$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218780.roa File: AS218780.roa (raw, json) Hash identifier: BFQiyGgfzuho0QU+cvJeWFTD2tgeN4+ZyPTx7oQDBT0= Subject key identifier: BF:02:15:D4:90:51:10:FA:5D:07:53:08:4A:C3:31:0A:A5:5E:93:A9 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 2E9C3F4B1906BC999DFFFF9B46E3C90FF0FDAF12 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218780.roa Signing time: Tue 03 Nov 2026 06:06:33 +0000 ROA not before: Tue 03 Nov 2026 06:01:33 +0000 ROA not after: Tue 02 Nov 2027 06:06:33 +0000 asID: 218780 IP address blocks: 40.27.168.0/24 maxlen: 24 40.27.170.0/24 maxlen: 24 40.27.171.0/24 maxlen: 24 40.27.172.0/24 maxlen: 24 40.27.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 13:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9c:3f:4b:19:06:bc:99:9d:ff:ff:9b:46:e3:c9:0f:f0:fd:af:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 3 06:01:33 2026 GMT Not After : Nov 2 06:06:33 2027 GMT Subject: CN=BF0215D4905110FA5D0753084AC3310AA55E93A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9d:f0:d4:28:ad:22:be:69:15:cd:9b:03:c0: 36:4a:05:62:28:5f:12:6e:45:91:be:41:db:50:a9: 3c:81:a4:ce:34:83:68:b4:c8:fb:41:dc:e7:0c:56: fd:15:68:df:7d:b9:e4:94:96:e6:a8:72:c8:99:9a: ce:aa:c4:66:a6:28:04:72:d2:17:71:ff:3b:33:c8: 01:22:28:9c:65:0c:2f:8f:f8:a5:d5:24:88:1e:7d: 07:6f:14:f8:e4:48:ee:0e:3a:10:0e:d1:e9:ce:47: 86:0a:f6:29:4d:42:fc:c8:47:8f:cf:2f:e9:fe:4a: 9b:89:54:b3:35:d1:45:ad:a0:5e:4f:8b:4a:73:96: d3:48:11:5a:16:bd:bb:a8:63:bd:21:09:3e:a5:d0: 60:5e:0d:7b:3d:95:ae:5a:e5:08:e6:6d:f9:6f:b4: ae:ae:12:38:fc:50:cd:41:a3:54:3a:d3:df:89:9d: 45:5b:38:1c:03:fb:e1:f6:97:58:7c:bc:d0:84:d8: 9a:fe:ba:e8:f2:8c:66:49:7a:9a:ea:ea:2c:82:10: 37:85:04:4a:28:55:2d:bd:94:3d:a1:21:23:a0:84: 34:5e:31:3c:52:ab:35:37:5d:66:eb:b0:79:9a:73: ee:c4:7b:23:41:2c:73:f7:6c:08:c2:88:e2:b0:75: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:02:15:D4:90:51:10:FA:5D:07:53:08:4A:C3:31:0A:A5:5E:93:A9 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218780.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.168.0/24 40.27.170.0-40.27.173.255 Signature Algorithm: sha256WithRSAEncryption 77:5a:cd:b5:c5:98:6a:9e:e8:e1:6f:e6:7b:88:b3:bf:aa:bd: c5:69:a1:7a:ab:a3:43:39:c9:00:76:61:cc:da:41:41:56:26: ad:1f:07:8e:2e:9a:92:c1:19:f7:58:d3:14:a5:ee:b6:ce:73: 77:43:06:63:09:e9:fb:10:15:a9:ff:cc:33:45:ee:53:14:98: 75:b3:d6:af:b8:e1:bd:63:e3:90:bd:d3:c5:a8:ed:73:91:5e: bb:96:b0:e7:dd:1e:6f:f6:ed:2e:06:0f:7e:ec:2a:ab:dd:38: 65:8d:8a:16:87:1e:05:5c:9f:97:1a:44:da:66:78:1e:c7:b7: a4:57:54:09:da:d5:17:5c:cb:6c:52:33:f4:8f:c0:6a:65:d5: 99:71:3a:68:0f:b9:93:c7:82:a0:56:50:9e:5f:b4:44:b4:9c: 5f:f5:87:f2:c7:fd:fd:82:d5:e7:f8:44:c0:97:83:dd:e7:93: 8a:06:6c:79:4e:14:da:e2:f0:7b:8c:4e:37:14:33:8a:2e:dc: 11:3c:19:d5:0e:20:c5:d1:20:82:9b:b8:da:85:7d:e8:cd:f8: 5f:ff:a2:ad:df:e8:95:5c:49:c7:51:df:2e:53:3d:9f:55:9f: 60:98:b1:04:c3:d0:ec:6f:47:d0:98:a2:34:15:c4:9d:3e:76: 79:bd:52:91 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIULpw/SxkGvJmd//+bRuPJD/D9rxIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYxMTAzMDYwMTMzWhcNMjcxMTAyMDYwNjMz WjAzMTEwLwYDVQQDEyhCRjAyMTVENDkwNTExMEZBNUQwNzUzMDg0QUMzMzEwQUE1 NUU5M0E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu53w1CitIr5p Fc2bA8A2SgViKF8SbkWRvkHbUKk8gaTONINotMj7QdznDFb9FWjffbnklJbmqHLI mZrOqsRmpigEctIXcf87M8gBIiicZQwvj/il1SSIHn0HbxT45EjuDjoQDtHpzkeG CvYpTUL8yEePzy/p/kqbiVSzNdFFraBeT4tKc5bTSBFaFr27qGO9IQk+pdBgXg17 PZWuWuUI5m35b7SurhI4/FDNQaNUOtPfiZ1FWzgcA/vh9pdYfLzQhNia/rro8oxm SXqa6uosghA3hQRKKFUtvZQ9oSEjoIQ0XjE8Uqs1N11m67B5mnPuxHsjQSxz92wI wojisHVaWwIDAQABo4ICjTCCAokwHQYDVR0OBBYEFL8CFdSQURD6XQdTCErDMQql XpOpMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxODc4MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEACgbqDAMAwQBKBuqAwQBKBusMA0G CSqGSIb3DQEBCwUAA4IBAQB3Ws21xZhqnujhb+Z7iLO/qr3FaaF6q6NDOckAdmHM 2kFBViatHweOLpqSwRn3WNMUpe62znN3QwZjCen7EBWp/8wzRe5TFJh1s9avuOG9 Y+OQvdPFqO1zkV67lrDn3R5v9u0uBg9+7Cqr3ThljYoWhx4FXJ+XGkTaZngex7ek V1QJ2tUXXMtsUjP0j8BqZdWZcTpoD7mTx4KgVlCeX7REtJxf9Yfyx/39gtXn+ETA l4Pd55OKBmx5ThTa4vB7jE43FDOKLtwRPBnVDiDF0SCCm7jahX3ozfhf/6Kt3+iV XEnHUd8uUz2fVZ9gmLEEw9Dsb0fQmKI0FcSdPnZ5vVKR -----END CERTIFICATE-----Generated at Thu Nov 5 18:23:05 2026 by rpki-client