$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218700.roa File: AS218700.roa (raw, json) Hash identifier: 7b9jZ0XvZR6at3D2XmKR3LQvUDS5S1fdkgd9XQ84jUg= Subject key identifier: 3D:24:C7:07:A4:17:2B:DA:23:AF:67:41:90:59:CD:98:C0:A1:BE:C5 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 172BF8291FD260974F01634229040E4D72C3BBB3 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218700.roa Signing time: Tue 15 Sep 2026 08:43:56 +0000 ROA not before: Tue 15 Sep 2026 08:38:56 +0000 ROA not after: Tue 14 Sep 2027 08:43:56 +0000 asID: 218700 IP address blocks: 40.27.68.0/24 maxlen: 24 40.27.69.0/24 maxlen: 24 40.27.112.0/24 maxlen: 24 40.27.124.0/24 maxlen: 24 40.27.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2b:f8:29:1f:d2:60:97:4f:01:63:42:29:04:0e:4d:72:c3:bb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 15 08:38:56 2026 GMT Not After : Sep 14 08:43:56 2027 GMT Subject: CN=3D24C707A4172BDA23AF67419059CD98C0A1BEC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c3:d9:ce:c0:4b:f7:b6:f6:cb:58:3e:b0:6b: c2:83:24:e3:b4:ca:52:ea:eb:78:e3:e8:2a:0d:70: 94:56:a0:42:94:0c:4b:eb:85:a1:1b:5e:94:49:b8: f9:06:9e:27:5b:3c:d3:f6:6c:f8:5d:50:72:0a:99: 46:49:97:e4:53:4e:b1:c4:2d:94:91:8b:5d:cd:ff: b4:04:ef:b0:0e:b5:37:9c:51:66:c1:5a:73:96:3e: e4:5b:2b:c7:b4:0c:5a:41:66:2c:8b:bf:0e:7f:74: 6c:b6:16:75:55:2e:94:53:97:ce:d5:f5:86:59:01: 1e:26:4e:c0:66:29:dd:44:ae:0b:d9:f1:91:c6:b6: 75:8f:96:f9:7a:b6:d0:f0:5a:cf:ae:5b:39:32:a4: 50:36:2f:59:9e:b8:d3:2e:dd:66:f3:c1:a6:a2:cd: 42:31:a7:9a:6d:ec:6f:9c:0a:13:11:3c:9b:0f:ac: ae:ad:39:04:e6:db:ea:ab:3d:26:18:aa:01:7a:5c: 16:66:ff:d3:23:31:8b:ad:e4:bc:08:16:b2:5a:8f: 09:5d:b6:04:50:84:36:37:a4:50:57:a2:1d:c9:ad: c7:a3:33:74:2b:b9:33:bd:ff:3d:66:e9:87:c7:1b: c5:27:14:46:d4:e7:cb:66:e6:67:24:5e:97:cc:b8: a8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:24:C7:07:A4:17:2B:DA:23:AF:67:41:90:59:CD:98:C0:A1:BE:C5 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218700.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.68.0/23 40.27.112.0/24 40.27.124.0/24 40.27.126.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:6a:65:e9:9e:92:b0:b5:18:e9:79:88:4f:31:38:59:53:9d: 9a:0a:6b:7c:42:ab:a1:b2:66:41:08:4d:b0:d7:a1:cd:c5:ac: 0c:6f:0c:4d:c3:e7:92:4b:ee:69:5f:50:c3:1b:d1:07:08:61: 5c:a8:31:dd:0c:cd:46:b9:88:2a:bc:c0:55:5c:91:aa:d0:18: 6e:e8:15:39:38:b9:03:08:e2:bd:dc:07:eb:f6:41:03:56:27: bf:80:7e:57:2c:7a:61:71:7c:86:8d:12:c1:d0:d3:9f:32:c3: 0e:f5:5e:d4:6f:5f:3c:d5:02:cd:e6:ec:47:82:10:55:59:5f: ac:8f:47:76:56:48:5b:ff:b3:e7:ba:9e:4b:22:bd:83:e4:53: 29:8f:87:26:84:2e:51:48:c1:89:b2:b7:26:52:fe:7e:97:08: 6b:c6:95:93:3b:dd:4a:11:59:7d:2a:dc:40:96:c8:68:b1:17: 3e:a5:f0:06:00:9a:fc:71:b7:fd:27:24:b2:5a:ce:7c:94:e6: c3:92:e8:88:28:eb:df:ed:ca:04:ca:06:4c:95:56:13:86:e6: e0:70:15:f7:92:93:a9:7c:c3:87:dc:31:82:44:3c:86:f4:83: 8c:6d:a6:60:5c:b5:85:3e:93:a3:c2:04:d6:0b:26:53:8b:58: 7f:fa:5f:68 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUFyv4KR/SYJdPAWNCKQQOTXLDu7MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTE1MDgzODU2WhcNMjcwOTE0MDg0MzU2 WjAzMTEwLwYDVQQDEygzRDI0QzcwN0E0MTcyQkRBMjNBRjY3NDE5MDU5Q0Q5OEMw QTFCRUM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cPZzsBL97b2 y1g+sGvCgyTjtMpS6ut44+gqDXCUVqBClAxL64WhG16USbj5Bp4nWzzT9mz4XVBy CplGSZfkU06xxC2UkYtdzf+0BO+wDrU3nFFmwVpzlj7kWyvHtAxaQWYsi78Of3Rs thZ1VS6UU5fO1fWGWQEeJk7AZindRK4L2fGRxrZ1j5b5erbQ8FrPrls5MqRQNi9Z nrjTLt1m88Gmos1CMaeabexvnAoTETybD6yurTkE5tvqqz0mGKoBelwWZv/TIzGL reS8CBayWo8JXbYEUIQ2N6RQV6Idya3HozN0K7kzvf89ZumHxxvFJxRG1OfLZuZn JF6XzLio9wIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFD0kxwekFyvaI69nQZBZzZjA ob7FMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxODcwMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEASgbRAMEACgbcAMEACgbfAMEACgb fjANBgkqhkiG9w0BAQsFAAOCAQEAL2pl6Z6SsLUY6XmITzE4WVOdmgprfEKrobJm QQhNsNehzcWsDG8MTcPnkkvuaV9QwxvRBwhhXKgx3QzNRrmIKrzAVVyRqtAYbugV OTi5AwjivdwH6/ZBA1Ynv4B+Vyx6YXF8ho0SwdDTnzLDDvVe1G9fPNUCzebsR4IQ VVlfrI9HdlZIW/+z57qeSyK9g+RTKY+HJoQuUUjBibK3JlL+fpcIa8aVkzvdShFZ fSrcQJbIaLEXPqXwBgCa/HG3/SckslrOfJTmw5LoiCjr3+3KBMoGTJVWE4bm4HAV 95KTqXzDh9wxgkQ8hvSDjG2mYFy1hT6To8IE1gsmU4tYf/pfaA== -----END CERTIFICATE-----Generated at Mon Sep 21 01:01:01 2026 by rpki-client