$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa File: AS51847.roa (raw, json) Hash identifier: xYWDlxmmi5eiPU2+DDdYXeEFTLgZXY6X7mc2zNGR8eU= Subject key identifier: 36:EC:CA:10:CE:84:AA:49:ED:2A:20:C2:26:45:A1:00:A6:74:4E:D0 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 01C5E912A6303C064D81354F8932498459A31217 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa Signing time: Sat 12 Jul 2025 07:29:44 +0000 ROA not before: Sat 12 Jul 2025 07:24:44 +0000 ROA not after: Sat 11 Jul 2026 07:29:44 +0000 asID: 51847 IP address blocks: 157.254.38.0/23 maxlen: 24 157.254.178.0/23 maxlen: 24 157.254.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c5:e9:12:a6:30:3c:06:4d:81:35:4f:89:32:49:84:59:a3:12:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 12 07:24:44 2025 GMT Not After : Jul 11 07:29:44 2026 GMT Subject: CN=36ECCA10CE84AA49ED2A20C22645A100A6744ED0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:ee:66:f8:bf:ef:7f:2c:f4:e0:db:bd:03: db:aa:3b:6d:2d:3e:34:4a:48:c5:5f:67:8f:f4:1a: 6b:2a:87:a4:63:eb:dc:81:54:a8:92:94:a2:8f:5d: 42:10:d5:29:9f:3b:e1:c9:38:08:0c:45:79:47:d5: 49:e3:27:e3:b6:10:14:b5:c0:da:0f:f0:01:2c:33: 62:09:54:1e:2c:9e:4c:2f:fa:f2:e7:1a:ef:25:06: 06:86:53:b7:bd:64:2f:41:63:47:70:aa:04:c8:b1: c1:c9:57:e8:d3:6e:aa:16:93:f2:fe:ce:67:45:4e: a7:cc:a0:6d:1a:e6:8b:33:b6:8e:a9:7b:a9:da:b5: ae:94:a0:1d:ca:2e:87:87:58:9d:c1:1d:8f:5d:28: f3:98:00:0e:ac:1f:d2:34:2f:c3:af:4a:6b:70:48: 78:ae:32:66:e1:76:7e:2b:ca:ed:15:8b:d6:b3:c8: c0:5b:db:0f:de:eb:8f:48:3b:48:5a:6b:12:50:f7: f6:56:a1:c1:c9:f4:26:26:41:94:80:c6:96:5b:f5: 03:2b:2b:ee:ab:c1:a0:55:e5:5f:34:9b:65:9a:9e: 83:87:37:27:5b:5d:f1:9b:ce:a4:91:89:ce:af:b3: 83:c6:8a:4e:fd:d6:c8:21:07:b0:99:e2:44:df:39: bd:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:EC:CA:10:CE:84:AA:49:ED:2A:20:C2:26:45:A1:00:A6:74:4E:D0 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS51847.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.38.0/23 157.254.178.0/23 157.254.252.0/23 Signature Algorithm: sha256WithRSAEncryption 78:66:30:06:4a:24:76:c3:4a:a3:79:d7:e9:06:d9:e1:da:7d: ff:d9:96:57:e6:3e:98:3e:86:1e:10:70:ab:58:24:b0:1f:b3: 55:b4:42:29:21:c5:bb:3e:f7:8d:fb:17:5b:ec:3d:8a:dc:8a: 20:9d:fb:00:e4:68:e0:b8:b1:4e:3f:4e:9f:94:10:a7:86:1c: 54:b0:b4:8b:a0:4a:2b:83:2b:15:3c:56:a1:5d:03:f1:d5:a9: 6a:19:b6:41:0c:c6:a4:bf:ee:a9:77:a8:2e:d9:ff:cd:14:f7: 65:d8:48:d6:51:4f:aa:c4:a2:02:9a:b4:dd:07:32:b3:8d:17: 47:19:26:05:51:c1:6d:14:c9:e8:1d:fd:14:29:bc:46:90:40: b9:55:63:14:b6:f3:be:93:2d:79:97:9c:a4:d5:50:fd:31:cc: 98:e3:08:85:bb:68:ee:c9:b2:dd:12:61:ad:f1:65:12:d3:0f: 8a:69:92:07:d8:bb:9f:b4:3b:06:bf:d9:ef:c0:42:24:27:81: b5:0d:3d:51:95:07:c2:6c:41:18:61:96:c6:1e:d2:7b:cc:f9: ab:fd:dd:e1:26:bc:16:e5:23:f2:f5:ce:49:d6:87:d1:c4:57: 53:62:d5:4b:73:3e:f7:b2:6e:88:9a:fe:a3:21:14:2c:82:44: 6a:83:75:c4 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUAcXpEqYwPAZNgTVPiTJJhFmjEhcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzEyMDcyNDQ0WhcNMjYwNzExMDcyOTQ0 WjAzMTEwLwYDVQQDEygzNkVDQ0ExMENFODRBQTQ5RUQyQTIwQzIyNjQ1QTEwMEE2 NzQ0RUQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0znuZvi/738s 9ODbvQPbqjttLT40SkjFX2eP9BprKoekY+vcgVSokpSij11CENUpnzvhyTgIDEV5 R9VJ4yfjthAUtcDaD/ABLDNiCVQeLJ5ML/ry5xrvJQYGhlO3vWQvQWNHcKoEyLHB yVfo026qFpPy/s5nRU6nzKBtGuaLM7aOqXup2rWulKAdyi6Hh1idwR2PXSjzmAAO rB/SNC/Dr0prcEh4rjJm4XZ+K8rtFYvWs8jAW9sP3uuPSDtIWmsSUPf2VqHByfQm JkGUgMaWW/UDKyvuq8GgVeVfNJtlmp6DhzcnW13xm86kkYnOr7ODxopO/dbIIQew meJE3zm9aQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDbsyhDOhKpJ7SogwiZFoQCm dE7QMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzUxODQ3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBnf4mAwQBnf6yAwQBnf78MA0GCSqG SIb3DQEBCwUAA4IBAQB4ZjAGSiR2w0qjedfpBtnh2n3/2ZZX5j6YPoYeEHCrWCSw H7NVtEIpIcW7PveN+xdb7D2K3IognfsA5GjguLFOP06flBCnhhxUsLSLoEorgysV PFahXQPx1alqGbZBDMakv+6pd6gu2f/NFPdl2EjWUU+qxKICmrTdBzKzjRdHGSYF UcFtFMnoHf0UKbxGkEC5VWMUtvO+ky15l5yk1VD9McyY4wiFu2juybLdEmGt8WUS 0w+KaZIH2LuftDsGv9nvwEIkJ4G1DT1RlQfCbEEYYZbGHtJ7zPmr/d3hJrwW5SPy 9c5J1ofRxFdTYtVLcz73sm6Imv6jIRQsgkRqg3XE -----END CERTIFICATE-----Generated at Tue Aug 5 08:21:20 2025 by rpki-client