$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40501.roa File: AS40501.roa (raw, json) Hash identifier: XPM9tT1TwH6O61ImHcZxvY29/Vu93NU41w3ZO5IwwMM= Subject key identifier: 7D:B1:4F:4A:07:C2:43:3B:0F:B9:D2:3E:02:F9:5D:1C:71:C6:BB:B8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 44C68F2ECF97CD76B32CBE9A3C8DE0025F7F4B Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40501.roa Signing time: Mon 07 Jul 2025 20:29:44 +0000 ROA not before: Mon 07 Jul 2025 20:24:44 +0000 ROA not after: Mon 06 Jul 2026 20:29:44 +0000 asID: 40501 IP address blocks: 157.254.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 15:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c6:8f:2e:cf:97:cd:76:b3:2c:be:9a:3c:8d:e0:02:5f:7f:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 7 20:24:44 2025 GMT Not After : Jul 6 20:29:44 2026 GMT Subject: CN=7DB14F4A07C2433B0FB9D23E02F95D1C71C6BBB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2a:2c:82:04:bf:d9:5d:10:b8:41:97:67:bb: 29:b6:6a:28:4f:24:01:bd:26:bd:2a:c6:f2:5c:4e: 50:d6:90:22:54:fd:ee:70:f1:b7:73:d6:cc:76:73: 14:c5:0c:5b:d1:c9:02:c2:c9:7a:b5:2f:9e:3c:4a: b0:e0:99:2f:98:31:1d:3d:1f:1a:2e:92:7e:6a:ba: 31:83:5e:e7:bc:0b:67:f6:1e:51:8a:bb:81:cc:3c: 5b:88:25:38:a2:a0:ef:7c:fc:42:84:c7:2f:1d:d9: 3a:c6:09:e6:d3:6f:fa:30:9b:81:6a:54:b7:6b:5b: f7:27:48:f4:6d:9d:d7:82:65:67:c6:62:38:bd:43: 85:44:e5:f8:c6:f7:c7:7c:74:05:f3:15:be:1b:6a: c1:81:6f:01:9e:ba:a1:a7:e7:83:57:5c:25:0b:50: 1c:c0:0d:43:92:b7:d6:66:92:85:bf:ab:7e:47:05: c0:fe:4b:c8:20:8b:89:1c:bc:ad:04:2b:71:94:17: c6:e6:28:17:67:bf:e3:bb:b6:f9:58:10:2d:56:8f: 47:96:40:70:7c:e6:3d:8c:56:59:82:2d:bc:96:97: b5:40:bd:50:06:94:6f:5e:4c:e9:09:3b:8a:24:0b: 9a:6f:f0:ce:f4:c7:d2:b8:6c:75:6b:8c:a8:39:c7: 66:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B1:4F:4A:07:C2:43:3B:0F:B9:D2:3E:02:F9:5D:1C:71:C6:BB:B8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS40501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.50.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:57:06:34:ad:e3:e1:a6:03:e3:e4:6a:29:5f:98:aa:11:1c: 17:ea:7e:b1:cf:2b:4c:a2:ad:0b:e2:5a:a7:e3:b7:9a:dc:80: d3:b6:0f:4c:e3:c2:c8:da:42:a0:a9:e2:98:69:dd:00:43:7c: 8e:1c:0b:f7:83:61:4c:23:7b:f3:5a:5c:4f:3c:72:52:27:7f: fb:75:41:2f:7e:2e:a3:f5:ff:06:52:e0:71:4c:47:a0:ee:a4: a2:61:f5:79:ee:af:16:0d:ba:b0:1a:1b:a4:6e:72:68:93:e9: