$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa File: AS214025.roa (raw, json) Hash identifier: 6ks2NoTV6hyhF94YCZgWhWdp96/2qX/wxjF8NL9vuXY= Subject key identifier: 14:BD:81:CD:80:70:94:9C:9B:1E:57:32:C9:A9:6B:1F:93:2A:5E:A1 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 0B824A97D7920CFEABA3DE981481E912F66E5A88 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa Signing time: Fri 17 Apr 2026 11:19:07 +0000 ROA not before: Fri 17 Apr 2026 11:14:07 +0000 ROA not after: Fri 16 Apr 2027 11:19:07 +0000 asID: 214025 IP address blocks: 157.254.155.0/24 maxlen: 24 157.254.175.0/24 maxlen: 24 157.254.208.0/24 maxlen: 24 157.254.214.0/24 maxlen: 24 192.231.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:52:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:82:4a:97:d7:92:0c:fe:ab:a3:de:98:14:81:e9:12:f6:6e:5a:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 17 11:14:07 2026 GMT Not After : Apr 16 11:19:07 2027 GMT Subject: CN=14BD81CD8070949C9B1E5732C9A96B1F932A5EA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:83:c8:de:f3:7e:cf:6b:d8:5e:c1:6e:05: 08:03:5a:06:71:8b:06:61:77:18:86:3a:63:38:a6: 93:e2:c7:c0:b0:d6:b3:e4:6b:b2:6e:a6:9f:3e:28: 5e:f1:1f:0a:79:6c:09:ca:63:14:57:fb:4d:a3:b0: 1c:a1:21:47:60:a6:02:82:dc:ce:74:56:ff:e7:b6: f4:ba:d3:24:ad:35:70:f1:79:19:03:e9:82:b3:a2: ee:b9:19:ed:1d:4d:74:31:7f:68:5f:ce:35:7d:b1: 4e:4d:2c:fb:f6:7d:7e:f2:e9:67:ac:8d:58:ef:e8: 80:91:34:e1:91:a1:5c:4e:f0:24:d7:68:ca:02:07: 77:c0:d4:c3:9d:0f:df:ff:a3:11:a8:1d:e6:1e:7c: b0:ef:90:40:57:2b:70:91:5d:67:86:e9:3d:7a:0e: 0e:f4:16:8b:ad:c0:7d:9d:70:00:84:89:c8:5a:98: f7:99:2a:fc:17:94:5d:bb:3c:ba:87:8d:84:0d:c4: 80:65:90:b0:d8:d1:60:e4:56:db:7c:a3:53:09:0b: 58:fe:d9:74:47:ca:4a:4d:82:90:e3:12:4f:3d:9a: 76:ca:82:07:03:7b:9e:cf:02:67:a6:42:41:11:2d: e5:b7:b9:37:2b:aa:01:6b:8e:01:97:2e:44:f5:39: f4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BD:81:CD:80:70:94:9C:9B:1E:57:32:C9:A9:6B:1F:93:2A:5E:A1 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214025.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.155.0/24 157.254.175.0/24 157.254.208.0/24 157.254.214.0/24 192.231.16.0/24 Signature Algorithm: sha256WithRSAEncryption b2:77:df:de:b4:7e:ac:b1:1d:7b:4f:63:13:c6:e9:76:06:97: e9:71:8d:3c:52:88:2f:6f:bd:7a:c4:c8:72:28:e4:15:66:3d: b6:12:ad:3a:cb:a2:e3:2d:1f:46:eb:d9:61:b5:31:9c:6e:db: fc:b3:a1:17:6f:14:63:22:8e:5e:54:f0:6d:2d:42:d8:01:b5: 28:a5:5d:42:be:fc:42:87:e4:ef:d9:d3:46:4a:14:97:0f:29: 73:4f:1c:38:4d:ec:11:06:ba:9e:64:eb:51:d1:87:f5:71:7a: 9f:8c:16:0c:ce:a8:5e:5d:5c:14:4a:58:1d:d9:73:d3:5c:6d: 6c:a3:92:f3:19:ef:86:76:15:2d:d3:df:47:83:e0:d4:2d:d5: b5:92:7f:43:92:d6:56:32:cc:11:53:b4:48:58:16:a4:b9:75: 47:88:18:d8:65:64:13:4b:92:66:ba:f2:4e:b7:7e:fe:5d:00: 89:d5:b9:97:e7:c1:41:b3:0d:af:ba:e2:ec:d6:74:ef:47:26: 06:02:5b:e0:c0:ea:69:b7:80:18:61:e8:49:e6:73:89:15:d4: 96:45:25:2f:59:8e:73:62:68:4d:59:ed:ed:a4:01:b4:d1:c2: 91:6c:fa:08:58:e1:2b:9f:c0:53:82:bd:0e:cf:d4:ec:ac:8b: 7d:cc:e5:ba -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUC4JKl9eSDP6ro96YFIHpEvZuWogwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNDE3MTExNDA3WhcNMjcwNDE2MTExOTA3 WjAzMTEwLwYDVQQDEygxNEJEODFDRDgwNzA5NDlDOUIxRTU3MzJDOUE5NkIxRjkz MkE1RUExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIeDyN7zfs9r 2F7BbgUIA1oGcYsGYXcYhjpjOKaT4sfAsNaz5GuybqafPihe8R8KeWwJymMUV/tN o7AcoSFHYKYCgtzOdFb/57b0utMkrTVw8XkZA+mCs6LuuRntHU10MX9oX841fbFO TSz79n1+8ulnrI1Y7+iAkTThkaFcTvAk12jKAgd3wNTDnQ/f/6MRqB3mHnyw75BA VytwkV1nhuk9eg4O9BaLrcB9nXAAhInIWpj3mSr8F5Rduzy6h42EDcSAZZCw2NFg 5FbbfKNTCQtY/tl0R8pKTYKQ4xJPPZp2yoIHA3uezwJnpkJBES3lt7k3K6oBa44B ly5E9Tn0tQIDAQABo4IClzCCApMwHQYDVR0OBBYEFBS9gc2AcJScmx5XMsmpax+T Kl6hMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNDAyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAJ3+mwMEAJ3+rwMEAJ3+0AMEAJ3+ 1gMEAMDnEDANBgkqhkiG9w0BAQsFAAOCAQEAsnff3rR+rLEde09jE8bpdgaX6XGN PFKIL2+9esTIcijkFWY9thKtOsui4y0fRuvZYbUxnG7b/LOhF28UYyKOXlTwbS1C 2AG1KKVdQr78Qofk79nTRkoUlw8pc08cOE3sEQa6nmTrUdGH9XF6n4wWDM6oXl1c FEpYHdlz01xtbKOS8xnvhnYVLdPfR4Pg1C3VtZJ/Q5LWVjLMEVO0SFgWpLl1R4gY 2GVkE0uSZrryTrd+/l0AidW5l+fBQbMNr7ri7NZ070cmBgJb4MDqabeAGGHoSeZz iRXUlkUlL1mOc2JoTVnt7aQBtNHCkWz6CFjhK5/AU4K9Ds/U7KyLfczlug== -----END CERTIFICATE-----Generated at Sun Apr 19 11:13:52 2026 by rpki-client