$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399452.roa File: AS399452.roa (raw, json) Hash identifier: l4wDCCUGrTfwtpEhXbw9e0D9SR1sGDSmYGUWxDc5eXE= Subject key identifier: 30:AF:34:22:1D:F1:F3:6C:F5:C4:A8:22:4C:2B:C0:3A:C3:00:80:65 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 311A7EA8D9209DC95430BEC560DD17578D5DC7D0 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399452.roa Signing time: Wed 16 Sep 2026 13:26:47 +0000 ROA not before: Wed 16 Sep 2026 13:21:47 +0000 ROA not after: Wed 15 Sep 2027 13:26:47 +0000 asID: 399452 IP address blocks: 40.223.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:1a:7e:a8:d9:20:9d:c9:54:30:be:c5:60:dd:17:57:8d:5d:c7:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 16 13:21:47 2026 GMT Not After : Sep 15 13:26:47 2027 GMT Subject: CN=30AF34221DF1F36CF5C4A8224C2BC03AC3008065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dc:46:89:b6:de:18:13:98:39:44:37:4e:69: dd:55:3e:77:a9:7c:a5:92:68:35:12:4b:2f:12:b6: bf:3f:b0:92:8b:ae:68:e2:75:77:02:3a:97:78:a8: d9:6a:b0:e9:56:99:6d:94:60:ee:b6:19:32:16:80: 93:5f:67:79:89:4a:e1:54:c3:b3:96:06:fb:1b:97: 9b:12:7d:cc:78:8d:0d:f5:30:88:b0:c2:9f:e1:17: 99:2e:8c:46:71:9e:f1:34:69:b0:16:1d:12:00:90: 19:f0:6d:91:d7:34:b6:57:d1:30:ab:67:2a:c8:fa: 7e:d5:68:0b:85:c9:06:63:60:d7:7d:d6:c1:bc:21: c4:03:f5:5d:97:df:bb:fd:3d:43:a5:2a:f9:57:c2: 50:de:db:f7:b4:7e:9f:42:71:8d:d8:3a:c1:70:3e: cb:cb:50:6f:e0:64:a1:2f:41:ce:37:82:2c:2f:ff: e5:6e:e7:02:c9:db:a3:17:9c:bf:c1:4f:a2:df:52: 55:b8:2e:ac:5d:bf:fd:b3:f2:3e:33:15:76:34:65: 57:46:39:a5:c0:ef:10:28:ef:ec:2f:74:8f:fe:e0: ed:77:3b:63:34:73:8d:ec:ca:e0:d0:90:1c:78:bb: 53:35:9f:62:1b:fe:0c:6b:23:f4:70:42:7f:01:fa: 9a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:AF:34:22:1D:F1:F3:6C:F5:C4:A8:22:4C:2B:C0:3A:C3:00:80:65 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS399452.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.241.0/24 Signature Algorithm: sha256WithRSAEncryption b0:56:80:45:6f:15:c8:2a:58:ac:49:d2:07:57:54:0e:90:b8: 56:6b:d9:a6:29:f7:fa:81:23:47:1d:80:61:34:74:50:64:99: 0e:c2:f3:6e:ee:a0:f8:06:27:71:c0:c8:e2:6c:0e:6d:43:9c: 50:4c:7a:f4:cf:b5:0a:ea:9f:a0:d2:c1:86:1c:eb:f0:5e:8e: 7d:7b:ad:14:03:9c:3a:f0:a8:0a:12:ba:ab:28:35:45:d0:d1: 7b:ff:65:4a:23:2e:26:86:4a:7c:51:57:ec:3e:9a:4e:c2:3c: dd:09:8f:3f:1e:ee:31:3b:b9:06:0c:a1:c2:13:a6:fe:29:a4: fc:db:a1:f7:e9:29:53:1a:e7:e9:d6:5d:c9:54:25:a0:2f:1a: 29:40:dc:14:46:43:51:60:fb:c4:38:4b:be:b5:fa:8b:c5:f1: e3:47:fb:83:e5:39:96:47:f0:39:f0:c0:a4:62:6c:30:17:e5: 29:8d:8b:87:5c:6f:71:9e:6b:05:71:b1:e6:f4:c8:ee:82:44: af:37:3b:24:4b:76:2e:8b:c6:52:40:8c:5a:60:e8:c5:c7:a5: f0:6b:39:58:36:a7:dc:d2:c3:a9:5c:e4:8e:3a:8c:b6:37:d5: 93:c9:a1:ac:08:ec:0f:5a:9e:b8:87:ae:b3:bd:df:fc:3b:59: e6:5a:f0:1e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUMRp+qNkgnclUML7FYN0XV41dx9AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTE2MTMyMTQ3WhcNMjcwOTE1MTMyNjQ3 WjAzMTEwLwYDVQQDEygzMEFGMzQyMjFERjFGMzZDRjVDNEE4MjI0QzJCQzAzQUMz MDA4MDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtxGibbeGBOY OUQ3TmndVT53qXylkmg1EksvEra/P7CSi65o4nV3AjqXeKjZarDpVpltlGDuthky FoCTX2d5iUrhVMOzlgb7G5ebEn3MeI0N9TCIsMKf4ReZLoxGcZ7xNGmwFh0SAJAZ 8G2R1zS2V9Ewq2cqyPp+1WgLhckGY2DXfdbBvCHEA/Vdl9+7/T1DpSr5V8JQ3tv3 tH6fQnGN2DrBcD7Ly1Bv4GShL0HON4IsL//lbucCydujF5y/wU+i31JVuC6sXb/9 s/I+MxV2NGVXRjmlwO8QKO/sL3SP/uDtdztjNHON7Mrg0JAceLtTNZ9iG/4MayP0 cEJ/Afqa+wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDCvNCId8fNs9cSoIkwrwDrD AIBlMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzM5OTQ1Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACjf8TANBgkqhkiG9w0BAQsFAAOC AQEAsFaARW8VyCpYrEnSB1dUDpC4VmvZpin3+oEjRx2AYTR0UGSZDsLzbu6g+AYn ccDI4mwObUOcUEx69M+1CuqfoNLBhhzr8F6OfXutFAOcOvCoChK6qyg1RdDRe/9l SiMuJoZKfFFX7D6aTsI83QmPPx7uMTu5BgyhwhOm/imk/Nuh9+kpUxrn6dZdyVQl oC8aKUDcFEZDUWD7xDhLvrX6i8Xx40f7g+U5lkfwOfDApGJsMBflKY2Lh1xvcZ5r BXGx5vTI7oJErzc7JEt2LovGUkCMWmDoxcel8Gs5WDan3NLDqVzkjjqMtjfVk8mh rAjsD1qeuIeus73f/DtZ5lrwHg== -----END CERTIFICATE-----Generated at Mon Sep 21 03:44:36 2026 by rpki-client