$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa File: AS399486.roa (raw, json) Hash identifier: AojYXu3ZICzDX/FYMX/pKMmR3rIoiwI8loJMUKkN0Po= Subject key identifier: CC:A1:1A:D9:9C:8B:F2:EC:03:29:54:53:A8:EC:2C:1D:9D:8D:CB:D5 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2E466D633C624ED2FDD31AC9789D3DA84FB5F087 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa Signing time: Tue 09 Jun 2026 16:15:18 +0000 ROA not before: Tue 09 Jun 2026 16:10:18 +0000 ROA not after: Tue 08 Jun 2027 16:15:18 +0000 asID: 399486 IP address blocks: 157.254.164.0/23 maxlen: 24 157.254.194.0/24 maxlen: 24 157.254.207.0/24 maxlen: 24 157.254.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 11:28:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:46:6d:63:3c:62:4e:d2:fd:d3:1a:c9:78:9d:3d:a8:4f:b5:f0:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 9 16:10:18 2026 GMT Not After : Jun 8 16:15:18 2027 GMT Subject: CN=CCA11AD99C8BF2EC03295453A8EC2C1D9D8DCBD5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:00:cc:d7:12:f3:94:22:1b:c1:91:ec:31:54: b3:7e:b7:7b:26:f2:3d:ad:5f:e4:fe:f0:72:b6:a8: 62:f3:10:70:30:ac:c8:ac:b1:ba:80:81:9d:0d:5d: e1:ed:f6:29:5e:05:4d:cc:1e:fb:c5:81:d6:e4:50: c4:62:de:4b:54:15:b1:1d:7c:96:71:d5:40:e9:67: d4:7d:fc:0e:06:d0:fc:64:19:8b:6e:78:95:7a:36: 08:00:d7:df:97:21:3b:d5:c8:b1:eb:16:06:9e:29: 15:18:f3:68:0a:10:72:fc:2e:1b:0d:c6:58:3b:46: 19:b2:0f:cf:8f:23:3c:7f:07:b1:61:3c:48:e4:0c: 10:32:54:bc:8a:a0:81:e3:0c:0d:c1:db:88:9c:85: 0a:e9:58:2a:44:6d:32:d4:15:76:f8:43:fc:78:3c: 98:75:29:15:6e:37:f0:8a:b5:01:a6:44:b9:5e:30: a7:0d:2b:da:b0:95:1e:bf:0b:e5:81:67:c5:6e:37: 84:e2:bb:10:3d:1a:63:7c:56:52:76:2f:51:76:d4: 0a:d1:a0:9b:b8:ba:3a:f6:fe:f0:61:61:39:4d:36: da:f7:ca:c2:61:26:07:e2:b4:39:2e:18:35:07:7e: 7f:e7:41:cb:f2:3b:0f:33:57:65:56:0f:6a:a9:b4: 4a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:A1:1A:D9:9C:8B:F2:EC:03:29:54:53:A8:EC:2C:1D:9D:8D:CB:D5 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS399486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.164.0/23 157.254.194.0/24 157.254.207.0/24 157.254.236.0/23 Signature Algorithm: sha256WithRSAEncryption 56:11:39:af:0a:02:25:5e:dc:a1:9e:9c:ba:46:cf:1b:d1:ec: 54:c5:2c:02:86:99:fb:c3:3b:dd:ff:9e:28:f4:c7:be:09:84: f0:0b:93:9c:0e:a5:c8:a5:a8:a9:24:94:9f:21:4f:48:93:55: b2:e4:4f:6a:1c:94:8a:2c:c2:ef:7a:32:a9:ed:bc:3f:4d:7f: 5b:1c:b8:61:56:3b:6b:43:71:55:87:9e:3b:a3:01:05:e7:42: 66:52:61:32:d3:0f:e9:0a:6f:f7:58:50:8e:77:18:51:97:82: df:d5:18:68:32:80:80:78:13:bb:6a:fc:54:09:bd:ea:3f:76: 83:f0:00:57:20:88:3c:c7:8d:83:e1:28:77:bf:20:3a:8d:3b: 8a:93:12:89:02:97:cc:f7:15:03:1c:48:35:f7:ee:fd:9f:cc: 3a:a8:4f:21:bc:33:cc:f9:67:fa:d0:15:81:ac:f3:42:55:4c: 65:66:53:17:f1:e5:cb:28:54:6e:d5:ef:2b:9b:ba:47:15:b6: c2:94:11:e2:d9:a1:5d:e3:14:a6:1f:d0:58:4f:65:e0:d8:ad: 66:08:a9:b0:d6:83:20:4a:e2:af:e0:f8:8d:9e:95:19:26:7b: 57:81:a8:1f:0c:2e:7c:2e:3a:a7:d3:de:a7:45:36:03:df:1e: 5a:03:68:9b -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIULkZtYzxiTtL90xrJeJ09qE+18IcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNjA5MTYxMDE4WhcNMjcwNjA4MTYxNTE4 WjAzMTEwLwYDVQQDEyhDQ0ExMUFEOTlDOEJGMkVDMDMyOTU0NTNBOEVDMkMxRDlE OERDQkQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmADM1xLzlCIb wZHsMVSzfrd7JvI9rV/k/vBytqhi8xBwMKzIrLG6gIGdDV3h7fYpXgVNzB77xYHW 5FDEYt5LVBWxHXyWcdVA6WfUffwOBtD8ZBmLbniVejYIANfflyE71cix6xYGnikV GPNoChBy/C4bDcZYO0YZsg/PjyM8fwexYTxI5AwQMlS8iqCB4wwNwduInIUK6Vgq RG0y1BV2+EP8eDyYdSkVbjfwirUBpkS5XjCnDSvasJUevwvlgWfFbjeE4rsQPRpj fFZSdi9RdtQK0aCbuLo69v7wYWE5TTba98rCYSYH4rQ5Lhg1B35/50HL8jsPM1dl Vg9qqbRKlQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFMyhGtmci/LsAylUU6jsLB2d jcvVMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzM5OTQ4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAZ3+pAMEAJ3+wgMEAJ3+zwMEAZ3+ 7DANBgkqhkiG9w0BAQsFAAOCAQEAVhE5rwoCJV7coZ6cukbPG9HsVMUsAoaZ+8M7 3f+eKPTHvgmE8AuTnA6lyKWoqSSUnyFPSJNVsuRPahyUiizC73oyqe28P01/Wxy4 YVY7a0NxVYeeO6MBBedCZlJhMtMP6Qpv91hQjncYUZeC39UYaDKAgHgTu2r8VAm9 6j92g/AAVyCIPMeNg+Eod78gOo07ipMSiQKXzPcVAxxINffu/Z/MOqhPIbwzzPln +tAVgazzQlVMZWZTF/HlyyhUbtXvK5u6RxW2wpQR4tmhXeMUph/QWE9l4NitZgip sNaDIErir+D4jZ6VGSZ7V4GoHwwufC46p9Pep0U2A98eWgNomw== -----END CERTIFICATE-----Generated at Sat Jun 13 12:56:41 2026 by rpki-client