$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: LUt8i4GLQPvHDFUZK5Xe4mm31OkZjatcMGgFyBnY43I= Subject key identifier: 9E:7C:24:80:24:52:34:3D:24:12:B9:C8:C4:D6:B8:DC:11:06:93:35 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 488F83E7388E1B80D388328FDD16C344FC95ED1B Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa Signing time: Mon 17 Aug 2026 22:03:23 +0000 ROA not before: Mon 17 Aug 2026 21:58:23 +0000 ROA not after: Mon 16 Aug 2027 22:03:23 +0000 asID: 397423 IP address blocks: 157.254.48.0/24 maxlen: 24 157.254.189.0/24 maxlen: 24 157.254.211.0/24 maxlen: 24 157.254.213.0/24 maxlen: 24 157.254.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 07:09:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8f:83:e7:38:8e:1b:80:d3:88:32:8f:dd:16:c3:44:fc:95:ed:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Aug 17 21:58:23 2026 GMT Not After : Aug 16 22:03:23 2027 GMT Subject: CN=9E7C24802452343D2412B9C8C4D6B8DC11069335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:86:83:67:e9:39:58:36:47:c0:eb:7d:56:80: 5c:1b:07:19:31:2a:d6:44:32:00:19:52:2c:09:a9: 83:c1:84:b4:38:7a:ca:de:16:02:73:0c:e8:45:a0: 27:a4:8a:c7:ec:4b:e5:79:ff:62:53:22:e9:28:e5: 12:eb:26:83:9d:d4:d0:64:c6:a9:f3:77:7a:7b:00: 60:ff:fa:5f:94:dc:44:a3:04:79:42:4d:b4:46:56: cb:fb:2c:9c:fc:22:a1:42:3f:86:68:fb:43:04:e5: 9d:45:d9:18:bd:2f:b0:47:b6:33:17:21:b9:ea:a0: 57:d3:58:bc:5f:0a:7a:58:4e:4a:67:ba:ab:55:50: e5:79:3d:4f:4e:88:40:f2:62:67:c5:25:2f:60:e9: ae:30:17:31:1f:0f:41:9b:15:7b:c2:69:5e:1c:99: 21:8a:2a:08:36:5d:68:15:4b:11:63:59:9c:cd:1c: 82:7c:06:ae:a5:5d:ca:12:38:dd:cd:ba:81:eb:f3: 41:30:de:6b:4b:a0:31:1c:7f:4e:7a:d1:a5:15:5e: 00:2a:3c:46:1e:2a:4e:01:7a:6c:25:f1:9f:92:18: 3e:7f:70:5a:5f:26:09:d3:74:47:9c:4d:3c:29:2b: 3d:3d:c4:de:d3:68:ee:91:58:9b:b6:83:09:98:2c: 74:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:24:80:24:52:34:3D:24:12:B9:C8:C4:D6:B8:DC:11:06:93:35 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.48.0/24 157.254.189.0/24 157.254.211.0/24 157.254.213.0/24 157.254.219.0/24 Signature Algorithm: sha256WithRSAEncryption 79:5c:9e:04:08:94:67:0b:d5:5b:63:78:e8:37:fc:64:b1:c9: e7:10:af:23:79:a8:57:aa:1e:1d:84:cc:cb:3f:3a:d3:76:56: 01:62:74:09:f2:60:8e:9d:59:23:14:09:ea:5e:83:a6:b8:a5: 1d:97:05:b9:95:f1:35:e5:d1:ff:10:30:08:bd:d3:1c:93:36: 0a:6c:b7:1c:84:ad:d1:ae:94:af:e4:e4:4e:b8:27:d0:c1:2a: e7:3b:11:b2:21:bb:ec:29:49:5d:16:b3:8d:fd:10:a9:4a:48: c6:a6:93:02:85:a4:35:2d:f9:27:1e:b6:8e:ba:ee:68:82:18: 9e:1f:16:19:74:8e:2a:77:e8:3c:35:f8:31:13:76:00:ff:c5: fa:98:53:34:78:18:b1:5d:50:6c:42:e0:4c:47:c1:32:4c:c8: 26:20:8a:c8:29:01:8d:02:56:bd:cd:81:c8:3c:35:36:fd:97: 0a:52:fd:87:73:42:4b:2e:32:8f:74:0f:ef:88:bf:ca:8b:ca: 85:eb:2e:67:d0:9a:d6:55:87:ac:80:f7:92:43:5d:b7:5d:77: 95:6f:ea:1d:13:10:9e:ce:ab:1c:af:8a:5a:06:92:d8:60:7d: 7d:04:73:be:47:bb:73:67:01:4f:da:a3:a2:7d:3a:75:14:82: 51:e0:dd:85 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUSI+D5ziOG4DTiDKP3RbDRPyV7RswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwODE3MjE1ODIzWhcNMjcwODE2MjIwMzIz WjAzMTEwLwYDVQQDEyg5RTdDMjQ4MDI0NTIzNDNEMjQxMkI5QzhDNEQ2QjhEQzEx MDY5MzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYaDZ+k5WDZH wOt9VoBcGwcZMSrWRDIAGVIsCamDwYS0OHrK3hYCcwzoRaAnpIrH7Evlef9iUyLp KOUS6yaDndTQZMap83d6ewBg//pflNxEowR5Qk20RlbL+yyc/CKhQj+GaPtDBOWd RdkYvS+wR7YzFyG56qBX01i8Xwp6WE5KZ7qrVVDleT1PTohA8mJnxSUvYOmuMBcx Hw9BmxV7wmleHJkhiioINl1oFUsRY1mczRyCfAaupV3KEjjdzbqB6/NBMN5rS6Ax HH9OetGlFV4AKjxGHipOAXpsJfGfkhg+f3BaXyYJ03RHnE08KSs9PcTe02jukVib toMJmCx0UQIDAQABo4IClzCCApMwHQYDVR0OBBYEFJ58JIAkUjQ9JBK5yMTWuNwR BpM1MB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAJ3+MAMEAJ3+vQMEAJ3+0wMEAJ3+ 1QMEAJ3+2zANBgkqhkiG9w0BAQsFAAOCAQEAeVyeBAiUZwvVW2N46Df8ZLHJ5xCv I3moV6oeHYTMyz8603ZWAWJ0CfJgjp1ZIxQJ6l6DprilHZcFuZXxNeXR/xAwCL3T HJM2Cmy3HISt0a6Ur+TkTrgn0MEq5zsRsiG77ClJXRazjf0QqUpIxqaTAoWkNS35 Jx62jrruaIIYnh8WGXSOKnfoPDX4MRN2AP/F+phTNHgYsV1QbELgTEfBMkzIJiCK yCkBjQJWvc2ByDw1Nv2XClL9h3NCSy4yj3QP74i/yovKhesuZ9Ca1lWHrID3kkNd t113lW/qHRMQns6rHK+KWgaS2GB9fQRzvke7c2cBT9qjon06dRSCUeDdhQ== -----END CERTIFICATE-----Generated at Sun Sep 20 14:21:23 2026 by rpki-client