$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: 9tYOLsxv2Z4B+JUiiID4BfiqedxJLbtpI5AS71+N9mg= Subject key identifier: F7:70:4D:4F:CD:6F:F0:C5:FC:C2:CE:F2:D0:D0:A1:06:A6:EE:AB:74 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 02F5C5FD8E9AF3CD403F71FC5BA0A11F7DAC17B6 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa Signing time: Fri 25 Jul 2025 04:37:03 +0000 ROA not before: Fri 25 Jul 2025 04:32:03 +0000 ROA not after: Fri 24 Jul 2026 04:37:03 +0000 asID: 152868 IP address blocks: 40.27.21.0/24 maxlen: 24 40.27.137.0/24 maxlen: 24 40.183.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 03:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f5:c5:fd:8e:9a:f3:cd:40:3f:71:fc:5b:a0:a1:1f:7d:ac:17:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 25 04:32:03 2025 GMT Not After : Jul 24 04:37:03 2026 GMT Subject: CN=F7704D4FCD6FF0C5FCC2CEF2D0D0A106A6EEAB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:ff:be:a7:80:34:a1:e5:1a:60:2c:8f:2a: 2c:67:44:c7:06:01:94:82:dc:2c:eb:08:53:4a:b2: 7a:65:6d:f5:90:d5:70:53:aa:41:f9:3c:8f:de:33: 62:30:20:5b:aa:65:52:f8:12:76:43:3d:82:7b:28: 7b:47:6f:f2:cd:4b:df:dc:d4:ea:24:f6:8b:38:6a: b3:36:96:1d:29:d7:76:6c:2f:a4:05:20:9e:45:55: 59:01:4f:10:43:f1:03:96:df:69:8f:d2:d9:27:13: 1a:de:22:72:fb:af:be:8e:27:a1:ad:53:5b:5e:67: ce:80:8d:b7:6f:96:73:9c:93:48:14:41:ca:29:8d: 7b:27:6d:6e:2b:57:bb:22:4d:aa:96:d3:b7:4d:d7: 0c:c4:78:70:4b:92:e4:2c:5c:a5:95:b6:c8:a3:79: de:03:cc:9b:65:c4:68:6c:0f:e8:79:95:e9:cb:30: 5a:63:8f:70:ce:7b:c9:0a:2f:b8:06:e2:ec:87:b8: 40:f1:0f:f6:19:14:64:57:27:26:5c:81:fb:18:61: a6:8d:42:3c:84:d8:76:7b:d8:49:46:fa:33:1e:6a: ff:40:f0:0b:9d:53:90:82:6a:99:f8:1b:f9:64:c6: 8e:e6:96:30:66:c6:24:24:7a:8b:ed:f3:1e:a8:df: 0e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:4D:4F:CD:6F:F0:C5:FC:C2:CE:F2:D0:D0:A1:06:A6:EE:AB:74 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.21.0/24 40.27.137.0/24 40.183.116.0/23 Signature Algorithm: sha256WithRSAEncryption 10:4e:d4:e6:93:77:c8:4b:71:ed:45:79:df:29:f5:c7:27:1e: 16:72:2a:cb:57:d9:bc:54:c5:a3:71:46:92:8a:8f:0e:8a:5e: 39:7c:4f:f9:75:04:ee:33:09:2e:d1:2c:64:2c:ec:36:3d:57: 36:2b:52:07:73:f6:0d:67:9c:05:4b:d4:b6:71:3b:c4:eb:a7: 02:0e:f2:7d:b8:5a:d4:6a:da:2a:79:09:dc:1a:20:75:d2:0f: 3e:75:f1:c4:ec:34:8b:bb:1b:9e:f2:79:2d:6e:87:96:d3:3c: 46:dc:ce:a9:4d:f1:a9:fa:f9:d0:41:7d:69:2e:26:76:db:89: f0:ff:b2:61:29:31:d6:48:36:9f:37:29:c4:95:42:5e:3a:1e: 1e:39:bf:1e:f0:ec:81:8a:d1:41:85:de:0b:de:6f:2f:a4:cb: e0:66:02:6a:7a:d3:5c:14:03:8d:21:91:03:4d:31:3b:91:cf: 72:b3:dc:32:97:f2:4c:7f:a0:02:b1:31:19:53:d5:d4:05:ff: d3:52:53:b5:e9:07:12:3e:40:2d:3d:73:7e:05:49:a8:b4:7e: 86:14:9f:23:db:e9:7c:43:fb:3a:ae:e7:53:cd:24:09:dc:14: 94:a6:2d:7a:05:e3:23:32:ce:fb:6b:39:c3:35:3f:a2:89:9b: fa:37:99:29 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUAvXF/Y6a881AP3H8W6ChH32sF7YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzI1MDQzMjAzWhcNMjYwNzI0MDQzNzAz WjAzMTEwLwYDVQQDEyhGNzcwNEQ0RkNENkZGMEM1RkNDMkNFRjJEMEQwQTEwNkE2 RUVBQjc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwH/vqeANKHl GmAsjyosZ0THBgGUgtws6whTSrJ6ZW31kNVwU6pB+TyP3jNiMCBbqmVS+BJ2Qz2C eyh7R2/yzUvf3NTqJPaLOGqzNpYdKdd2bC+kBSCeRVVZAU8QQ/EDlt9pj9LZJxMa 3iJy+6++jiehrVNbXmfOgI23b5ZznJNIFEHKKY17J21uK1e7Ik2qltO3TdcMxHhw S5LkLFyllbbIo3neA8ybZcRobA/oeZXpyzBaY49wznvJCi+4BuLsh7hA8Q/2GRRk VycmXIH7GGGmjUI8hNh2e9hJRvozHmr/QPALnVOQgmqZ+Bv5ZMaO5pYwZsYkJHqL 7fMeqN8O7wIDAQABo4ICizCCAocwHQYDVR0OBBYEFPdwTU/Nb/DF/MLO8tDQoQam 7qt0MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEACgbFQMEACgbiQMEASi3dDANBgkq hkiG9w0BAQsFAAOCAQEAEE7U5pN3yEtx7UV53yn1xyceFnIqy1fZvFTFo3FGkoqP DopeOXxP+XUE7jMJLtEsZCzsNj1XNitSB3P2DWecBUvUtnE7xOunAg7yfbha1Gra KnkJ3BogddIPPnXxxOw0i7sbnvJ5LW6HltM8RtzOqU3xqfr50EF9aS4mdtuJ8P+y YSkx1kg2nzcpxJVCXjoeHjm/HvDsgYrRQYXeC95vL6TL4GYCanrTXBQDjSGRA00x O5HPcrPcMpfyTH+gArExGVPV1AX/01JTtekHEj5ALT1zfgVJqLR+hhSfI9vpfEP7 Oq7nU80kCdwUlKYtegXjIzLO+2s5wzU/oomb+jeZKQ== -----END CERTIFICATE-----Generated at Tue Aug 5 20:05:53 2025 by rpki-client