$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa File: AS214943.roa (raw, json) Hash identifier: 5dnyiD31h59ADkt6fzvtEFVeRXebatW/7ovXVpwkj2U= Subject key identifier: 9F:5C:CC:B7:08:F1:6A:86:07:E2:DC:92:E0:D7:B8:51:A0:82:F7:C0 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4352A05F9CE5733831B32649DEC026EA5D6DAA1E Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa Signing time: Wed 16 Jul 2025 19:06:37 +0000 ROA not before: Wed 16 Jul 2025 19:01:37 +0000 ROA not after: Wed 15 Jul 2026 19:06:37 +0000 asID: 214943 IP address blocks: 23.94.58.0/24 maxlen: 24 66.63.187.0/24 maxlen: 24 72.11.141.0/24 maxlen: 24 96.47.225.0/24 maxlen: 24 104.168.80.0/24 maxlen: 24 107.150.0.0/24 maxlen: 24 107.174.46.0/24 maxlen: 24 155.94.155.0/24 maxlen: 24 155.94.185.0/24 maxlen: 24 167.160.161.0/24 maxlen: 24 198.23.161.0/24 maxlen: 24 204.152.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 13:16:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:52:a0:5f:9c:e5:73:38:31:b3:26:49:de:c0:26:ea:5d:6d:aa:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 16 19:01:37 2025 GMT Not After : Jul 15 19:06:37 2026 GMT Subject: CN=9F5CCCB708F16A8607E2DC92E0D7B851A082F7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:48:e2:8b:7c:c7:33:93:29:75:97:75:48:37: 9b:8a:3a:d0:eb:68:88:10:a4:b2:b0:f1:09:a4:37: fe:6e:54:93:31:60:ce:c8:a3:4d:f5:d6:fa:98:73: 9a:4e:54:3c:23:4f:3b:08:c7:81:8e:a7:7a:1c:f9: 88:08:eb:fe:fc:ba:50:4b:65:34:55:fb:db:86:cc: 5b:ca:e7:66:e2:48:69:58:e4:e7:72:e8:8e:82:6b: dc:76:f6:96:fe:6c:3f:cd:fa:30:98:22:86:33:74: 0c:8c:b3:d7:45:1b:e5:43:49:68:f8:90:9b:03:69: e7:fe:10:b6:d4:92:a0:cc:33:e1:ab:fe:a7:77:4a: ab:9b:c4:4a:c6:db:f1:fc:ac:20:d7:d7:30:83:10: da:cf:35:be:bf:6d:3b:e7:92:55:f9:fc:3b:bf:3b: ce:78:aa:3a:df:fe:9d:ba:f1:8f:96:75:59:e1:12: 7a:f5:2c:83:e2:f5:88:84:13:d0:d3:8b:a5:e3:53: 8a:af:97:4c:5e:cc:be:c1:a5:0c:1c:96:67:3c:2f: c5:be:42:8d:e1:5a:d5:e6:a7:ec:30:4d:d2:f1:bc: d4:23:97:8a:d9:82:2d:b3:f2:d2:36:a2:5f:5c:96: 98:79:89:f7:37:bb:26:59:cc:d4:61:74:d6:03:49: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:5C:CC:B7:08:F1:6A:86:07:E2:DC:92:E0:D7:B8:51:A0:82:F7:C0 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.58.0/24 66.63.187.0/24 72.11.141.0/24 96.47.225.0/24 104.168.80.0/24 107.150.0.0/24 107.174.46.0/24 155.94.155.0/24 155.94.185.0/24 167.160.161.0/24 198.23.161.0/24 204.152.199.