F7:94:55:BD:AE:D9:10:A0:2B:30:30:FA X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS7922.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.49.0/24 140.99.77.0/24 140.99.79.0/24 140.99.127.0/24 140.99.132.0/22 140.99.210.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c8:34:90:68:15:a8:53:bc:aa:ba:8b:59:40:0e:6c:d7:e6: 04:bf:f4:59:1f:0e:fe:7b:a2:0a:dc:cd:7d:cc:54:4c:37:3c: 09:84:e8:47:d2:02:c3:14:fb:c8:1f:9c:90:c0:0e:bd:9d:62: 20:c8:01:ec:36:11:65:e6:b8:57:86:fb:0a:a7:be:c3:1d:dc: d2:d0:d3:81:f7:d2:ef:c1:69:9c:c6:0c:24:79:e8:f6:33:82: 75:67:14:7f:83:c0:50:b4:42:00:b9:ef:8a:1c:12:5c:70:c5: 1d:f6:9c:08:b7:1c:d3:f5:33:f0:d2:11:56:02:c4:ff:04:09: e0:19:f5:3d:5f:1b:44:eb:21:5e:db:f7:89:b8:03:0a:2c:ce: 9d:95:2e:89:d1:32:20:54:2a:36:53:49:e1:73:8e:6e:de:82: e6:5a:37:ef:b6:fc:3e:a0:82:b4:44:0f:06:f8:dd:4d:53:04: 87:58:10:d4:84:2c:3a:dc:54:1f:fd:e7:dd:d1:1f:f7:be:b8: 5c:81:4a:ae:e6:4d:0c:92:2f:d4:75:a1:71:c4:d5:3a:30:1a: 16:53:3e:9d:fd:e0:c3:7a:20:4c:e9:39:37:cd:14:27:c0:d4: c8:02:98:97:2c:44:aa:2d:bd:21:29:3f:fa:e0:23:42:1a:f8: b2:33:54:8a -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUX8/UbAFnHq3Ql4sBn4n7V52x5vIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUxMDI4MTEyNTM5WhcNMjYxMDI3MTEzMDM5 WjAzMTEwLwYDVQQDEyhBQTI2OEVGMDQ5MzkyQjYwRjc5NDU1QkRBRUQ5MTBBMDJC MzAzMEZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn98ie8ODR1eE afP2cW9bs8h3sacsek9bYWPpbYuOljO6CZo1K+BcWnqx6BJSG40x2WQi0nQVKeAr VlASgVjbPQliolwRajqWb47T7Mc2QtIzB2GYr+UvmU1tApKdS43EkYd6S5NnOAlm ru0dqQkhoa46EJ1A0Zp/zo6wfb4hjI/E7RUPgvEHDsZMzFU9eVaB+wcX92rlpaUg 64TBsRNB9AuZ8DbYcChN1gS84Tt9bFoK0t52+KfF71A8KD6D3/U3spTMCRgVjiso j29yJOhtO/RQXkBQHCn9zOJz/xODEzWbmV9+f4h82iQSFLd2No/8kPIEXqLK2ZDY wGCYfQGymQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKomjvBJOStg95RVva7ZEKAr MDD6MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzc5MjIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBACMYzEDBACMY00DBACMY08DBACMY38D BAKMY4QDBACMY9IwDQYJKoZIhvcNAQELBQADggEBADnINJBoFahTvKq6i1lADmzX 5gS/9FkfDv57ogrczX3MVEw3PAmE6EfSAsMU+8gfnJDADr2dYiDIAew2EWXmuFeG +wqnvsMd3NLQ04H30u/BaZzGDCR56PYzgnVnFH+DwFC0QgC574ocElxwxR32nAi3 HNP1M/DSEVYCxP8ECeAZ9T1fG0TrIV7b94m4Awoszp2VLonRMiBUKjZTSeFzjm7e guZaN++2/D6ggrREDwb43U1TBIdYENSELDrcVB/9593RH/e+uFyBSq7mTQySL9R1 oXHE1TowGhZTPp394MN6IEzpOTfNFCfA1MgCmJcsRKotvSEpP/rgI0Ia+LIzVIo= -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:35 2025 by rpki-client