$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa File: AS401507.roa (raw, json) Hash identifier: YFahpVdZN8m25gLrCQxI8XQQ4rbdn62qjOMi731EXPI= Subject key identifier: 93:79:FD:A4:D7:AF:D8:94:A7:76:98:E8:0F:9E:99:7C:85:FC:B5:DC Certificate issuer: /CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Certificate serial: 0B2E204FBD1A67D104B4E9E46D3417E71A937696 Authority key identifier: 7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa Signing time: Sun 15 Jun 2025 02:30:04 +0000 ROA not before: Sun 15 Jun 2025 02:25:04 +0000 ROA not after: Sun 14 Jun 2026 02:30:04 +0000 asID: 401507 IP address blocks: 2a14:7584:6000::/36 maxlen: 48 2a14:7584:61c1::/48 maxlen: 48 2a14:7584:61c7::/48 maxlen: 48 2a14:7584:61cc::/48 maxlen: 48 2a14:7584:61cd::/48 maxlen: 48 2a14:7584:61ce::/48 maxlen: 48 2a14:7584:622d::/48 maxlen: 48 2a14:7584:63ce::/48 maxlen: 48 2a14:7584:6525::/48 maxlen: 48 2a14:7584:657a::/48 maxlen: 48 2a14:7584:6695::/48 maxlen: 48 2a14:7584:66b4::/48 maxlen: 48 2a14:7584:66b6::/48 maxlen: 48 2a14:7584:66be::/48 maxlen: 48 2a14:7584:674d::/48 maxlen: 48 2a14:7584:6761::/48 maxlen: 48 2a14:7584:6793::/48 maxlen: 48 2a14:7584:67bc::/48 maxlen: 48 2a14:7584:69a1::/48 maxlen: 48 2a14:7584:6a32::/48 maxlen: 48 2a14:7584:6a94::/48 maxlen: 48 2a14:7584:6aac::/48 maxlen: 48 2a14:7584:6aba::/48 maxlen: 48 2a14:7584:6af5::/48 maxlen: 48 2a14:7584:6b06::/48 maxlen: 48 2a14:7584:6b6f::/48 maxlen: 48 2a14:7584:6c8b::/48 maxlen: 48 2a14:7584:6cc3::/48 maxlen: 48 2a14:7584:6d01::/48 maxlen: 48 2a14:7584:6d5b::/48 maxlen: 48 2a14:7584:6e6f::/48 maxlen: 48 2a14:7584:6e9c::/48 maxlen: 48 2a14:7584:6f7b::/48 maxlen: 48 2a14:7584:6f9c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Jun 2025 16:41:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:2e:20:4f:bd:1a:67:d1:04:b4:e9:e4:6d:34:17:e7:1a:93:76:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45 Validity Not Before: Jun 15 02:25:04 2025 GMT Not After : Jun 14 02:30:04 2026 GMT Subject: CN=9379FDA4D7AFD894A77698E80F9E997C85FCB5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e5:3e:9a:d1:2b:9c:21:ae:43:c9:92:0d:db: 57:67:ed:d3:36:59:f2:27:30:08:c8:eb:e8:ec:dc: 09:a9:26:2a:8a:94:5b:1d:40:3d:a3:6a:a8:de:90: 8c:b7:03:d6:b0:1d:3d:51:26:0e:2b:85:54:16:0b: 21:ed:ad:86:29:9f:43:6f:61:c6:b9:cc:a6:a3:a6: 02:4d:ad:fb:65:ac:f8:d6:fe:6d:b6:5c:c5:5c:82: db:8f:e6:a3:d6:78:ec:ae:4f:f3:7d:90:14:4f:a8: 05:04:83:98:41:6d:ca:e5:ee:d6:1c:e9:8c:a7:26: eb:f4:a7:da:2a:2a:20:38:a6:22:5e:6f:36:43:24: dc:0d:63:42:64:87:e1:4c:12:66:5f:d0:b5:26:6e: 85:c5:ad:a8:10:c3:07:aa:11:99:cc:b8:a9:91:82: a5:b6:61:bb:ae:ed:b1:6f:a5:5d:63:9d:23:a7:8e: 2c:a7:e9:9a:4d:f1:54:6c:8f:ff:bd:9e:5b:aa:b0: 71:ce:a4:60:30:51:dd:ff:41:ac:14:77:94:62:c5: bf:14:20:14:e4:17:01:38:43:86:89:c1:c0:f5:bd: 48:7b:27:86:fd:f9:23:ca:02:1d:eb:6c:74:11:49: 9e:36:45:40:f6:6b:4c:c3:9d:8d:53:d9:69:a9:40: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:79:FD:A4:D7:AF:D8:94:A7:76:98:E8:0F:9E:99:7C:85:FC:B5:DC X509v3 Authority Key Identifier: keyid:7C:B2:6F:76:42:FD:6B:4C:BF:35:FB:EE:45:5F:1E:FB:0C:9F:0A:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/7CB26F7642FD6B4CBF35FBEE455F1EFB0C9F0A45.