$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa File: AS25198.roa (raw, json) Hash identifier: vaoaGaiQDkm4lgKw8IsS0b4ysvgZb+MeB/1ObGhk3gI= Subject key identifier: 4A:A2:EA:E0:81:72:BF:2D:F6:0C:42:9F:F1:CA:93:B8:EE:A4:AF:87 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 6BB45F2F61EE6F93F6963BCB1AE3BC8B75B36967 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa Signing time: Thu 24 Jul 2025 11:56:23 +0000 ROA not before: Thu 24 Jul 2025 11:51:23 +0000 ROA not after: Thu 23 Jul 2026 11:56:23 +0000 asID: 25198 IP address blocks: 23.226.139.0/24 maxlen: 24 23.226.142.0/24 maxlen: 24 64.50.189.0/24 maxlen: 24 66.63.172.0/24 maxlen: 24 67.215.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b4:5f:2f:61:ee:6f:93:f6:96:3b:cb:1a:e3:bc:8b:75:b3:69:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 24 11:51:23 2025 GMT Not After : Jul 23 11:56:23 2026 GMT Subject: CN=4AA2EAE08172BF2DF60C429FF1CA93B8EEA4AF87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:38:6e:ae:06:34:d7:e4:0b:ab:cd:03:df:19: 20:cb:fb:aa:c1:dc:11:06:6f:37:7e:d7:75:3f:23: f3:7c:fd:a1:6b:81:e3:d0:b9:45:3f:13:f3:c6:89: 7b:d7:b4:cb:68:67:a6:8c:67:26:f8:7d:e5:ac:5e: 8a:5a:e0:ee:e2:dc:92:73:22:ef:41:2c:d2:86:14: 93:e3:f8:d3:48:3c:99:e7:f5:9b:0c:07:cf:15:9b: 3c:b2:cf:bc:5e:e5:d5:1c:92:7d:3c:85:cd:4e:ee: cc:a4:ee:51:ec:2b:c7:40:2b:b9:fc:fa:57:d2:eb: 01:a3:d2:10:68:d0:a8:a7:5d:f5:3e:8c:ee:2f:61: 05:2e:6e:8b:ab:4a:1f:8f:ed:41:31:60:03:8d:b2: 93:8f:0d:41:2c:c5:1e:96:cc:9b:b1:34:4a:bd:e7: 8d:db:9d:57:bc:c7:ee:bd:ee:db:9b:c4:14:85:fe: a0:fc:69:13:45:7f:d7:00:85:cd:56:d3:56:df:aa: c1:4b:39:06:d4:16:96:77:81:e3:eb:8d:16:fd:9c: d4:cc:35:ef:27:e7:a7:a1:93:5c:3c:8e:47:d2:15: 7f:0b:6e:4b:87:da:b4:58:68:43:af:22:41:a0:ac: c3:cb:c3:b8:9a:0d:35:83:04:af:ad:f8:bf:c4:af: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:EA:E0:81:72:BF:2D:F6:0C:42:9F:F1:CA:93:B8:EE:A4:AF:87 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25198.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.139.0/24 23.226.142.0/24 64.50.189.0/24 66.63.172.0/24 67.215.240.0/24 Signature Algorithm: sha256WithRSAEncryption 00:b4:e0:6a:90:28:eb:51:13:a5:9e:87:4b:22:0d:81:fb:28: 15:24:d2:47:c1:32:71:11:1e:6b:fa:ab:ba:98:39:cc:88:4c: a9:7e:38:98:ad:54:84:3d:10:70:fb:5e:04:a5:3e:eb:c7:ca: 02:72:b5:c1:30:b3:9b:54:28:7e:d0:39:0f:f1:fc:8a:97:5a: 01:ff:22:5c:7d:fe:ab:f2:d9:bc:7b:a4:da:03:b0:05:c9:57: 55:1b:e0:d4:58:c6:8b:50:e6:8a:b9:79:a6:65:96:1f:61:aa: da:d0:cc:90:33:fe:46:b6:d7:61:d3:19:51:07:7e:dd:55:9d: b7:c4:80:1b:14:78:68:21:21:1b:73:29:40:12:7a:e1:a5:15: f4:35:a8:74:fe:2b:d1:f6:28:44:74:92:6e:22:f6:14:d5:41: 30:8e:e8:bf:11:7c:d8:ac:52:48:e7:bc:7b:09:a0:79:a2:68: ef:9e:2e:26:18:75:78:05:50:fe:c6:c7:e4:6d:5f:08:1d:26: 54:a1:f4:24:f6:57:af:4c:db:8e:e1:74:d5:30:22:47:30:45: a0:e9:49:d1:ed:d0:a0:0c:1d:61:7c:7a:8d:51:7a:ee:d6:e9: 80:58:fc:97:0a:81:79:07:a1:e1:67:b9:a2:99:7b:dc:86:a7: e4:e6:ec:0f -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUa7RfL2Hub5P2ljvLGuO8i3WzaWcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzI0MTE1MTIzWhcNMjYwNzIzMTE1NjIz WjAzMTEwLwYDVQQDEyg0QUEyRUFFMDgxNzJCRjJERjYwQzQyOUZGMUNBOTNCOEVF QTRBRjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszhurgY01+QL q80D3xkgy/uqwdwRBm83ftd1PyPzfP2ha4Hj0LlFPxPzxol717TLaGemjGcm+H3l rF6KWuDu4tyScyLvQSzShhST4/jTSDyZ5/WbDAfPFZs8ss+8XuXVHJJ9PIXNTu7M pO5R7CvHQCu5/PpX0usBo9IQaNCop131PozuL2EFLm6Lq0ofj+1BMWADjbKTjw1B LMUelsybsTRKveeN251XvMfuve7bm8QUhf6g/GkTRX/XAIXNVtNW36rBSzkG1BaW d4Hj640W/ZzUzDXvJ+enoZNcPI5H0hV/C25Lh9q0WGhDryJBoKzDy8O4mg01gwSv rfi/xK8MAwIDAQABo4ICljCCApIwHQYDVR0OBBYEFEqi6uCBcr8t9gxCn/HKk7ju pK+HMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI1MTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAF+KLAwQAF+KOAwQAQDK9AwQAQj+s AwQAQ9fwMA0GCSqGSIb3DQEBCwUAA4IBAQAAtOBqkCjrUROlnodLIg2B+ygVJNJH wTJxER5r+qu6mDnMiEypfjiYrVSEPRBw+14EpT7rx8oCcrXBMLObVCh+0DkP8fyK l1oB/yJcff6r8tm8e6TaA7AFyVdVG+DUWMaLUOaKuXmmZZYfYara0MyQM/5Gttdh 0xlRB37dVZ23xIAbFHhoISEbcylAEnrhpRX0Nah0/ivR9ihEdJJuIvYU1UEwjui/ EXzYrFJI57x7CaB5omjvni4mGHV4BVD+xsfkbV8IHSZUofQk9levTNuO4XTVMCJH MEWg6UnR7dCgDB1hfHqNUXru1umAWPyXCoF5B6HhZ7mimXvchqfk5uwP -----END CERTIFICATE-----Generated at Mon Aug 4 21:55:01 2025 by rpki-client