$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: fuliKWEAIatBdO3bexCb9RGGGxaLr3Yh3NLZzYl9/rw= Subject key identifier: 09:C6:2E:BC:00:53:FD:DB:47:8E:37:B3:71:77:99:6F:0C:77:A8:43 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2152A510F3A9DE6F4A8858065288742EA7FD6D74 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa Signing time: Wed 04 Nov 2026 10:32:40 +0000 ROA not before: Wed 04 Nov 2026 10:27:40 +0000 ROA not after: Wed 03 Nov 2027 10:32:40 +0000 asID: 396356 IP address blocks: 157.254.16.0/24 maxlen: 24 157.254.155.0/24 maxlen: 24 157.254.173.0/24 maxlen: 24 157.254.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 07:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:52:a5:10:f3:a9:de:6f:4a:88:58:06:52:88:74:2e:a7:fd:6d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 4 10:27:40 2026 GMT Not After : Nov 3 10:32:40 2027 GMT Subject: CN=09C62EBC0053FDDB478E37B37177996F0C77A843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c7:40:ae:e1:e3:0a:96:83:3a:cc:9d:02:e1: f1:e9:1b:ea:3c:b2:0a:61:ef:e6:dc:c1:bf:04:e6: 32:67:94:b7:66:90:66:5e:cc:bf:d9:76:29:59:47: 07:33:2a:0c:4e:53:35:fb:e9:0c:d3:13:23:68:87: 8e:42:77:76:c8:b1:d3:60:eb:84:a2:08:12:45:4f: 79:2b:d6:1a:99:58:ac:b4:db:59:36:f6:68:4e:fd: af:e9:b0:bf:04:0f:0b:42:9b:49:7c:8b:7d:9e:4f: 8f:d4:23:21:d6:07:56:0e:21:ce:4b:ea:b5:a5:94: 81:ba:2b:80:86:32:83:19:c7:4b:89:02:85:00:23: 6f:65:22:e2:c2:8f:4f:d6:ea:aa:0c:f6:4e:59:06: 5a:04:18:ef:80:d7:c5:46:d1:47:9f:ac:09:59:8b: a3:ad:c1:d2:41:dc:ba:87:f1:96:7f:26:aa:3f:ea: 42:17:b5:47:58:01:a8:80:5c:f7:72:53:ea:c8:6c: a6:dd:88:7c:db:85:86:24:cf:73:48:ea:c7:ae:ca: e1:00:05:d3:4a:88:a0:9f:b1:fa:ee:0d:85:03:64: 5f:ae:7e:15:93:df:6c:df:15:54:45:e1:7e:dc:55: a2:ea:9e:79:ac:b9:d1:aa:9c:10:50:09:88:82:2f: 08:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C6:2E:BC:00:53:FD:DB:47:8E:37:B3:71:77:99:6F:0C:77:A8:43 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.16.0/24 157.254.155.0/24 157.254.173.0/24 157.254.215.0/24 Signature Algorithm: sha256WithRSAEncryption a9:39:43:5e:cd:b6:67:a6:06:67:b9:21:6d:05:9d:52:31:31: d8:6b:1b:3c:7c:36:8c:d9:fd:26:a5:dc:b8:08:09:e6:1c:7b: 88:27:b5:7d:58:96:04:a1:c8:dd:b7:f5:4b:35:c3:17:bb:f5: 67:01:82:77:d3:79:5d:7c:38:e0:21:94:79:2b:38:18:02:fd: 86:e5:cc:d0:dd:1b:b4:98:9f:29:b1:b5:ca:c3:0f:b2:6c:a4: a4:b7:91:49:ff:df:5f:3f:7b:ff:a6:b8:c5:42:4b:1d:bf:39: ed:51:92:ae:a7:b3:15:70:5e:0b:59:67:7b:74:ae:d0:48:0c: da:c2:6b:22:e0:3b:96:33:5b:d2:38:b8:a8:08:e5:46:98:6e: 07:3c:47:e6:e0:e9:22:d3:cf:dd:30:85:ea:78:9b:40:c0:1b: 2f:4d:af:bf:98:aa:ac:0b:b9:37:85:21:55:86:6c:4f:73:6d: 48:a8:65:44:f4:60:75:b7:07:fd:2f:b2:c7:52:ae:39:07:59: b3:86:b1:24:9c:12:99:1b:53:50:f4:b3:4a:72:85:02:85:5d: 12:04:57:62:d1:55:51:e1:15:be:04:92:2d:83:b9:57:38:fe: b4:69:8b:eb:c9:45:f7:89:78:dd:dc:da:9a:1e:39:b3:86:0a: 36:5a:a9:ab -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUIVKlEPOp3m9KiFgGUoh0Lqf9bXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTA0MTAyNzQwWhcNMjcxMTAzMTAzMjQw WjAzMTEwLwYDVQQDEygwOUM2MkVCQzAwNTNGRERCNDc4RTM3QjM3MTc3OTk2RjBD NzdBODQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsdAruHjCpaD OsydAuHx6RvqPLIKYe/m3MG/BOYyZ5S3ZpBmXsy/2XYpWUcHMyoMTlM1++kM0xMj aIeOQnd2yLHTYOuEoggSRU95K9YamVistNtZNvZoTv2v6bC/BA8LQptJfIt9nk+P 1CMh1gdWDiHOS+q1pZSBuiuAhjKDGcdLiQKFACNvZSLiwo9P1uqqDPZOWQZaBBjv gNfFRtFHn6wJWYujrcHSQdy6h/GWfyaqP+pCF7VHWAGogFz3clPqyGym3Yh824WG JM9zSOrHrsrhAAXTSoign7H67g2FA2Rfrn4Vk99s3xVUReF+3FWi6p55rLnRqpwQ UAmIgi8IGwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFAnGLrwAU/3bR443s3F3mW8M d6hDMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAJ3+EAMEAJ3+mwMEAJ3+rQMEAJ3+ 1zANBgkqhkiG9w0BAQsFAAOCAQEAqTlDXs22Z6YGZ7khbQWdUjEx2GsbPHw2jNn9 JqXcuAgJ5hx7iCe1fViWBKHI3bf1SzXDF7v1ZwGCd9N5XXw44CGUeSs4GAL9huXM 0N0btJifKbG1ysMPsmykpLeRSf/fXz97/6a4xUJLHb857VGSrqezFXBeC1lne3Su 0EgM2sJrIuA7ljNb0ji4qAjlRphuBzxH5uDpItPP3TCF6nibQMAbL02vv5iqrAu5 N4UhVYZsT3NtSKhlRPRgdbcH/S+yx1KuOQdZs4axJJwSmRtTUPSzSnKFAoVdEgRX YtFVUeEVvgSSLYO5Vzj+tGmL68lF94l43dzamh45s4YKNlqpqw== -----END CERTIFICATE-----Generated at Thu Nov 5 09:31:57 2026 by rpki-client