$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: 48jxdgsYLub0FeJ9sctI/8qOu0X+1RCBvnkLRQcjsAY= Subject key identifier: B0:96:FF:3D:2A:D2:E4:1A:43:90:F6:8F:78:3B:B4:93:32:6E:0F:98 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 30A1A944CD428D2F0511255F763E912CF82124D5 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa Signing time: Sun 30 Aug 2026 00:03:44 +0000 ROA not before: Sat 29 Aug 2026 23:58:44 +0000 ROA not after: Sun 29 Aug 2027 00:03:44 +0000 asID: 25198 IP address blocks: 64.50.178.0/24 maxlen: 24 64.188.14.0/24 maxlen: 24 107.172.152.0/24 maxlen: 24 107.173.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 12:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a1:a9:44:cd:42:8d:2f:05:11:25:5f:76:3e:91:2c:f8:21:24:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 29 23:58:44 2026 GMT Not After : Aug 29 00:03:44 2027 GMT Subject: CN=B096FF3D2AD2E41A4390F68F783BB493326E0F98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:1a:3a:4d:bd:d2:ee:ac:c0:40:ca:c6:e1: 39:d6:f5:5c:c8:8e:05:9a:a2:10:6d:b4:fc:5f:3e: 49:5f:05:a7:2f:9d:73:37:56:b8:db:2a:b7:6f:29: c6:b6:9a:00:8b:cd:9c:46:5c:f1:be:e0:5d:95:66: 3d:d3:51:c6:0f:81:48:e4:15:07:7c:e0:f6:84:31: 43:fb:c5:9e:12:67:70:58:11:5e:f7:37:39:f5:ea: ef:52:51:63:78:f3:aa:04:5a:43:a3:a8:1e:e8:eb: e3:ff:2c:6e:1a:ef:8e:5f:ce:a2:82:f5:9e:76:81: e2:20:ca:dc:da:af:19:50:22:ab:ff:f7:03:24:3d: 89:79:bd:36:e5:e9:32:d0:1e:32:16:4c:1b:96:bc: 92:8b:4e:cd:6a:76:25:d5:b2:b0:88:ab:dd:c8:af: a6:e0:8f:ad:1c:c6:89:7e:3f:59:3b:39:91:1d:b9: 3c:f9:2b:1d:0b:1b:eb:3f:60:d7:71:0d:67:b4:9e: dc:30:39:b9:db:55:04:1d:bb:9a:d3:28:ea:71:b7: e5:a2:89:19:5e:7a:64:9a:c1:47:1c:d1:7b:64:2b: ff:52:62:05:b4:50:75:3f:f0:05:22:25:74:45:b5: ea:fc:f4:5b:38:f4:bd:93:42:8a:a5:fb:c3:c9:58: f7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:96:FF:3D:2A:D2:E4:1A:43:90:F6:8F:78:3B:B4:93:32:6E:0F:98 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.178.0/24 64.188.14.0/24 107.172.152.0/24 107.173.205.0/24 Signature Algorithm: sha256WithRSAEncryption b1:c1:d6:3c:b4:0d:ee:41:49:75:48:d3:7a:0f:7f:17:21:3f: 03:fd:3f:2f:12:d5:79:42:5e:ba:ba:10:91:d0:49:5c:1f:c2: 79:9c:ff:32:f9:ad:4c:bb:83:46:1d:81:b9:da:26:c8:63:66: 83:db:f9:06:e4:eb:d0:cb:fe:81:e1:b6:3c:58:13:f8:fd:1f: 07:6e:0d:14:40:d6:b0:3f:70:3b:af:72:e4:22:3f:a8:66:92: 94:55:ab:b3:f4:b7:43:72:47:86:68:61:5e:e0:db:62:15:10: be:9e:db:f6:46:bd:3f:8f:5e:d5:11:81:48:41:e6:3e:b7:cd: be:29:16:bd:dd:11:ea:ac:cd:c5:5b:cf:ad:b7:4d:d4:a4:8f: e7:f4:6f:0e:01:2b:0b:9d:10:78:dd:e2:8f:51:17:89:3e:43: d4:4a:8a:c0:bc:f7:7d:a7:5a:91:e8:b8:68:9c:a6:11:44:49: f1:7b:a2:b2:e2:9e:3b:94:3f:cc:32:4d:88:ff:2f:41:65:bf: 39:75:33:cf:71:4b:14:3b:54:63:91:b1:5a:8b:ca:d7:87:b9: 2d:20:cc:98:23:64:f1:97:c9:86:ce:37:50:23:d6:a2:db:a2: b5:03:0a:33:dd:25:35:03:16:03:fe:cb:25:ca:3f:f6:c1:79: b8:51:b1:d5 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUMKGpRM1CjS8FESVfdj6RLPghJNUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwODI5MjM1ODQ0WhcNMjcwODI5MDAwMzQ0 WjAzMTEwLwYDVQQDEyhCMDk2RkYzRDJBRDJFNDFBNDM5MEY2OEY3ODNCQjQ5MzMy NkUwRjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQYaOk290u6s wEDKxuE51vVcyI4FmqIQbbT8Xz5JXwWnL51zN1a42yq3bynGtpoAi82cRlzxvuBd lWY901HGD4FI5BUHfOD2hDFD+8WeEmdwWBFe9zc59ervUlFjePOqBFpDo6ge6Ovj /yxuGu+OX86igvWedoHiIMrc2q8ZUCKr//cDJD2Jeb025eky0B4yFkwblrySi07N anYl1bKwiKvdyK+m4I+tHMaJfj9ZOzmRHbk8+SsdCxvrP2DXcQ1ntJ7cMDm521UE Hbua0yjqcbflookZXnpkmsFHHNF7ZCv/UmIFtFB1P/AFIiV0RbXq/PRbOPS9k0KK pfvDyVj3HwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFLCW/z0q0uQaQ5D2j3g7tJMy bg+YMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAQDKyAwQAQLwOAwQAa6yYAwQAa63N MA0GCSqGSIb3DQEBCwUAA4IBAQCxwdY8tA3uQUl1SNN6D38XIT8D/T8vEtV5Ql66 uhCR0ElcH8J5nP8y+a1Mu4NGHYG52ibIY2aD2/kG5OvQy/6B4bY8WBP4/R8Hbg0U QNawP3A7r3LkIj+oZpKUVauz9LdDckeGaGFe4NtiFRC+ntv2Rr0/j17VEYFIQeY+ t82+KRa93RHqrM3FW8+tt03UpI/n9G8OASsLnRB43eKPUReJPkPUSorAvPd9p1qR 6LhonKYRREnxe6Ky4p47lD/MMk2I/y9BZb85dTPPcUsUO1RjkbFai8rXh7ktIMyY I2Txl8mGzjdQI9ai26K1Awoz3SU1AxYD/sslyj/2wXm4UbHV -----END CERTIFICATE-----Generated at Sun Sep 20 16:15:48 2026 by rpki-client