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/1/AS401507.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:7584:6000::/36 Signature Algorithm: sha256WithRSAEncryption 49:62:76:70:51:19:fc:ef:66:22:5b:12:73:d2:71:01:34:bf: cc:f2:7d:dd:14:c3:18:73:96:df:57:76:d0:44:2b:50:4e:54: e4:95:e6:f4:06:ae:f5:82:27:35:dd:bb:99:45:4a:04:fc:cd: 2b:7c:5a:8f:5c:ac:a1:fc:2b:aa:58:91:72:20:da:25:fd:ff: 69:ab:85:bb:fa:5a:74:ad:2b:c9:ec:59:af:10:48:57:b0:eb: 02:b1:71:f1:27:ec:16:21:de:c6:56:7c:47:b8:0a:7c:8c:7d: bd:0c:18:b6:16:45:f6:21:3b:df:7e:ca:16:02:12:f9:6d:74: 4d:1c:c7:bc:2b:a0:ff:60:23:ea:ab:8b:25:a5:70:8a:6a:cb: 3b:21:c6:e2:21:86:aa:2a:91:07:b2:47:8f:dd:a1:25:83:07: f0:e4:5b:8e:d7:55:7d:f1:bc:f3:67:24:39:4b:6a:ac:06:21: 4a:95:aa:3d:a3:cd:07:c3:e5:9e:36:d0:ad:72:5a:4d:42:06: 0e:47:87:7a:64:6f:88:3e:f1:9c:87:e7:81:f9:2f:6c:6d:a0: 5a:08:6c:ad:b5:19:df:e4:66:77:ff:a5:2d:ba:ea:39:83:38: c2:50:1c:17:e3:88:ff:5e:ac:83:6d:ca:ab:f4:0e:27:85:97: 2b:70:61:52 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgIUCy4gT70aZ9EEtOnkbTQX5xqTdpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NCMjZGNzY0MkZENkI0Q0JGMzVGQkVFNDU1RjFFRkIw QzlGMEE0NTAeFw0yNTA2MTUwMjI1MDRaFw0yNjA2MTQwMjMwMDRaMDMxMTAvBgNV BAMTKDkzNzlGREE0RDdBRkQ4OTRBNzc2OThFODBGOUU5OTdDODVGQ0I1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm5T6a0SucIa5DyZIN21dn7dM2 WfInMAjI6+js3AmpJiqKlFsdQD2jaqjekIy3A9awHT1RJg4rhVQWCyHtrYYpn0Nv Yca5zKajpgJNrftlrPjW/m22XMVcgtuP5qPWeOyuT/N9kBRPqAUEg5hBbcrl7tYc 6YynJuv0p9oqKiA4piJebzZDJNwNY0Jkh+FMEmZf0LUmboXFragQwweqEZnMuKmR gqW2Ybuu7bFvpV1jnSOnjiyn6ZpN8VRsj/+9nluqsHHOpGAwUd3/QawUd5Rixb8U IBTkFwE4Q4aJwcD1vUh7J4b9+SPKAh3rbHQRSZ42RUD2a0zDnY1T2WmpQKl5AgMB AAGjggIsMIICKDAdBgNVHQ4EFgQUk3n9pNev2JSndpjoD56ZfIX8tdwwHwYDVR0j BBgwFoAUfLJvdkL9a0y/NfvuRV8e+wyfCkUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMS83Q0IyNkY3NjQy RkQ2QjRDQkYzNUZCRUU0NTVGMUVGQjBDOUYwQTQ1LmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5Lzg5MjcwZjZjLWEzZmUtNDI5OS1iMDc5LTMwOWVkOTdm MzgyNC8wLzdDQjI2Rjc2NDJGRDZCNENCRjM1RkJFRTQ1NUYxRUZCMEM5RjBBNDUu Y2VyMHAGCCsGAQUFBwELBGQwYjBgBggrBgEFBQcwC4ZUcnN5bmM6Ly9ycGtpLXJw cy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEw ZWE2Njg3LzEvQVM0MDE1MDcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw IQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQqFHWEYDANBgkqhkiG9w0BAQsF AAOCAQEASWJ2cFEZ/O9mIlsSc9JxATS/zPJ93RTDGHOW31d20EQrUE5U5JXm9Aau 9YInNd27mUVKBPzNK3xaj1ysofwrqliRciDaJf3/aauFu/padK0ryexZrxBIV7Dr ArFx8SfsFiHexlZ8R7gKfIx9vQwYthZF9iE7337KFgIS+W10TRzHvCug/2Aj6quL JaVwimrLOyHG4iGGqiqRB7JHj92hJYMH8ORbjtdVffG882ckOUtqrAYhSpWqPaPN B8PlnjbQrXJaTUIGDkeHemRviD7xnIfngfkvbG2gWghsrbUZ3+Rmd/+lLbrqOYM4 wlAcF+OI/16sg23Kq/QOJ4WXK3BhUg== -----END CERTIFICATE-----Generated at Sun Jun 15 07:45:57 2025 by rpki-client