$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: eB9Mlw4qnx5YP4heZ37SaKw7SYUVHmiIIuFZ0Xo7M3E= Subject key identifier: FD:1B:49:77:E5:CF:2D:56:33:F3:92:D7:21:7B:AB:D4:03:21:5B:88 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5C649665374B79224ECE56AB7973FB1D5C278E7E Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa Signing time: Mon 21 Jul 2025 00:02:03 +0000 ROA not before: Sun 20 Jul 2025 23:57:03 +0000 ROA not after: Mon 20 Jul 2026 00:02:03 +0000 asID: 214432 IP address blocks: 40.27.13.0/24 maxlen: 24 40.27.14.0/24 maxlen: 24 40.27.15.0/24 maxlen: 24 40.27.16.0/24 maxlen: 24 40.27.18.0/24 maxlen: 24 40.27.24.0/24 maxlen: 24 40.27.109.0/24 maxlen: 24 40.183.92.0/24 maxlen: 24 40.183.93.0/24 maxlen: 24 40.183.158.0/24 maxlen: 24 40.183.159.0/24 maxlen: 24 40.183.215.0/24 maxlen: 24 40.183.253.0/24 maxlen: 24 40.223.4.0/24 maxlen: 24 40.223.5.0/24 maxlen: 24 40.223.7.0/24 maxlen: 24 40.223.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 02:20:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:64:96:65:37:4b:79:22:4e:ce:56:ab:79:73:fb:1d:5c:27:8e:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 20 23:57:03 2025 GMT Not After : Jul 20 00:02:03 2026 GMT Subject: CN=FD1B4977E5CF2D5633F392D7217BABD403215B88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:31:c2:81:4a:58:de:73:e1:70:56:ad:9e:c1: 3c:07:4e:bf:b7:5b:3d:34:ac:7d:85:84:2c:08:e9: 76:6c:c4:e4:10:bc:79:fa:7d:f3:28:4d:00:12:60: 79:e1:ed:cc:07:c7:45:82:eb:37:ad:51:e7:85:0a: 29:be:c1:ae:12:ba:3c:bf:4b:d3:18:47:56:24:8f: 81:4b:03:61:97:12:3a:cd:dd:c3:5a:94:31:f1:f6: 22:c0:1e:d7:94:f2:55:f6:c7:37:00:f7:05:9f:8f: 6b:0a:3a:eb:bf:f9:34:39:d7:c6:d7:e7:88:64:20: 5d:d1:cf:73:d1:16:58:76:36:95:cb:f8:70:57:90: 13:f0:53:be:bf:94:23:36:b3:93:0f:75:92:49:a4: 60:a5:60:ea:f4:dc:04:88:f5:62:63:24:29:8f:9d: 04:cb:4d:61:e6:0f:c4:96:f3:87:25:b6:36:d4:82: 51:d2:5d:97:04:ef:09:2b:af:5a:75:64:bb:e6:3c: aa:e9:07:e1:e9:ae:97:ef:7b:cc:cf:11:2e:71:66: fe:5b:9d:b1:e7:26:fe:e5:80:4d:d8:0a:cb:66:3e: 39:d7:9f:5a:e2:2c:bd:02:7d:54:3a:02:9d:46:89: e8:b3:d9:2a:4d:73:b4:59:c7:1f:05:ab:2e:cf:c9: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1B:49:77:E5:CF:2D:56:33:F3:92:D7:21:7B:AB:D4:03:21:5B:88 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.13.0-40.27.16.255 40.27.18.0/24 40.27.24.0/24 40.27.109.0/24 40.183.92.0/23 