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:be:5b:33:70:2a:63:54:f9:05:cd:10:82:85:89:82:b8:87: dd:fd:fc:42:5d:d2:d5:d9:5d:2e:a4:41:8f:c9:af:e8:9f:a7: d8:6b:8d:03:3a:08:fe:b4:e6:12:3f:6b:b9:67:cc:2c:3c:c0: df:be:08:d2:c1:df:92:f9:bf:3f:97:02:8a:5f:ca:3f:02:85: 4b:f5:10:47:82:54:b3:40:f6:b0:33:4a:b1:fd:8b:5e:14:8d: e9:1e:59:23:95:40:0c:2c:ce:f9:be:00:9c:37:98:75:e5:b6: 9a:55:a7:38:f6:f8:92:ec:2f:a9:27:01:4b:f1:01:6c:b6:3e: 33:77:06:48:42:22:b8:cf:20:68:ed:c9:6f:ea:71:5f:87:50: a3:cd:6e:f2:91:a2:40:f2:ef:0f:50:fe:df:de:99:1c:47:0e: 8d:72:bc:04:7a:64:14:b1:82:ad:e2:01:1f:12:3c:e1:7e:b5: 2f:64:3e:20:2a:6a:5a:67:d5:85:ee:43:e7:16:b9:75:0a:c3: 11:d2:7d:5c:40:0f:8c:00:69:46:11:54:f2:cb:95:f2:f6:ac: 2e:f2:50:55:26:8e:4a:14:ac:72:07:a5:97:25:73:a6:e2:6a: d4:c0:ac:cd:05:5c:e1:ed:8b:93:5d:9b:e8:22:60:ef:e7:85: 1b:56:07:20 -----BEGIN CERTIFICATE----- MIIFwTCCBKmgAwIBAgIUQ1KgX5zlczgxsyZJ3sAm6l1tqh4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzE2MTkwMTM3WhcNMjYwNzE1MTkwNjM3 WjAzMTEwLwYDVQQDEyg5RjVDQ0NCNzA4RjE2QTg2MDdFMkRDOTJFMEQ3Qjg1MUEw ODJGN0MwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0jii3zHM5Mp dZd1SDebijrQ62iIEKSysPEJpDf+blSTMWDOyKNN9db6mHOaTlQ8I087CMeBjqd6 HPmICOv+/LpQS2U0Vfvbhsxbyudm4khpWOTncuiOgmvcdvaW/mw/zfowmCKGM3QM jLPXRRvlQ0lo+JCbA2nn/hC21JKgzDPhq/6nd0qrm8RKxtvx/Kwg19cwgxDazzW+ v20755JV+fw7vzvOeKo63/6duvGPlnVZ4RJ69SyD4vWIhBPQ04ul41OKr5dMXsy+ waUMHJZnPC/FvkKN4VrV5qfsME3S8bzUI5eK2YIts/LSNqJfXJaYeYn3N7smWczU YXTWA0kqzQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFJ9czLcI8WqGB+LckuDXuFGg gvfAMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNDk0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBh BggrBgEFBQcBBwEB/wRSMFAwTgQCAAEwSAMEABdeOgMEAEI/uwMEAEgLjQMEAGAv 4QMEAGioUAMEAGuWAAMEAGuuLgMEAJtemwMEAJteuQMEAKegoQMEAMYXoQMEAMyY xzANBgkqhkiG9w0BAQsFAAOCAQEAb75bM3AqY1T5Bc0QgoWJgriH3f38Ql3S1dld LqRBj8mv6J+n2GuNAzoI/rTmEj9ruWfMLDzA374I0sHfkvm/P5cCil/KPwKFS/UQ R4JUs0D2sDNKsf2LXhSN6R5ZI5VADCzO+b4AnDeYdeW2mlWnOPb4kuwvqScBS/EB bLY+M3cGSEIiuM8gaO3Jb+pxX4dQo81u8pGiQPLvD1D+396ZHEcOjXK8BHpkFLGC reIBHxI84X61L2Q+ICpqWmfVhe5D5xa5dQrDEdJ9XEAPjABpRhFU8suV8vasLvJQ VSaOShSscgellyVzpuJq1MCszQVc4e2Lk12b6CJg7+eFG1YHIA== -----END CERTIFICATE-----Generated at Fri Jul 25 00:36:34 2025 by rpki-client