$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa File: AS209737.roa (raw, json) Hash identifier: Lw+HXw1/82BLSWcCSyxGyApz28AYfGxGiC1sdn2pMlQ= Subject key identifier: 2B:AD:2B:EE:0D:E4:E5:85:D1:85:24:0A:A8:73:55:7C:F7:53:43:8C Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 2833B1D2373B95F969C2908E501494B00C35B521 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa Signing time: Tue 08 Jul 2025 22:29:44 +0000 ROA not before: Tue 08 Jul 2025 22:24:44 +0000 ROA not after: Tue 07 Jul 2026 22:29:44 +0000 asID: 209737 IP address blocks: 140.99.44.0/22 maxlen: 24 140.99.180.0/22 maxlen: 24 140.99.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 20:20:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:33:b1:d2:37:3b:95:f9:69:c2:90:8e:50:14:94:b0:0c:35:b5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jul 8 22:24:44 2025 GMT Not After : Jul 7 22:29:44 2026 GMT Subject: CN=2BAD2BEE0DE4E585D185240AA873557CF753438C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cc:a4:e2:98:e4:2b:77:79:f6:be:03:f6:20: 09:85:dc:02:7f:1f:70:90:41:49:42:bf:09:99:4f: 62:d3:3c:52:bd:49:9c:5f:f1:14:f4:7d:97:9e:a6: ae:fa:5a:20:38:0a:99:10:96:16:8f:e3:d7:c9:24: ca:a4:64:d3:5b:73:64:1f:6c:54:82:ac:cd:0b:b6: 3f:29:06:1f:71:4a:9e:32:59:ef:bd:17:2c:e8:6e: 75:d1:3e:55:38:0a:32:1b:3e:fd:e6:ba:8a:fc:f6: ae:d5:9e:05:e9:91:b2:c5:02:58:aa:b1:57:12:66: 2e:41:67:29:48:9d:12:96:8b:bf:81:9c:37:6e:5a: f6:e0:62:d4:f7:79:cc:4a:b6:62:b5:24:0f:e9:88: 5a:e9:74:d8:af:99:71:18:90:8a:bf:3f:ab:ac:7b: b9:26:03:b6:84:87:fb:4e:6a:b5:2f:b4:5e:ed:de: 69:f6:b8:5f:0d:ad:22:05:c9:cb:25:28:fa:5d:e5: db:82:1a:63:e4:9e:df:5e:a6:39:a1:72:aa:66:16: ec:c0:11:14:cf:79:ae:ec:4f:4d:23:d1:18:51:65: e5:47:61:43:78:e2:7d:57:7c:3a:14:b8:04:08:fb: 76:b0:f4:5b:a2:31:58:81:73:de:6d:50:de:f7:a1: 2b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AD:2B:EE:0D:E4:E5:85:D1:85:24:0A:A8:73:55:7C:F7:53:43:8C X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.44.0/22 140.99.180.0/22 140.99.208.0/22 Signature Algorithm: sha256WithRSAEncryption bc:4a:02:f0:32:6c:6a:43:cb:a3:d6:a0:92:92:0d:74:a0:11: 29:45:18:d7:7f:78:8c:c6:65:fc:bf:e1:8c:8e:da:ba:52:05: a9:9c:2b:76:32:b5:65:9d:b5:81:1a:46:33:d2:3f:3a:33:4a: 1f:55:90:00:71:f3:d2:13:c3:10:3e:e0:de:7f:f0:91:e1:b7: 6b:20:5e:f9:53:a9:e5:ee:c9:a8:0c:51:9a:95:63:b6:a1:b2: 00:74:8b:52:81:a1:ec:09:b9:28:5a:cc:e3:39:9f:72:95:cd: 33:21:5b:76:27:1c:2c:20:be:63:5b:13:1b:d9:a2:54:e1:25: 94:fd:0a:2c:c0:20:eb:e5:2b:4c:2e:9e:9b:77:ed:0b:2e:9c: b1:44:b2:f7:57:ce:45:30:58:14:d4:ec:e0:82:fb:18:27:62: 93:c8:96:cd:23:7f:43:1d:2e:bf:90:54:c0:49:b2:69:bd:df: 56:da:cc:4b:2f:4a:8a:a4:25:b0:6b:96:2a:12:a1:97:fb:73: 50:50:7b:1d:ea:73:d9:4d:b9:06:bf:4b:36:ec:16:5f:88:aa: e1:98:47:37:8a:76:ec:4e:0a:f8:c6:85:26:ec:8e:9f:31:f8: ff:ed:be:36:a6:25:03:ac:14:62:d0:b3:79:5c:05:63:22:14: 9c:75:6c:1d -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUKDOx0jc7lflpwpCOUBSUsAw1tSEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNzA4MjIyNDQ0WhcNMjYwNzA3MjIyOTQ0 WjAzMTEwLwYDVQQDEygyQkFEMkJFRTBERTRFNTg1RDE4NTI0MEFBODczNTU3Q0Y3 NTM0MzhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8yk4pjkK3d5 9r4D9iAJhdwCfx9wkEFJQr8JmU9i0zxSvUmcX/EU9H2Xnqau+logOAqZEJYWj+PX ySTKpGTTW3NkH2xUgqzNC7Y/KQYfcUqeMlnvvRcs6G510T5VOAoyGz795rqK/Pau 1Z4F6ZGyxQJYqrFXEmYuQWcpSJ0Slou/gZw3blr24GLU93nMSrZitSQP6Yha6XTY r5lxGJCKvz+rrHu5JgO2hIf7Tmq1L7Re7d5p9rhfDa0iBcnLJSj6XeXbghpj5J7f XqY5oXKqZhbswBEUz3mu7E9NI9EYUWXlR2FDeOJ9V3w6FLgECPt2sPRbojFYgXPe bVDe96ErbQIDAQABo4ICizCCAocwHQYDVR0OBBYEFCutK+4N5OWF0YUkCqhzVXz3 U0OMMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIwOTczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAoxjLAMEAoxjtAMEAoxj0DANBgkq hkiG9w0BAQsFAAOCAQEAvEoC8DJsakPLo9agkpINdKARKUUY1394jMZl/L/hjI7a ulIFqZwrdjK1ZZ21gRpGM9I/OjNKH1WQAHHz0hPDED7g3n/wkeG3ayBe+VOp5e7J qAxRmpVjtqGyAHSLUoGh7Am5KFrM4zmfcpXNMyFbdiccLCC+Y1sTG9miVOEllP0K LMAg6+UrTC6em3ftCy6csUSy91fORTBYFNTs4IL7GCdik8iWzSN/Qx0uv5BUwEmy ab3fVtrMSy9KiqQlsGuWKhKhl/tzUFB7Hepz2U25Br9LNuwWX4iq4ZhHN4p27E4K +MaFJuyOnzH4/+2+NqYlA6wUYtCzeVwFYyIUnHVsHQ== -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:30 2025 by rpki-client