40.183.158.0/23 40.183.215.0/24 40.183.253.0/24 40.223.4.0/23 40.223.7.0/24 40.223.9.0/24 Signature Algorithm: sha256WithRSAEncryption 65:8f:2a:28:eb:0c:81:e3:6f:0e:20:11:28:bc:fe:38:ab:cc: 4f:06:e8:2c:aa:87:b8:82:c2:34:62:d3:54:eb:b0:c0:e7:b9: a3:aa:d9:35:47:0b:a6:27:95:24:f0:eb:80:4e:c8:f6:df:d4: f5:15:ff:7a:1e:eb:c8:02:8c:6b:89:63:21:2c:f3:29:b7:34: 53:ea:6f:bf:6f:9e:64:ce:c2:1b:8e:54:28:e5:fa:51:5e:6e: 88:e2:af:70:38:15:8d:ac:92:8f:37:3f:96:f9:02:e3:67:c0: 72:78:49:d9:70:22:67:9b:56:82:ce:76:bb:a9:0a:c1:ad:b6: cd:c8:91:18:42:e3:a6:13:18:e4:6c:d4:53:bb:9d:c7:eb:3a: 0d:be:d7:c8:88:df:0b:c3:12:38:f2:2c:fa:d7:1f:0f:c7:f9: 0d:75:ba:56:d5:15:5a:58:a0:91:14:88:8e:1c:89:4c:3b:45: 91:fc:18:23:5a:30:27:aa:8c:30:87:f0:4a:aa:a8:19:c4:a6: b3:a8:8e:f4:b0:90:60:73:6f:a1:f7:bf:ed:f2:46:8e:62:e1: 5c:36:1f:2d:55:53:66:d0:07:83:7f:71:24:50:5f:7c:96:87: b6:45:f5:0b:62:b0:54:b2:9c:4d:b0:d5:70:0d:d6:fc:6c:1c: af:76:6d:47 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIUXGSWZTdLeSJOzlareXP7HVwnjn4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzIwMjM1NzAzWhcNMjYwNzIwMDAwMjAz WjAzMTEwLwYDVQQDEyhGRDFCNDk3N0U1Q0YyRDU2MzNGMzkyRDcyMTdCQUJENDAz MjE1Qjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DHCgUpY3nPh cFatnsE8B06/t1s9NKx9hYQsCOl2bMTkELx5+n3zKE0AEmB54e3MB8dFgus3rVHn hQopvsGuEro8v0vTGEdWJI+BSwNhlxI6zd3DWpQx8fYiwB7XlPJV9sc3APcFn49r Cjrrv/k0OdfG1+eIZCBd0c9z0RZYdjaVy/hwV5AT8FO+v5QjNrOTD3WSSaRgpWDq 9NwEiPViYyQpj50Ey01h5g/ElvOHJbY21IJR0l2XBO8JK69adWS75jyq6Qfh6a6X 73vMzxEucWb+W52x5yb+5YBN2ArLZj45159a4iy9An1UOgKdRonos9kqTXO0Wccf Basuz8kQ2QIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFP0bSXflzy1WM/OS1yF7q9QD IVuIMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNDQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBj BggrBgEFBQcBBwEB/wRUMFIwUAQCAAEwSjAMAwQAKBsNAwQAKBsQAwQAKBsSAwQA KBsYAwQAKBttAwQBKLdcAwQBKLeeAwQAKLfXAwQAKLf9AwQBKN8EAwQAKN8HAwQA KN8JMA0GCSqGSIb3DQEBCwUAA4IBAQBljyoo6wyB428OIBEovP44q8xPBugsqoe4 gsI0YtNU67DA57mjqtk1RwumJ5Uk8OuATsj239T1Ff96HuvIAoxriWMhLPMptzRT 6m+/b55kzsIbjlQo5fpRXm6I4q9wOBWNrJKPNz+W+QLjZ8ByeEnZcCJnm1aCzna7 qQrBrbbNyJEYQuOmExjkbNRTu53H6zoNvtfIiN8LwxI48iz61x8Px/kNdbpW1RVa WKCRFIiOHIlMO0WR/BgjWjAnqowwh/BKqqgZxKazqI70sJBgc2+h97/t8kaOYuFc Nh8tVVNm0AeDf3EkUF98loe2RfULYrBUspxNsNVwDdb8bByvdm1H -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:35 2025 by rpki-client