b8:1c:48:f9:2a:15:b3:14:dd:62:21:f3:68:64:d8:bf:51:ba: 72:aa:34:15:1b:08:1b:c3:34:d5:be:3d:1e:54:bc:53:e3:93: 20:82:c5:41:a8:55:64:1d:4a:e2:98:d1:fe:b1:b9:c7:96:de: c1:d5:c5:88:0d:b4:de:92:ee:f2:31:43:e6:45:18:13:bf:00: 39:2b:e9:e7:e4:db:2a:af:2c:06:d8:09:7c:a7:01:6b:74:59: c9:9b:59:9c:33:96:c5:5e:a5:fa:2d:45:fc:a9:91:88:00:6e: 05:08:6c:c2:d4:79:ac:89:52:aa:1b:82:cd:77:7d:21:b9:5d: 13:19:85:f3:ad:50:52:cd:23:a1:ea:99:19:f5:e4:21:49:c2: 6e:cd:fa:35 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgITRMaPLs+XzXazLL6aPI3gAl9/SzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJlZGU3ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0 NzFhMjYzZDk0Y2NmN2ZiMjAeFw0yNTA3MDcyMDI0NDRaFw0yNjA3MDYyMDI5NDRa MDMxMTAvBgNVBAMTKDdEQjE0RjRBMDdDMjQzM0IwRkI5RDIzRTAyRjk1RDFDNzFD NkJCQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcKiyCBL/ZXRC4 QZdnuym2aihPJAG9Jr0qxvJcTlDWkCJU/e5w8bdz1sx2cxTFDFvRyQLCyXq1L548 SrDgmS+YMR09Hxoukn5qujGDXue8C2f2HlGKu4HMPFuIJTiioO98/EKExy8d2TrG CebTb/owm4FqVLdrW/cnSPRtndeCZWfGYji9Q4VE5fjG98d8dAXzFb4basGBbwGe uqGn54NXXCULUBzADUOSt9ZmkoW/q35HBcD+S8ggi4kcvK0EK3GUF8bmKBdnv+O7 tvlYEC1Wj0eWQHB85j2MVlmCLbyWl7VAvVAGlG9eTOkJO4okC5pv8M70x9K4bHVr jKg5x2b3AgMBAAGjggJ+MIICejAdBgNVHQ4EFgQUfbFPSgfCQzsPudI+AvldHHHG u7gwHwYDVR0jBBgwFoAU0/nNKIqWNLU5Y4/n36bIVCfDA/kwDgYDVR0PAQH/BAQD AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0 L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0NTNiN2IvMC9E M0Y5Q0QyODhBOTYzNEI1Mzk2MzhGRTdERkE2Qzg1NDI3QzMwM0Y5LmNybDCB8wYI KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i MDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1hNzlhLTQ1YmYtOTU4Ni05MmRkNDll ZjMyMjMvNDNiN2ZiZjQtNGRlZi00OTA0LTg3ZmQtZTU5OGJmOWNmMmUzL2VkZTc4 MTYyYzc5MGY3YWUwOWMxZjUzNGNjN2EyY2Y0ODQ3MWEyNjNkOTRjY2Y3ZmIyLmNl cjBvBggrBgEFBQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTY0OTBmNDQ1 M2I3Yi8wL0FTNDA1MDEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/jIwDQYJKoZIhvcNAQELBQADggEB AH5XBjSt4+GmA+PkailfmKoRHBfqfrHPK0yirQviWqfjt5rcgNO2D0zjwsjaQqCp 4php3QBDfI4cC/eDYUwje/NaXE88clInf/t1QS9+LqP1/wZS4HFMR6DupKJh9Xnu rxYNurAaG6RucmiT6bgcSPkqFbMU3WIh82hk2L9RunKqNBUbCBvDNNW+PR5UvFPj kyCCxUGoVWQdSuKY0f6xuceW3sHVxYgNtN6S7vIxQ+ZFGBO/ADkr6efk2yqvLAbY CXynAWt0WcmbWZwzlsVepfotRfypkYgAbgUIbMLUeayJUqobgs13fSG5XRMZhfOt UFLNI6HqmRn15CFJwm7N+jU= -----END CERTIFICATE-----Generated at Tue Aug 5 20:01:03 2025 by rpki-client