$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: XwPSDYlSysnrP49Dv6+8gpRXY8qmh8J8UKTlOVzjRAo= Subject key identifier: 72:04:F1:2E:75:1D:09:B1:19:C6:93:02:15:0F:94:1D:B1:AD:08:F9 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 17BB41A21DAE831935267B27140C0E74E856E82C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS397423.roa Signing time: Tue 01 Sep 2026 17:11:53 +0000 ROA not before: Tue 01 Sep 2026 17:06:53 +0000 ROA not after: Tue 31 Aug 2027 17:11:53 +0000 asID: 397423 IP address blocks: 40.27.22.0/24 maxlen: 24 40.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:bb:41:a2:1d:ae:83:19:35:26:7b:27:14:0c:0e:74:e8:56:e8:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 1 17:06:53 2026 GMT Not After : Aug 31 17:11:53 2027 GMT Subject: CN=7204F12E751D09B119C69302150F941DB1AD08F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6d:08:8a:36:47:22:14:fd:c5:a2:68:72:ee: 66:0a:a0:6f:8d:6d:1c:cb:93:7b:fb:8c:58:2a:ca: 4f:0e:f4:1f:df:14:94:12:f6:d4:f3:59:99:92:d1: 9e:23:84:4f:07:09:ad:ec:c3:aa:2f:76:51:67:98: 2a:24:2c:8d:62:17:20:d0:75:62:70:3b:50:df:1c: c2:95:b9:e2:dd:25:48:b6:15:2e:13:bf:c6:90:f6: 05:1c:a1:ed:c0:a7:7e:54:a5:07:52:bd:ec:d1:78: 23:3a:8b:99:d7:9e:44:e4:3e:d1:bc:d4:b2:32:78: 8a:32:1b:60:8c:b5:65:8f:b1:c8:3c:f8:cb:b7:e2: 1f:16:43:d9:aa:32:84:61:91:99:62:60:d2:cf:59: be:ca:4a:51:b7:3e:ed:56:57:46:f7:c4:6e:b2:69: f7:c6:60:a3:cc:fe:e1:41:e3:f8:17:f6:89:f2:7d: 2b:97:e3:93:e0:cd:e0:9c:34:ee:bb:5f:01:04:83: 9f:51:be:86:1b:51:ca:18:39:df:0e:99:f7:36:5a: a2:f5:ff:a1:48:5f:25:6e:47:05:21:cb:89:65:5b: 48:b7:56:e2:c3:fc:1b:46:a1:13:13:c3:ce:59:91: 00:d2:1d:e0:04:c0:91:ff:90:61:f4:32:c1:83:5f: 43:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:04:F1:2E:75:1D:09:B1:19:C6:93:02:15:0F:94:1D:B1:AD:08:F9 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.22.0/24 40.27.34.0/24 Signature Algorithm: sha256WithRSAEncryption a2:11:39:e3:61:61:94:bb:e4:7f:5c:66:ea:cf:56:90:0b:df: a2:d2:72:55:b1:2e:ac:39:d3:bb:97:34:90:10:88:6e:c8:bd: 2f:90:ef:03:1d:97:c4:c6:e4:48:13:3f:5d:a9:0d:6f:85:e4: e2:d2:d1:3d:30:3a:7f:5e:a9:cd:e5:73:8f:3f:ef:21:82:d6: 5d:53:0a:e1:1f:67:e4:0b:ac:60:f1:08:ce:80:c9:00:f2:f5: 5b:76:1e:0c:79:19:aa:1c:36:34:3c:76:5d:4a:fe:2d:1d:b8: 0f:0d:75:33:5f:88:e3:fa:8d:98:bd:04:20:65:fe:8b:bc:ce: e4:07:3a:d6:d6:fe:bb:02:a3:fc:25:8b:f6:3b:88:ec:50:9b: e8:e3:91:35:88:5d:ac:ba:04:51:f1:2a:bb:90:f9:7b:d1:96: 7a:18:e8:ed:44:99:fa:c4:c9:45:7d:f2:7e:18:77:56:c3:8a: 89:fb:b4:dd:3f:c4:55:b8:d6:f0:0b:34:f6:6b:93:69:41:d4: 4c:5d:db:bf:3b:94:ac:2c:d8:22:d6:f5:2e:41:a8:6a:8c:d7: 7e:05:94:45:ec:8d:fd:0c:33:1f:f8:20:e8:b2:4e:a1:22:84: de:44:07:f5:4a:31:e8:d8:28:8f:d4:6a:8c:79:88:54:eb:bc: d0:f1:a6:0c -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUF7tBoh2ugxk1JnsnFAwOdOhW6CwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTAxMTcwNjUzWhcNMjcwODMxMTcxMTUz WjAzMTEwLwYDVQQDEyg3MjA0RjEyRTc1MUQwOUIxMTlDNjkzMDIxNTBGOTQxREIx QUQwOEY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwG0IijZHIhT9 xaJocu5mCqBvjW0cy5N7+4xYKspPDvQf3xSUEvbU81mZktGeI4RPBwmt7MOqL3ZR Z5gqJCyNYhcg0HVicDtQ3xzClbni3SVIthUuE7/GkPYFHKHtwKd+VKUHUr3s0Xgj OouZ155E5D7RvNSyMniKMhtgjLVlj7HIPPjLt+IfFkPZqjKEYZGZYmDSz1m+ykpR tz7tVldG98Rusmn3xmCjzP7hQeP4F/aJ8n0rl+OT4M3gnDTuu18BBIOfUb6GG1HK GDnfDpn3Nlqi9f+hSF8lbkcFIcuJZVtIt1biw/wbRqETE8POWZEA0h3gBMCR/5Bh 9DLBg19DrQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFHIE8S51HQmxGcaTAhUPlB2x rQj5MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACgbFgMEACgbIjANBgkqhkiG9w0B AQsFAAOCAQEAohE542FhlLvkf1xm6s9WkAvfotJyVbEurDnTu5c0kBCIbsi9L5Dv Ax2XxMbkSBM/XakNb4Xk4tLRPTA6f16pzeVzjz/vIYLWXVMK4R9n5AusYPEIzoDJ APL1W3YeDHkZqhw2NDx2XUr+LR24Dw11M1+I4/qNmL0EIGX+i7zO5Ac61tb+uwKj /CWL9juI7FCb6OORNYhdrLoEUfEqu5D5e9GWehjo7USZ+sTJRX3yfhh3VsOKifu0 3T/EVbjW8As09muTaUHUTF3bvzuUrCzYItb1LkGoaozXfgWUReyN/QwzH/gg6LJO oSKE3kQH9Uox6Ngoj9RqjHmIVOu80PGmDA== -----END CERTIFICATE-----Generated at Mon Sep 21 03:52:23 2026 by rpki-client