$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: bbhHUY3oWEsmeLzWQ39SmtFGqfICof5/H07JfzOi9PU= Subject key identifier: 39:1F:55:58:F6:89:24:1D:E2:79:34:1C:FE:1D:91:C2:7F:0D:EC:D9 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6FDB2FCFCDA4E59695015B188C7A95209C2EE4C5 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa Signing time: Tue 04 Nov 2025 13:02:43 +0000 ROA not before: Tue 04 Nov 2025 12:57:43 +0000 ROA not after: Tue 03 Nov 2026 13:02:43 +0000 asID: 25198 IP address blocks: 40.27.169.0/24 maxlen: 24 40.27.208.0/24 maxlen: 24 40.183.143.0/24 maxlen: 24 40.183.159.0/24 maxlen: 24 40.223.80.0/24 maxlen: 24 40.223.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 13:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:db:2f:cf:cd:a4:e5:96:95:01:5b:18:8c:7a:95:20:9c:2e:e4:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 4 12:57:43 2025 GMT Not After : Nov 3 13:02:43 2026 GMT Subject: CN=391F5558F689241DE279341CFE1D91C27F0DECD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2c:80:92:99:5c:76:ce:13:62:91:44:e1:d0: 2b:69:0c:4a:72:5c:93:23:05:78:97:75:ed:74:12: 03:6a:4c:cb:13:86:ea:21:22:45:70:e0:c1:7f:21: 91:21:28:50:52:99:5c:cb:55:ba:24:ea:c9:ae:6e: 37:07:86:d3:00:a1:4b:56:c8:c7:23:b6:b2:c0:96: 9f:cb:6a:c7:0d:3b:52:c1:ce:f4:ae:3a:e0:3c:77: ae:30:4f:7e:df:da:74:53:c4:36:40:1d:f8:92:2f: f4:37:53:81:2b:43:b2:a5:14:3c:77:1d:54:65:cf: 3c:18:af:ea:c6:80:ae:cd:62:3d:51:38:d9:94:1c: bb:73:b6:2e:8e:10:9a:92:1f:32:84:3b:b6:34:54: 12:19:5d:e8:af:d5:5e:dd:66:1a:fe:df:51:7e:7e: a7:f2:91:c4:16:1a:f6:ed:d1:14:30:c6:6b:0b:c7: 95:63:0f:55:f3:38:ad:7d:55:3c:c4:db:e3:f7:a2: 96:fc:65:25:dc:4e:f5:d2:89:cc:1f:83:11:c4:e0: 2e:93:d1:21:69:dc:c5:5b:89:2f:2e:52:0b:6f:71: 54:ea:f5:4b:19:17:24:e4:ba:c6:9e:6b:71:27:ce: 9d:e4:4d:24:fb:c5:1b:07:9c:06:47:75:e8:a0:a6: cd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1F:55:58:F6:89:24:1D:E2:79:34:1C:FE:1D:91:C2:7F:0D:EC:D9 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.169.0/24 40.27.208.0/24 40.183.143.0/24 40.183.159.0/24 40.223.80.0/24 40.223.188.0/24 Signature Algorithm: sha256WithRSAEncryption a8:c7:ac:58:55:6f:94:be:72:fc:eb:cc:5c:83:95:41:83:dc: 03:cd:13:c9:09:a1:cc:3a:1f:be:34:ac:f3:6e:8c:79:78:3c: db:d1:5e:25:26:82:32:11:6b:d0:5e:e1:db:7c:f0:d2:4a:e7: fb:49:30:88:59:3e:34:61:26:b0:2f:b8:b7:62:43:2a:92:dd: d9:6e:a4:80:dc:73:56:fb:67:6c:b8:b2:b6:98:86:50:1f:52: e4:d9:fa:c7:03:a1:18:31:9d:ec:6e:92:68:34:1f:43:fe:32: 81:fd:64:70:89:d2:34:c8:31:6c:18:3e:92:8a:36:95:12:b8: 6f:cf:16:91:53:99:eb:d5:c2:86:ab:45:21:cd:b5:ae:17:0b: 13:12:4f:23:df:4c:be:70:86:1f:b7:92:7f:7f:95:b2:56:f9: 78:84:6e:65:ce:73:f0:85:80:ab:ac:60:9d:1c:cd:00:d4:ae: 60:16:ba:b1:16:a6:57:c2:49:8b:92:24:d7:c0:79:30:3a:ff: d1:7c:ef:16:57:34:8f:21:77:79:97:c3:55:4d:b6:df:45:61: 79:4c:9d:c5:61:d9:d3:be:14:15:e1:d8:bb:0c:55:be:4f:d3: 14:21:39:c3:6b:e5:ce:b7:b2:d4:a5:16:64:7c:ac:a6:ad:0d: a2:d8:27:b6 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUb9svz82k5ZaVAVsYjHqVIJwu5MUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMTA0MTI1NzQzWhcNMjYxMTAzMTMwMjQz WjAzMTEwLwYDVQQDEygzOTFGNTU1OEY2ODkyNDFERTI3OTM0MUNGRTFEOTFDMjdG MERFQ0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiyAkplcds4T YpFE4dAraQxKclyTIwV4l3XtdBIDakzLE4bqISJFcODBfyGRIShQUplcy1W6JOrJ rm43B4bTAKFLVsjHI7aywJafy2rHDTtSwc70rjrgPHeuME9+39p0U8Q2QB34ki/0 N1OBK0OypRQ8dx1UZc88GK/qxoCuzWI9UTjZlBy7c7YujhCakh8yhDu2NFQSGV3o r9Ve3WYa/t9Rfn6n8pHEFhr27dEUMMZrC8eVYw9V8zitfVU8xNvj96KW/GUl3E71 0onMH4MRxOAuk9EhadzFW4kvLlILb3FU6vVLGRck5LrGnmtxJ86d5E0k+8UbB5wG R3XooKbNkQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFDkfVVj2iSQd4nk0HP4dkcJ/ DezZMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAKBupAwQAKBvQAwQAKLePAwQAKLef AwQAKN9QAwQAKN+8MA0GCSqGSIb3DQEBCwUAA4IBAQCox6xYVW+UvnL868xcg5VB g9wDzRPJCaHMOh++NKzzbox5eDzb0V4lJoIyEWvQXuHbfPDSSuf7STCIWT40YSaw L7i3YkMqkt3ZbqSA3HNW+2dsuLK2mIZQH1Lk2frHA6EYMZ3sbpJoNB9D/jKB/WRw idI0yDFsGD6SijaVErhvzxaRU5nr1cKGq0UhzbWuFwsTEk8j30y+cIYft5J/f5Wy Vvl4hG5lznPwhYCrrGCdHM0A1K5gFrqxFqZXwkmLkiTXwHkwOv/RfO8WVzSPIXd5 l8NVTbbfRWF5TJ3FYdnTvhQV4di7DFW+T9MUITnDa+XOt7LUpRZkfKymrQ2i2Ce2 -----END CERTIFICATE-----Generated at Wed Nov 5 00:55:53 2025 by rpki-client