$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa File: AS214654.roa (raw, json) Hash identifier: s3bj+QUbLxh8IxreakbHZSguvGJuNDJeI2OLyP5sOu8= Subject key identifier: 21:1E:E1:32:42:B1:EE:B4:90:C0:56:A4:75:C5:D0:C7:AC:06:A2:C9 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 1D8E85C2BDF10986FC6E6292BD1229A9CC0CE508 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa Signing time: Wed 12 Feb 2025 00:00:27 +0000 ROA not before: Tue 11 Feb 2025 23:55:27 +0000 ROA not after: Wed 11 Feb 2026 00:00:27 +0000 asID: 214654 IP address blocks: 140.99.47.0/24 maxlen: 24 140.99.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:8e:85:c2:bd:f1:09:86:fc:6e:62:92:bd:12:29:a9:cc:0c:e5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Feb 11 23:55:27 2025 GMT Not After : Feb 11 00:00:27 2026 GMT Subject: CN=211EE13242B1EEB490C056A475C5D0C7AC06A2C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:70:61:9f:6a:4c:e1:29:8c:18:01:3c:32:1e: 4c:cd:a5:1e:89:60:57:95:e9:ec:b6:22:29:d0:20: cf:4c:4b:fa:6f:e4:7c:d4:3f:30:69:b0:f7:5e:e7: 30:91:0c:a5:20:84:f6:2d:76:24:21:4e:a7:b5:d7: da:f4:be:fe:00:b7:4b:c4:a2:d7:0e:72:a3:d1:0c: 1a:3a:42:ea:1b:16:ea:58:5f:41:e2:83:27:c8:b5: 0a:1b:02:fe:62:f2:79:e7:6c:d9:74:5e:4f:ba:bb: 26:29:6d:78:9d:90:3c:0b:11:e6:f9:0c:f5:e1:1d: 17:6e:f6:b8:08:50:bc:bd:96:5c:56:5c:8b:06:68: 79:15:7c:39:9d:c6:c7:ec:b9:3f:87:0e:55:eb:f9: 6e:59:ed:d7:1c:1e:b8:40:5a:70:a4:35:56:5d:86: d0:7d:1c:80:4f:fb:ef:2b:5a:8a:88:08:90:09:15: 89:46:e5:27:ec:94:bc:46:66:e8:de:55:59:2c:53: e8:55:49:b4:9c:72:71:01:8d:42:cb:c6:95:fc:ae: 46:f2:a6:a9:b7:70:ef:93:ff:8f:ae:9b:58:b4:43: 58:d6:dd:cd:e9:6c:19:d6:16:2c:94:83:8e:47:e7: 4e:f6:d7:0b:61:57:0f:cc:93:2d:a7:72:17:d6:94: be:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1E:E1:32:42:B1:EE:B4:90:C0:56:A4:75:C5:D0:C7:AC:06:A2:C9 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS214654.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.47.0-140.99.48.255 Signature Algorithm: sha256WithRSAEncryption 25:f1:8f:46:52:2a:d7:8b:f6:61:e0:9d:3d:29:4b:90:5e:1f: 38:f5:04:d9:29:b5:ce:8a:b8:24:98:42:f4:ed:55:b8:f7:d6: 30:08:4d:b2:df:31:13:8e:a8:a8:95:45:56:73:09:fe:73:1a: d4:46:ee:4e:c0:74:e3:e8:16:43:b5:08:65:62:0d:89:1d:b2: 92:d2:1c:f2:19:4d:13:d8:9e:d0:22:f9:12:8c:ca:eb:58:3a: 8f:6e:d2:b9:c4:f2:8b:49:d5:fd:a2:3e:2b:99:f3:ba:9e:ec: 65:62:8b:81:9e:08:e9:4a:98:2f:de:08:66:69:0f:12:66:87: 44:02:75:e8:f7:6b:ad:91:64:f1:9f:d7:ee:13:ec:4a:dd:df: 5d:09:66:3b:24:c8:b5:b6:8a:dc:61:e8:97:4d:ec:0b:ce:de: ab:42:ec:0c:87:ad:02:6c:c2:64:49:2d:78:b8:57:4d:62:f1: 72:b0:b7:60:45:66:d7:b9:60:cf:4d:a6:07:01:a5:e0:0b:14: 93:0a:ce:59:46:0f:21:fc:21:d0:0b:8b:7b:ad:cc:e7:fc:73: 1d:21:f4:09:f6:95:0c:1e:0b:39:ce:86:d3:73:47:c1:f7:ff: 48:6b:7b:79:8f:86:65:80:fb:ae:ac:62:ae:4c:20:48:e2:d0: 84:a5:b4:97 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIUHY6Fwr3xCYb8bmKSvRIpqcwM5QgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMjExMjM1NTI3WhcNMjYwMjExMDAwMDI3 WjAzMTEwLwYDVQQDEygyMTFFRTEzMjQyQjFFRUI0OTBDMDU2QTQ3NUM1RDBDN0FD MDZBMkM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8nBhn2pM4SmM GAE8Mh5MzaUeiWBXlenstiIp0CDPTEv6b+R81D8wabD3XucwkQylIIT2LXYkIU6n tdfa9L7+ALdLxKLXDnKj0QwaOkLqGxbqWF9B4oMnyLUKGwL+YvJ552zZdF5Pursm KW14nZA8CxHm+Qz14R0Xbva4CFC8vZZcVlyLBmh5FXw5ncbH7Lk/hw5V6/luWe3X HB64QFpwpDVWXYbQfRyAT/vvK1qKiAiQCRWJRuUn7JS8Rmbo3lVZLFPoVUm0nHJx AY1Cy8aV/K5G8qapt3Dvk/+PrptYtENY1t3N6WwZ1hYslIOOR+dO9tcLYVcPzJMt p3IX1pS+BwIDAQABo4IChzCCAoMwHQYDVR0OBBYEFCEe4TJCse60kMBWpHXF0Mes BqLJMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIxNDY1NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAn BggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQAjGMvAwQAjGMwMA0GCSqGSIb3 DQEBCwUAA4IBAQAl8Y9GUirXi/Zh4J09KUuQXh849QTZKbXOirgkmEL07VW499Yw CE2y3zETjqiolUVWcwn+cxrURu5OwHTj6BZDtQhlYg2JHbKS0hzyGU0T2J7QIvkS jMrrWDqPbtK5xPKLSdX9oj4rmfO6nuxlYouBngjpSpgv3ghmaQ8SZodEAnXo92ut kWTxn9fuE+xK3d9dCWY7JMi1torcYeiXTewLzt6rQuwMh60CbMJkSS14uFdNYvFy sLdgRWbXuWDPTaYHAaXgCxSTCs5ZRg8h/CHQC4t7rczn/HMdIfQJ9pUMHgs5zobT c0fB9/9Ia3t5j4ZlgPuurGKuTCBI4tCEpbSX -----END CERTIFICATE-----Generated at Sun Apr 6 07:07:12 2025 by rpki-client