$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209043.roa File: AS209043.roa (raw, json) Hash identifier: JTJJhuH8LboDmkRuNqSpemOKIoK1HDO7e8g1MAWryOw= Subject key identifier: C4:40:9C:C8:D9:40:64:0D:CF:86:C1:BA:9E:FC:A3:C8:3D:9E:4C:EC Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 4916FDD49D504D32873BA84280E23B4D7731A2BE Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209043.roa Signing time: Tue 27 Jan 2026 12:50:47 +0000 ROA not before: Tue 27 Jan 2026 12:45:47 +0000 ROA not after: Tue 26 Jan 2027 12:50:47 +0000 asID: 209043 IP address blocks: 157.254.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 02:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:16:fd:d4:9d:50:4d:32:87:3b:a8:42:80:e2:3b:4d:77:31:a2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 27 12:45:47 2026 GMT Not After : Jan 26 12:50:47 2027 GMT Subject: CN=C4409CC8D940640DCF86C1BA9EFCA3C83D9E4CEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3e:a7:7c:76:42:79:65:ba:af:9d:01:cc:88: 34:b6:22:d3:50:23:56:ed:81:cb:23:9c:f1:c2:a4: dc:25:8f:22:da:3a:80:7f:8d:b5:1e:d1:e0:f9:c1: c2:68:1b:4a:bd:1d:71:e8:57:d1:c2:b8:d7:bf:bc: 10:75:76:86:16:ee:29:b8:3c:b3:33:33:16:e8:9d: 41:c3:61:ee:8a:ca:eb:1b:66:1a:e8:6e:8b:61:15: f8:ef:18:6c:9c:15:7e:8e:d9:e8:60:13:4d:31:af: 01:71:fb:12:e9:d6:c9:24:7f:3d:99:5d:d7:9c:f2: cc:46:a5:db:ad:d4:41:da:8b:2c:86:94:31:11:b2: 6f:40:7a:41:7b:5e:b6:b5:b0:67:70:7e:40:c5:76: 3c:1c:fb:b3:ee:6e:df:1a:40:97:05:3d:46:02:b9: d1:f0:af:ec:eb:a0:35:59:3a:a8:cb:b9:ce:f7:b5: 2e:72:3b:36:b8:8a:df:3f:a7:37:e2:09:71:65:f5: 00:7d:0e:12:3f:5e:74:55:0f:89:41:a6:bc:6f:94: c2:f2:1b:bc:ee:1c:02:53:28:12:39:18:db:25:cc: 98:e2:4d:83:6c:33:05:de:cb:8d:2d:e7:ca:a2:00: 3e:9e:9a:74:43:f1:85:28:03:73:67:8c:9a:38:31: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:40:9C:C8:D9:40:64:0D:CF:86:C1:BA:9E:FC:A3:C8:3D:9E:4C:EC X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS209043.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.159.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:cc:7e:27:86:8e:58:01:c2:1b:6c:af:c3:b5:76:b8:58:7d: fc:5f:f7:ec:bd:b0:fb:b6:bd:5d:b0:6c:e7:4a:0f:d8:da:7e: fd:f4:66:4d:c9:e2:bf:f5:0f:54:a2:c4:07:8e:33:ce:89:ff: 20:78:c4:9a:ee:f9:58:70:4d:4d:61:e8:fa:f4:c5:d6:6a:5c: 18:7b:c4:0b:56:50:76:07:d2:cd:40:a2:89:40:c5:ee:51:17: ac:28:e7:95:79:34:bb:46:cd:65:2f:f3:71:75:6e:3d:f4:43: d1:55:6a:56:86:60:a4:01:61:23:63:28:57:25:a0:aa:e6:e1: e8:77:dd:2c:74:95:86:d7:2a:ae:5c:91:de:10:d7:13:98:e4: 15:c5:aa:04:ef:59:41:51:2d:21:1d:c8:b2:17:38:db:90:17: 7d:80:69:63:82:7f:ce:e7:38:e8:0a:ed:af:2a:ba:0a:26:d3: 48:85:7f:77:ca:ff:ac:af:44:76:f9:01:40:f1:e1:12:e5:60: b7:d7:ae:22:9f:8d:28:50:af:8d:2e:b0:71:d5:d8:ac:f5:81: d6:32:ef:05:7f:04:37:46:42:5d:5d:18:f7:22:5e:84:f7:5e: 5c:0d:56:56:33:be:d9:ad:12:33:96:e8:e6:2c:32:bc:6a:f8: e1:a1:19:9b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUSRb91J1QTTKHO6hCgOI7TXcxor4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwMTI3MTI0NTQ3WhcNMjcwMTI2MTI1MDQ3 WjAzMTEwLwYDVQQDEyhDNDQwOUNDOEQ5NDA2NDBEQ0Y4NkMxQkE5RUZDQTNDODNE OUU0Q0VDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqz6nfHZCeWW6 r50BzIg0tiLTUCNW7YHLI5zxwqTcJY8i2jqAf421HtHg+cHCaBtKvR1x6FfRwrjX v7wQdXaGFu4puDyzMzMW6J1Bw2HuisrrG2Ya6G6LYRX47xhsnBV+jtnoYBNNMa8B cfsS6dbJJH89mV3XnPLMRqXbrdRB2osshpQxEbJvQHpBe162tbBncH5AxXY8HPuz 7m7fGkCXBT1GArnR8K/s66A1WTqoy7nO97Uucjs2uIrfP6c34glxZfUAfQ4SP150 VQ+JQaa8b5TC8hu87hwCUygSORjbJcyY4k2DbDMF3suNLefKogA+npp0Q/GFKANz Z4yaODGrVwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMRAnMjZQGQNz4bBup78o8g9 nkzsMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIwOTA0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+nzANBgkqhkiG9w0BAQsFAAOC AQEAfsx+J4aOWAHCG2yvw7V2uFh9/F/37L2w+7a9XbBs50oP2Np+/fRmTcniv/UP VKLEB44zzon/IHjEmu75WHBNTWHo+vTF1mpcGHvEC1ZQdgfSzUCiiUDF7lEXrCjn lXk0u0bNZS/zcXVuPfRD0VVqVoZgpAFhI2MoVyWgqubh6HfdLHSVhtcqrlyR3hDX E5jkFcWqBO9ZQVEtIR3Ishc425AXfYBpY4J/zuc46Artryq6CibTSIV/d8r/rK9E dvkBQPHhEuVgt9euIp+NKFCvjS6wcdXYrPWB1jLvBX8EN0ZCXV0Y9yJehPdeXA1W VjO+2a0SM5bo5iwyvGr44aEZmw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:26:42 2026 by rpki-client