$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: knm/bMlb1fTqoU2wGAntFTlm9ZvEBEsNMY9mz4bLADk= Subject key identifier: B1:C3:01:8B:17:0F:8D:E9:05:60:1B:EC:6E:0B:56:B7:90:25:85:86 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 634F22C4B0E24AE331552F9FBC9AEF3FB7DD2073 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa Signing time: Thu 30 Oct 2025 08:23:57 +0000 ROA not before: Thu 30 Oct 2025 08:18:57 +0000 ROA not after: Thu 29 Oct 2026 08:23:57 +0000 asID: 205886 IP address blocks: 40.27.0.0/24 maxlen: 24 40.27.88.0/24 maxlen: 24 40.27.174.0/24 maxlen: 24 40.27.226.0/24 maxlen: 24 40.27.243.0/24 maxlen: 24 40.183.99.0/24 maxlen: 24 40.223.7.0/24 maxlen: 24 40.223.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:57:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:4f:22:c4:b0:e2:4a:e3:31:55:2f:9f:bc:9a:ef:3f:b7:dd:20:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 30 08:18:57 2025 GMT Not After : Oct 29 08:23:57 2026 GMT Subject: CN=B1C3018B170F8DE905601BEC6E0B56B790258586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:54:be:5a:72:90:a2:59:0b:bc:e9:87:c0:05: 80:61:c4:55:03:cb:da:23:93:60:c8:fd:cd:1e:93: 9d:b6:e0:a1:0a:4d:46:d5:3b:3e:49:c8:99:a5:29: 8d:cb:f6:a8:5c:e8:9b:ad:a4:24:60:f4:03:1e:db: 3b:4f:01:d4:bf:18:a8:27:e5:54:ea:fc:9c:71:64: 0d:c5:86:43:a6:01:b8:ec:b3:90:5c:78:fa:3b:e3: 2d:ac:7d:7e:d4:ee:ee:e4:63:52:0b:e3:67:7f:86: ff:f0:28:24:64:48:d7:59:7b:01:ef:b7:25:1f:f9: 56:a2:4f:27:6e:ff:3b:a4:b2:da:41:46:5a:b8:e8: 01:3f:58:f7:43:69:2e:c7:1f:34:6a:f7:3b:12:08: 7a:ce:de:8b:5b:69:78:8c:be:44:eb:1e:67:84:d2: 6f:49:89:1b:c7:cd:6a:71:36:dd:ee:c8:ab:8a:19: 1a:71:5c:56:c2:b0:0e:8d:7e:33:f7:51:b4:bd:18: 16:d1:06:14:99:c3:cd:c0:cf:3c:cb:0d:2e:32:ad: 3e:af:a5:8b:a7:fc:a2:1d:ef:1b:0e:a1:97:b5:aa: 1d:7b:42:e3:35:80:54:a7:1e:fd:d1:ff:60:95:3a: bb:37:be:ff:0b:4f:9c:e6:ea:eb:c9:35:c0:c0:09: ea:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C3:01:8B:17:0F:8D:E9:05:60:1B:EC:6E:0B:56:B7:90:25:85:86 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.0.0/24 40.27.88.0/24 40.27.174.0/24 40.27.226.0/24 40.27.243.0/24 40.183.99.0/24 40.223.7.0/24 40.223.21.0/24 Signature Algorithm: sha256WithRSAEncryption 92:79:91:ab:ed:15:c6:32:ac:47:9b:18:a9:be:53:9c:80:2d: ea:68:75:2e:13:b3:b9:c8:af:8d:d5:7a:31:93:ad:a6:ee:89: 53:95:ad:b2:57:a7:36:80:3a:de:73:11:29:b1:da:b8:e9:c3: 4b:61:26:ac:e4:84:36:79:5d:a6:33:1d:59:20:65:4e:70:93: 6e:66:fc:e7:6b:4b:7e:e1:69:77:15:f8:36:e8:7f:d2:35:f3: 60:dc:4a:99:79:0f:f9:e0:be:1b:14:fd:da:09:5f:d1:c2:56: 52:3d:91:3b:98:8f:b5:09:a8:78:a8:b5:c7:10:bd:e2:62:b2: 1c:50:0b:3e:c9:36:38:bb:d5:7c:a9:5d:6c:06:56:cc:98:7a: 3e:d9:90:66:a1:98:4b:7d:79:98:21:18:13:49:ff:e7:ee:59: 91:f7:1b:00:59:b3:ac:b5:23:d3:bb:b6:ef:2a:db:f1:4e:d3: 3f:22:9b:22:a0:56:51:73:94:82:32:8c:b7:6f:a8:23:a5:40: b4:f4:e7:d2:65:e6:ef:9b:30:27:c7:3c:30:7d:47:ba:9a:66: 11:67:32:08:58:b6:38:6d:2e:be:db:26:46:ff:ae:d6:3f:4d: 0e:b5:92:ac:df:76:c9:52:fe:15:eb:c3:fe:42:24:d7:75:3a: 14:5a:d6:c3 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUY08ixLDiSuMxVS+fvJrvP7fdIHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDMwMDgxODU3WhcNMjYxMDI5MDgyMzU3 WjAzMTEwLwYDVQQDEyhCMUMzMDE4QjE3MEY4REU5MDU2MDFCRUM2RTBCNTZCNzkw MjU4NTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlS+WnKQolkL vOmHwAWAYcRVA8vaI5NgyP3NHpOdtuChCk1G1Ts+SciZpSmNy/aoXOibraQkYPQD Hts7TwHUvxioJ+VU6vyccWQNxYZDpgG47LOQXHj6O+MtrH1+1O7u5GNSC+Nnf4b/ 8CgkZEjXWXsB77clH/lWok8nbv87pLLaQUZauOgBP1j3Q2kuxx80avc7Egh6zt6L W2l4jL5E6x5nhNJvSYkbx81qcTbd7sirihkacVxWwrAOjX4z91G0vRgW0QYUmcPN wM88yw0uMq0+r6WLp/yiHe8bDqGXtaode0LjNYBUpx790f9glTq7N77/C0+c5urr yTXAwAnqvwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFLHDAYsXD43pBWAb7G4LVreQ JYWGMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwNTg4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ BggrBgEFBQcBBwEB/wQ6MDgwNgQCAAEwMAMEACgbAAMEACgbWAMEACgbrgMEACgb 4gMEACgb8wMEACi3YwMEACjfBwMEACjfFTANBgkqhkiG9w0BAQsFAAOCAQEAknmR q+0VxjKsR5sYqb5TnIAt6mh1LhOzucivjdV6MZOtpu6JU5WtslenNoA63nMRKbHa uOnDS2EmrOSENnldpjMdWSBlTnCTbmb852tLfuFpdxX4Nuh/0jXzYNxKmXkP+eC+ GxT92glf0cJWUj2RO5iPtQmoeKi1xxC94mKyHFALPsk2OLvVfKldbAZWzJh6PtmQ ZqGYS315mCEYE0n/5+5ZkfcbAFmzrLUj07u27yrb8U7TPyKbIqBWUXOUgjKMt2+o I6VAtPTn0mXm75swJ8c8MH1HuppmEWcyCFi2OG0uvtsmRv+u1j9NDrWSrN92yVL+ FevD/kIk13U6FFrWww== -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:04 2025 by rpki-client