$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402165.roa File: AS402165.roa (raw, json) Hash identifier: f0aDqjGO/RQQ27sXv06XR4NpFMUfxgXhJ8bqnW/LoK4= Subject key identifier: 6A:11:7E:EC:11:2C:F2:22:A6:69:28:43:F1:49:74:E6:2E:46:E9:98 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 36BA95940D03DBE9A899A63C606874A3B3EC32A9 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402165.roa Signing time: Mon 06 Apr 2026 18:36:41 +0000 ROA not before: Mon 06 Apr 2026 18:31:41 +0000 ROA not after: Mon 05 Apr 2027 18:36:41 +0000 asID: 402165 IP address blocks: 40.27.3.0/24 maxlen: 24 40.27.4.0/24 maxlen: 24 40.27.6.0/24 maxlen: 24 40.27.7.0/24 maxlen: 24 40.27.30.0/24 maxlen: 24 40.27.31.0/24 maxlen: 24 40.27.32.0/24 maxlen: 24 40.27.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 10:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:ba:95:94:0d:03:db:e9:a8:99:a6:3c:60:68:74:a3:b3:ec:32:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Apr 6 18:31:41 2026 GMT Not After : Apr 5 18:36:41 2027 GMT Subject: CN=6A117EEC112CF222A6692843F14974E62E46E998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:7f:e0:60:ad:ab:03:2c:0e:44:54:13:b2: ae:f9:63:b8:74:d0:b0:d6:06:35:04:fd:ac:4e:50: ad:69:ce:d0:fb:78:32:f5:2c:c5:c8:ee:23:02:3b: 52:8e:af:95:1f:ed:f6:54:9f:76:c1:cd:fa:cf:2e: df:21:4e:52:19:dc:d5:1e:34:d6:0f:76:72:4c:4a: 6b:47:8b:8f:a7:42:64:93:34:ff:17:04:e7:08:2c: 12:d7:d9:01:e2:cf:14:50:ff:4d:f3:c4:8e:41:29: b5:c5:aa:a0:21:82:76:65:a6:d2:d5:ea:6b:98:3d: 32:28:80:7a:d6:c7:41:9f:fd:28:14:bc:c2:00:f2: 7a:a4:00:d2:23:7b:88:36:fb:53:78:85:3d:1b:ff: e7:77:37:05:db:09:5d:35:7a:4c:fe:5f:5b:45:06: 7c:3f:79:6c:ec:c5:a1:9b:3d:e7:ec:6c:a5:b7:93: 9d:49:e9:ec:8f:9c:60:d5:75:82:87:ae:8e:e7:80: 7c:e9:d3:a8:ca:ee:8f:b4:8e:4d:bf:12:20:3a:a4: 17:5b:a7:f2:e1:ba:f7:98:ea:1d:0b:15:57:34:78: 05:6e:3a:35:34:58:e4:b0:43:ff:a6:5b:a4:56:74: a8:77:89:51:2b:63:4e:52:b4:01:b4:a0:4b:92:9c: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:11:7E:EC:11:2C:F2:22:A6:69:28:43:F1:49:74:E6:2E:46:E9:98 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS402165.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.3.0-40.27.4.255 40.27.6.0/23 40.27.30.0-40.27.33.255 Signature Algorithm: sha256WithRSAEncryption 74:c6:52:d0:2f:a8:f8:a2:0f:87:74:4e:6d:20:2d:02:e1:88: c0:60:71:30:69:09:41:6f:c5:18:f7:a4:d5:4e:45:90:2a:4f: fc:19:18:f8:5b:d5:2f:77:63:95:90:aa:3d:83:ec:cf:41:50: e3:88:59:9e:24:58:99:e8:13:17:e4:ff:32:99:80:bc:a2:dd: 48:da:ed:5c:64:b6:26:7e:7a:64:80:20:07:d8:01:46:61:ab: 1b:aa:99:4e:8b:30:68:b0:b4:2f:d0:f8:fe:67:f7:37:d4:71: a5:14:c9:ac:ae:51:d7:99:2a:54:db:b2:97:19:37:4c:57:9a: 22:fa:58:09:3c:0d:e9:ee:c7:45:ef:22:4f:f1:14:72:b1:25: 67:46:14:14:3c:ed:05:79:da:28:94:3a:59:13:1b:e2:d9:70: 2e:c2:35:c7:5a:e9:b0:4f:c3:1e:7c:41:e4:10:de:59:27:f5: d7:f2:5a:ed:20:42:d0:d0:c4:96:06:7c:e3:cf:ed:e4:67:73: ba:ac:a6:56:83:b1:9d:b5:c0:ce:1d:aa:ea:dd:0e:cb:57:5d: cb:07:99:19:61:78:f2:b4:e8:b9:2a:67:19:ef:e1:83:d9:31: f1:d1:03:76:26:c9:ea:91:49:86:1e:a9:bf:9c:9f:c7:bb:5f: f3:c6:f6:84 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUNrqVlA0D2+momaY8YGh0o7PsMqkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwNDA2MTgzMTQxWhcNMjcwNDA1MTgzNjQx WjAzMTEwLwYDVQQDEyg2QTExN0VFQzExMkNGMjIyQTY2OTI4NDNGMTQ5NzRFNjJF NDZFOTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX5/4GCtqwMs DkRUE7Ku+WO4dNCw1gY1BP2sTlCtac7Q+3gy9SzFyO4jAjtSjq+VH+32VJ92wc36 zy7fIU5SGdzVHjTWD3ZyTEprR4uPp0JkkzT/FwTnCCwS19kB4s8UUP9N88SOQSm1 xaqgIYJ2ZabS1eprmD0yKIB61sdBn/0oFLzCAPJ6pADSI3uINvtTeIU9G//ndzcF 2wldNXpM/l9bRQZ8P3ls7MWhmz3n7Gylt5OdSensj5xg1XWCh66O54B86dOoyu6P tI5NvxIgOqQXW6fy4br3mOodCxVXNHgFbjo1NFjksEP/plukVnSod4lRK2NOUrQB tKBLkpxGAQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGoRfuwRLPIipmkoQ/FJdOYu RumYMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzQwMjE2NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA7 BggrBgEFBQcBBwEB/wQsMCowKAQCAAEwIjAMAwQAKBsDAwQAKBsEAwQBKBsGMAwD BAEoGx4DBAEoGyAwDQYJKoZIhvcNAQELBQADggEBAHTGUtAvqPiiD4d0Tm0gLQLh iMBgcTBpCUFvxRj3pNVORZAqT/wZGPhb1S93Y5WQqj2D7M9BUOOIWZ4kWJnoExfk /zKZgLyi3Uja7VxktiZ+emSAIAfYAUZhqxuqmU6LMGiwtC/Q+P5n9zfUcaUUyayu UdeZKlTbspcZN0xXmiL6WAk8Denux0XvIk/xFHKxJWdGFBQ87QV52iiUOlkTG+LZ cC7CNcda6bBPwx58QeQQ3lkn9dfyWu0gQtDQxJYGfOPP7eRnc7qsplaDsZ21wM4d qurdDstXXcsHmRlhePK06LkqZxnv4YPZMfHRA3YmyeqRSYYeqb+cn8e7X/PG9oQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:02:53 2026 by rpki-client