$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: wzx9hAduYCnjjTiouWZK5nzA5k6zpwfIRFTa8vcTdP4= Subject key identifier: A2:87:01:46:09:BD:EE:A1:3A:CB:97:4B:2B:00:3F:1C:8C:E2:AD:D2 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 6D2F2B507EA6A2298D497187B222088179561C8F Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa Signing time: Mon 02 Nov 2026 08:33:36 +0000 ROA not before: Mon 02 Nov 2026 08:28:36 +0000 ROA not after: Mon 01 Nov 2027 08:33:36 +0000 asID: 397423 IP address blocks: 157.254.48.0/24 maxlen: 24 157.254.189.0/24 maxlen: 24 157.254.211.0/24 maxlen: 24 157.254.213.0/24 maxlen: 24 157.254.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 07:50:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:2f:2b:50:7e:a6:a2:29:8d:49:71:87:b2:22:08:81:79:56:1c:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 2 08:28:36 2026 GMT Not After : Nov 1 08:33:36 2027 GMT Subject: CN=A287014609BDEEA13ACB974B2B003F1C8CE2ADD2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9a:ab:10:31:c8:1d:83:a8:a1:31:f5:15:be: 13:97:91:08:88:2a:05:3d:5d:92:3e:15:af:18:fd: ee:81:06:e0:e0:fe:86:3b:5d:20:c6:8e:a3:f7:93: 53:99:8d:62:b2:e8:8a:e4:bf:b3:70:76:3d:d2:96: 7a:04:31:27:93:97:08:1a:72:a9:a4:82:db:5a:7f: d6:bf:85:0d:3f:0e:74:fa:b8:19:a9:96:28:95:47: 90:e7:8a:f2:41:d0:ec:5b:e4:62:43:8b:0f:fd:06: eb:40:b8:3e:fd:93:ce:6a:72:24:15:29:10:39:fa: 92:6a:74:6f:1b:28:33:1c:0e:ab:16:db:e6:c2:f9: 5b:0d:29:f3:bf:b3:46:bc:b4:23:da:aa:79:ac:78: 0a:ef:37:8e:02:7d:e7:23:1a:ae:fa:61:17:7e:60: 10:11:3b:bf:88:3d:73:fb:79:c3:b0:c1:da:db:bb: 42:2c:eb:25:02:93:5b:9f:f2:72:a4:6b:9a:f3:cf: ae:d5:ea:35:fb:de:0c:f8:40:3a:34:f0:32:48:77: 70:35:36:3e:2f:f2:f6:b2:8b:a3:b8:6f:79:5d:3a: 80:42:0b:4f:7b:5b:2b:69:82:42:d6:c6:13:3d:83: e6:65:e2:cb:7c:ef:67:d0:47:41:4d:c5:91:f0:58: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:87:01:46:09:BD:EE:A1:3A:CB:97:4B:2B:00:3F:1C:8C:E2:AD:D2 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.48.0/24 157.254.189.0/24 157.254.211.0/24 157.254.213.0/24 157.254.219.0/24 Signature Algorithm: sha256WithRSAEncryption 20:a2:83:86:32:b7:de:e0:07:0b:f7:2e:be:4f:db:2c:51:5f: da:c9:f3:86:97:48:81:5f:6c:b2:7d:e1:b2:08:97:a1:3a:84: 2d:af:f9:8e:cc:7e:5c:cb:5d:0d:ba:5e:1f:f9:53:b1:35:98: 3d:6c:73:4a:66:6c:73:d9:86:1d:c7:c2:24:6c:00:d6:46:2b: 3e:4f:69:e5:b8:fa:8f:a7:64:07:1f:d9:ff:b8:10:05:8e:86: 65:2f:5e:3c:e9:0e:e5:00:41:48:5f:8b:6b:a6:34:57:cb:96: dc:42:de:ad:de:66:6b:41:48:3a:52:a8:59:7c:0e:9f:f4:de: 28:81:bc:a1:c1:c9:f6:b0:4b:8c:c8:88:29:4a:5a:09:14:1c: d5:67:4a:d0:33:9a:b8:6d:2b:bf:df:d0:04:74:9c:4d:19:5e: c6:58:1d:d5:8b:ff:b2:9b:e3:ac:15:23:b0:ff:b6:25:6e:bd: 59:2e:76:03:8a:1a:50:d9:3d:6a:1d:f6:a9:30:20:f0:98:bb: b6:13:c6:b8:bc:58:fa:14:ce:68:67:3d:4a:65:d2:f8:d7:59: bc:a9:33:a7:63:1b:c5:19:a6:89:58:5a:48:7c:e9:f9:3c:50: 08:99:90:f0:8b:3d:38:32:9b:78:d8:da:cd:c4:e4:bd:62:cd: f7:b5:d7:5d -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUbS8rUH6moimNSXGHsiIIgXlWHI8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYxMTAyMDgyODM2WhcNMjcxMTAxMDgzMzM2 WjAzMTEwLwYDVQQDEyhBMjg3MDE0NjA5QkRFRUExM0FDQjk3NEIyQjAwM0YxQzhD RTJBREQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5qrEDHIHYOo oTH1Fb4Tl5EIiCoFPV2SPhWvGP3ugQbg4P6GO10gxo6j95NTmY1isuiK5L+zcHY9 0pZ6BDEnk5cIGnKppILbWn/Wv4UNPw50+rgZqZYolUeQ54ryQdDsW+RiQ4sP/Qbr QLg+/ZPOanIkFSkQOfqSanRvGygzHA6rFtvmwvlbDSnzv7NGvLQj2qp5rHgK7zeO An3nIxqu+mEXfmAQETu/iD1z+3nDsMHa27tCLOslApNbn/JypGua88+u1eo1+94M +EA6NPAySHdwNTY+L/L2soujuG95XTqAQgtPe1sraYJC1sYTPYPmZeLLfO9n0EdB TcWR8Fj8QQIDAQABo4IClzCCApMwHQYDVR0OBBYEFKKHAUYJve6hOsuXSysAPxyM 4q3SMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAJ3+MAMEAJ3+vQMEAJ3+0wMEAJ3+ 1QMEAJ3+2zANBgkqhkiG9w0BAQsFAAOCAQEAIKKDhjK33uAHC/cuvk/bLFFf2snz hpdIgV9ssn3hsgiXoTqELa/5jsx+XMtdDbpeH/lTsTWYPWxzSmZsc9mGHcfCJGwA 1kYrPk9p5bj6j6dkBx/Z/7gQBY6GZS9ePOkO5QBBSF+La6Y0V8uW3ELerd5ma0FI OlKoWXwOn/TeKIG8ocHJ9rBLjMiIKUpaCRQc1WdK0DOauG0rv9/QBHScTRlexlgd 1Yv/spvjrBUjsP+2JW69WS52A4oaUNk9ah32qTAg8Ji7thPGuLxY+hTOaGc9SmXS +NdZvKkzp2MbxRmmiVhaSHzp+TxQCJmQ8Is9ODKbeNjazcTkvWLN97XXXQ== -----END CERTIFICATE-----Generated at Thu Nov 5 07:12:22 2026 by rpki-client