$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa File: AS209888.roa (raw, json) Hash identifier: mgZ6BL8ZeQx3yuERSWzsflJeC4wfPmiMJhSu20dK+vo= Subject key identifier: 8B:B0:1C:8B:84:7B:2C:8B:49:20:D6:9F:5F:0D:7B:62:BE:A0:6E:3C Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4C9C564453279075805C031949D6DEE5BD0FF5BB Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa Signing time: Thu 02 Apr 2026 01:56:32 +0000 ROA not before: Thu 02 Apr 2026 01:51:32 +0000 ROA not after: Thu 01 Apr 2027 01:56:32 +0000 asID: 209888 IP address blocks: 40.183.152.0/24 maxlen: 24 40.183.156.0/24 maxlen: 24 40.183.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 05:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:9c:56:44:53:27:90:75:80:5c:03:19:49:d6:de:e5:bd:0f:f5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 2 01:51:32 2026 GMT Not After : Apr 1 01:56:32 2027 GMT Subject: CN=8BB01C8B847B2C8B4920D69F5F0D7B62BEA06E3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:94:f6:2b:d3:86:09:7b:f7:b4:9e:fd:4c:7c: 65:c3:52:56:67:f0:51:57:ef:30:bd:14:96:ed:0c: 05:a8:a9:73:d6:88:bf:f4:b9:db:72:9f:48:0d:f4: 12:b4:5e:52:c6:3d:27:dc:af:ea:84:aa:25:5a:78: eb:7a:7c:e1:fc:71:b3:e4:10:fa:b8:01:06:6e:a3: 5e:ad:a8:47:df:f2:13:c9:8e:72:b2:83:31:79:06: d1:6a:bc:6f:5f:a0:ac:db:f9:6f:b7:fa:41:07:c8: 9b:18:f9:07:f4:52:ea:ae:38:f2:fc:fb:f9:a2:f7: 1e:97:35:ac:f1:5e:5e:77:44:8f:70:e7:e0:bf:5c: 5e:85:22:99:21:65:17:4f:67:bf:0a:9d:7c:71:7e: eb:ad:75:db:ab:cf:4d:c8:04:fd:57:66:99:a9:49: 01:64:27:3f:60:b8:78:bb:25:88:89:75:29:e8:28: bd:be:0f:af:43:21:95:0c:8f:46:b8:08:e8:a1:f4: 4e:82:1b:41:74:49:61:49:d9:43:fa:78:3d:37:f7: b8:1d:5d:ac:f7:25:22:0f:6f:c4:62:a3:eb:e4:b8: 63:95:09:9d:e5:5b:49:9e:85:f4:e0:f2:e3:bf:a8: 4d:e8:a2:4f:f1:69:8f:0c:4e:a2:2e:de:ff:00:9d: 61:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B0:1C:8B:84:7B:2C:8B:49:20:D6:9F:5F:0D:7B:62:BE:A0:6E:3C X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS209888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.152.0/24 40.183.156.0/24 40.183.158.0/24 Signature Algorithm: sha256WithRSAEncryption 79:8d:c0:bc:f0:45:f7:1d:a2:c2:6b:f6:42:f9:7e:ac:d3:dc: 85:12:65:19:2d:e0:63:97:23:8c:74:67:8f:eb:5a:6c:9f:18: 1c:fd:e6:4b:03:3d:29:c9:39:3b:1b:56:ad:57:ed:29:57:ee: ac:a6:19:37:c0:ef:be:67:e4:a8:8d:b1:83:a4:7d:3a:26:bd: 26:1c:63:46:6a:6d:24:c5:5a:6e:3d:41:5e:21:9b:70:a2:0d: 56:01:d7:35:0e:53:81:56:11:7b:fc:9a:63:ac:cb:f5:92:e0: 9a:01:e4:42:29:0e:d1:25:7f:8f:0d:a0:82:82:91:e3:5c:2b: dc:be:9b:ce:b5:2d:a8:ba:38:86:1f:f0:5b:cd:83:85:50:02: 21:31:8c:2b:ea:01:64:35:ee:33:f7:97:3a:a0:e9:cd:46:17: 62:83:ff:f0:c5:71:3f:26:28:b5:de:84:12:ce:38:40:b1:65: fc:21:ae:0f:4d:ea:9e:dc:21:8b:f5:c2:d0:e5:b7:f1:87:50: a4:72:0d:37:4b:3b:0b:b7:8e:4e:3b:f1:75:52:e8:85:d3:21: 8c:0f:bb:75:47:db:e8:98:85:4c:e6:dc:e7:2f:5e:75:6e:c7: 5f:a7:1e:07:8f:e8:68:d9:c0:ef:7f:d4:5e:cc:e8:37:82:f8: fe:32:2b:bb -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUTJxWRFMnkHWAXAMZSdbe5b0P9bswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDAyMDE1MTMyWhcNMjcwNDAxMDE1NjMy WjAzMTEwLwYDVQQDEyg4QkIwMUM4Qjg0N0IyQzhCNDkyMEQ2OUY1RjBEN0I2MkJF QTA2RTNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5T2K9OGCXv3 tJ79THxlw1JWZ/BRV+8wvRSW7QwFqKlz1oi/9Lnbcp9IDfQStF5Sxj0n3K/qhKol Wnjrenzh/HGz5BD6uAEGbqNerahH3/ITyY5ysoMxeQbRarxvX6Cs2/lvt/pBB8ib GPkH9FLqrjjy/Pv5ovcelzWs8V5ed0SPcOfgv1xehSKZIWUXT2e/Cp18cX7rrXXb q89NyAT9V2aZqUkBZCc/YLh4uyWIiXUp6Ci9vg+vQyGVDI9GuAjoofROghtBdElh SdlD+ng9N/e4HV2s9yUiD2/EYqPr5LhjlQmd5VtJnoX04PLjv6hN6KJP8WmPDE6i Lt7/AJ1hkQIDAQABo4ICizCCAocwHQYDVR0OBBYEFIuwHIuEeyyLSSDWn18Ne2K+ oG48MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEACi3mAMEACi3nAMEACi3njANBgkq hkiG9w0BAQsFAAOCAQEAeY3AvPBF9x2iwmv2Qvl+rNPchRJlGS3gY5cjjHRnj+ta bJ8YHP3mSwM9Kck5OxtWrVftKVfurKYZN8DvvmfkqI2xg6R9Oia9JhxjRmptJMVa bj1BXiGbcKINVgHXNQ5TgVYRe/yaY6zL9ZLgmgHkQikO0SV/jw2ggoKR41wr3L6b zrUtqLo4hh/wW82DhVACITGMK+oBZDXuM/eXOqDpzUYXYoP/8MVxPyYotd6EEs44 QLFl/CGuD03qntwhi/XC0OW38YdQpHINN0s7C7eOTjvxdVLohdMhjA+7dUfb6JiF TObc5y9edW7HX6ceB4/oaNnA73/UXszoN4L4/jIruw== -----END CERTIFICATE-----Generated at Fri Apr 17 06:38:27 2026 by rpki-client