$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa File: AS202015.roa (raw, json) Hash identifier: yAUxK1bY5XDy4tkxXZGPAcYN9SOumqZUwEGMRnQEukw= Subject key identifier: C8:49:89:53:F3:2B:45:DF:02:23:79:C4:E5:45:83:A2:87:6D:50:2D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2B0D994802068938300A4E4F24FA9F4CCD5BD13D Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa Signing time: Tue 04 Nov 2025 07:41:43 +0000 ROA not before: Tue 04 Nov 2025 07:36:43 +0000 ROA not after: Tue 03 Nov 2026 07:41:43 +0000 asID: 202015 IP address blocks: 98.142.240.0/24 maxlen: 24 98.142.251.0/24 maxlen: 24 206.53.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:0d:99:48:02:06:89:38:30:0a:4e:4f:24:fa:9f:4c:cd:5b:d1:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 4 07:36:43 2025 GMT Not After : Nov 3 07:41:43 2026 GMT Subject: CN=C8498953F32B45DF022379C4E54583A2876D502D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:a4:41:47:57:c0:45:e9:9e:bb:6a:7d:56: 09:97:4f:b7:fe:e5:ad:06:c7:57:49:25:1e:1b:d1: a7:03:13:3a:c7:57:32:0f:26:a3:da:3b:95:34:db: c4:2c:d5:03:14:ae:69:c8:88:1b:a5:be:08:10:f9: ad:b1:60:ea:87:d9:63:ba:9d:29:3a:85:0b:8a:6e: 76:2e:f5:f6:33:ff:ab:74:59:a6:bb:a4:d1:71:48: 1f:37:cc:bf:de:54:28:57:f2:6b:cc:ae:34:53:88: 2b:8b:fd:f4:8a:90:1e:4e:12:82:24:3d:55:8f:8f: 07:64:19:7e:52:56:ac:8d:95:47:4e:d2:aa:ee:54: 89:cd:2d:1e:b4:df:c4:fb:7e:40:4a:c3:a6:3b:90: e4:74:12:5a:88:cf:1b:a2:2b:d3:6e:30:8d:20:90: c7:cf:55:0b:9f:6c:ed:3d:80:8d:4d:98:05:03:50: 04:98:45:8d:4c:aa:73:2f:2d:47:a2:75:1c:e1:f0: 02:ba:f1:0e:37:41:a1:b4:83:85:65:5b:b6:b6:0f: 36:72:5f:41:f1:05:8a:70:19:97:e8:61:13:71:48: d7:f1:fd:59:9c:27:d0:cf:90:b6:cb:73:b9:b4:e1: 99:9f:dc:dc:fd:49:36:6f:4c:f1:44:56:53:c4:c9: e6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:49:89:53:F3:2B:45:DF:02:23:79:C4:E5:45:83:A2:87:6D:50:2D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS202015.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.240.0/24 98.142.251.0/24 206.53.48.0/24 Signature Algorithm: sha256WithRSAEncryption 83:8c:76:ac:16:cd:97:ec:aa:cb:2c:a3:d0:aa:1c:12:57:b2: b5:83:1b:85:a5:86:12:c1:c8:97:db:5e:3c:db:86:3d:11:a9: a6:eb:9e:d5:ce:21:3b:52:61:2e:3a:f5:76:c4:c4:56:71:5b: f3:3d:e0:b6:6f:43:78:65:e1:6c:18:c6:a4:d7:96:f0:8a:4b: 70:bb:80:98:84:49:13:d7:d2:33:74:dd:e6:62:67:c3:16:a1: a7:51:9f:f6:a9:be:a2:bf:e3:30:b8:17:2b:1f:ed:46:51:6e: 5a:93:87:6a:e6:93:23:e9:8d:7b:2a:c9:34:4d:6c:ec:a8:76: c2:49:e3:1a:b8:13:9e:13:d3:4e:e8:fd:1c:45:bb:fc:ab:2c: 87:12:5a:85:25:6a:35:2e:68:9c:4f:a9:bd:2c:ec:93:6a:74: 10:5c:c3:81:03:b6:09:45:1f:49:59:2a:3b:a5:3f:92:6f:a0: 47:1a:7d:71:03:15:19:8f:e0:0e:08:8c:8b:7b:5a:64:1b:9a: 82:8c:0b:04:c3:c7:6f:94:32:e1:54:6d:b7:a5:c6:4d:37:82: 1f:05:8f:dc:c1:08:cb:d3:cc:02:9f:59:f0:3c:ce:99:df:f4: 04:4b:9d:4f:ad:22:9a:e5:6d:c1:87:55:bf:36:10:68:c5:14: f8:fa:ff:f4 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUKw2ZSAIGiTgwCk5PJPqfTM1b0T0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTA0MDczNjQzWhcNMjYxMTAzMDc0MTQz WjAzMTEwLwYDVQQDEyhDODQ5ODk1M0YzMkI0NURGMDIyMzc5QzRFNTQ1ODNBMjg3 NkQ1MDJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSOkQUdXwEXp nrtqfVYJl0+3/uWtBsdXSSUeG9GnAxM6x1cyDyaj2juVNNvELNUDFK5pyIgbpb4I EPmtsWDqh9ljup0pOoULim52LvX2M/+rdFmmu6TRcUgfN8y/3lQoV/JrzK40U4gr i/30ipAeThKCJD1Vj48HZBl+UlasjZVHTtKq7lSJzS0etN/E+35ASsOmO5DkdBJa iM8boivTbjCNIJDHz1ULn2ztPYCNTZgFA1AEmEWNTKpzLy1HonUc4fACuvEON0Gh tIOFZVu2tg82cl9B8QWKcBmX6GETcUjX8f1ZnCfQz5C2y3O5tOGZn9zc/Uk2b0zx RFZTxMnmQQIDAQABo4ICizCCAocwHQYDVR0OBBYEFMhJiVPzK0XfAiN5xOVFg6KH bVAtMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMjAxNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGKO8AMEAGKO+wMEAM41MDANBgkq hkiG9w0BAQsFAAOCAQEAg4x2rBbNl+yqyyyj0KocEleytYMbhaWGEsHIl9tePNuG PRGppuue1c4hO1JhLjr1dsTEVnFb8z3gtm9DeGXhbBjGpNeW8IpLcLuAmIRJE9fS M3Td5mJnwxahp1Gf9qm+or/jMLgXKx/tRlFuWpOHauaTI+mNeyrJNE1s7Kh2wknj GrgTnhPTTuj9HEW7/KsshxJahSVqNS5onE+pvSzsk2p0EFzDgQO2CUUfSVkqO6U/ km+gRxp9cQMVGY/gDgiMi3taZBuagowLBMPHb5Qy4VRtt6XGTTeCHwWP3MEIy9PM Ap9Z8DzOmd/0BEudT60imuVtwYdVvzYQaMUU+Pr/9A== -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:13 2025 by rpki-client