$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138888.roa File: AS138888.roa (raw, json) Hash identifier: 56fGS1ZonHtRVgr0weVXJSmgxRGiiWIgocKmDR4VLUI= Subject key identifier: 0F:6A:C3:EB:FD:1D:F2:34:8D:B0:34:68:62:3E:10:9B:D3:2A:E2:FC Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 313A170A8C7C9696FFA40A952A789172694341CA Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138888.roa Signing time: Wed 16 Jul 2025 04:30:59 +0000 ROA not before: Wed 16 Jul 2025 04:25:59 +0000 ROA not after: Wed 15 Jul 2026 04:30:59 +0000 asID: 138888 IP address blocks: 23.95.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 10:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3a:17:0a:8c:7c:96:96:ff:a4:0a:95:2a:78:91:72:69:43:41:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 16 04:25:59 2025 GMT Not After : Jul 15 04:30:59 2026 GMT Subject: CN=0F6AC3EBFD1DF2348DB03468623E109BD32AE2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7c:81:69:20:21:6b:9c:40:76:cf:bf:f4:16: 36:eb:42:b2:e3:18:40:40:5e:9e:ff:2d:6a:49:c3: 22:b0:48:61:a0:47:02:d0:b8:c5:f4:6c:f4:7d:5f: 68:e0:4b:1c:fb:28:3b:04:74:f9:d5:91:4e:44:22: 2c:0f:08:17:f3:a2:af:e3:82:a2:62:eb:1e:5c:06: 93:d3:c2:d3:50:93:85:81:fd:89:00:0a:d8:ed:1e: 5e:61:1e:f2:e0:8c:fa:3a:70:d1:e0:83:95:29:c6: e8:8b:7a:8f:76:75:23:4d:85:c1:39:91:ad:6b:54: 79:e3:ca:97:1d:55:c6:49:94:1a:99:87:8a:e7:65: 51:79:dd:1d:b3:cd:01:11:87:d6:c4:a9:2f:3a:27: e4:36:e3:a2:d6:dd:a4:2a:16:40:20:eb:c7:bd:56: c5:87:ea:0a:08:7d:db:dc:7c:2c:63:9f:ea:8b:24: ea:41:fd:a1:66:81:69:33:f1:a8:2d:0b:6a:82:81: 49:bf:af:71:36:32:45:7a:a5:c8:52:0c:34:6d:b7: d0:92:ce:4e:7a:cd:2d:3a:fd:22:0f:81:75:02:42: de:1b:19:31:a8:bf:fe:3d:f9:3f:17:c8:ae:09:83: 85:dd:20:f8:41:eb:1c:e0:80:35:21:3d:85:1d:1c: d8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:C3:EB:FD:1D:F2:34:8D:B0:34:68:62:3E:10:9B:D3:2A:E2:FC X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS138888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.64.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:5c:71:2f:06:30:e8:51:db:c3:ad:5f:d1:ce:8a:b5:6c:06: 9b:ef:6a:01:ad:c8:a8:21:e2:cb:9f:b2:82:6c:49:ab:e2:62: ab:67:6e:49:dd:e0:83:7a:ae:c8:84:cf:73:f6:97:75:05:f3: 3e:22:e3:44:56:fc:67:6c:d5:63:e1:89:f4:d8:d4:1b:f0:cd: 74:36:bd:5b:01:45:f0:fb:95:a5:0b:76:cd:e0:bc:aa:59:1b: f6:19:91:2e:59:ea:16:06:51:3d:91:b9:ba:1a:f6:c3:76:d6: b0:30:e2:38:eb:9b:88:4a:0f:42:ac:85:ca:61:28:63:66:1d: 52:40:27:b6:c2:60:fb:9f:86:79:54:60:d6:f8:5e:97:7b:73: 41:28:f6:5c:26:6f:27:6f:e6:07:1e:d9:5d:3f:83:dd:69:a0: 64:3a:4b:e3:a8:73:e0:c1:fc:15:92:a9:70:aa:b5:e8:c3:54: 4c:5f:03:75:ca:e5:75:d4:72:68:0d:b9:06:7f:df:79:29:09: 9a:85:35:37:6f:35:dc:6f:73:4e:e3:f7:75:b0:a8:be:7c:24: cb:3e:4c:5c:76:05:80:3e:24:4d:be:6c:c9:15:e2:83:a2:64: e0:5d:9d:96:04:78:67:1a:e0:3c:12:7d:70:2b:12:9e:1f:ac: 7e:36:d0:30 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUMToXCox8lpb/pAqVKniRcmlDQcowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzE2MDQyNTU5WhcNMjYwNzE1MDQzMDU5 WjAzMTEwLwYDVQQDEygwRjZBQzNFQkZEMURGMjM0OERCMDM0Njg2MjNFMTA5QkQz MkFFMkZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXyBaSAha5xA ds+/9BY260Ky4xhAQF6e/y1qScMisEhhoEcC0LjF9Gz0fV9o4Esc+yg7BHT51ZFO RCIsDwgX86Kv44KiYuseXAaT08LTUJOFgf2JAArY7R5eYR7y4Iz6OnDR4IOVKcbo i3qPdnUjTYXBOZGta1R548qXHVXGSZQamYeK52VRed0ds80BEYfWxKkvOifkNuOi 1t2kKhZAIOvHvVbFh+oKCH3b3HwsY5/qiyTqQf2hZoFpM/GoLQtqgoFJv69xNjJF eqXIUgw0bbfQks5Oes0tOv0iD4F1AkLeGxkxqL/+Pfk/F8iuCYOF3SD4Qesc4IA1 IT2FHRzYxwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFA9qw+v9HfI0jbA0aGI+EJvT KuL8MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzEzODg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfQDANBgkqhkiG9w0BAQsFAAOC AQEAbVxxLwYw6FHbw61f0c6KtWwGm+9qAa3IqCHiy5+ygmxJq+Jiq2duSd3gg3qu yITPc/aXdQXzPiLjRFb8Z2zVY+GJ9NjUG/DNdDa9WwFF8PuVpQt2zeC8qlkb9hmR LlnqFgZRPZG5uhr2w3bWsDDiOOubiEoPQqyFymEoY2YdUkAntsJg+5+GeVRg1vhe l3tzQSj2XCZvJ2/mBx7ZXT+D3WmgZDpL46hz4MH8FZKpcKq16MNUTF8DdcrlddRy aA25Bn/feSkJmoU1N2813G9zTuP3dbCovnwkyz5MXHYFgD4kTb5syRXig6Jk4F2d lgR4ZxrgPBJ9cCsSnh+sfjbQMA== -----END CERTIFICATE-----Generated at Sat Jul 26 02:44:01 2025 by rpki-client