$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa File: AS399519.roa (raw, json) Hash identifier: zuiyKjlnul6VgbcuR8SQLrndpwc33+gipmr854CJ1e0= Subject key identifier: 4D:88:CB:C5:6E:F8:9E:9E:44:A3:33:A9:AF:C0:D0:9F:67:AE:95:19 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 646EC054C1C66C0B62F56FF3C02F373A13724CC5 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa Signing time: Fri 10 Jan 2025 13:28:23 +0000 ROA not before: Fri 10 Jan 2025 13:23:23 +0000 ROA not after: Fri 09 Jan 2026 13:28:23 +0000 asID: 399519 IP address blocks: 140.99.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 09:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:6e:c0:54:c1:c6:6c:0b:62:f5:6f:f3:c0:2f:37:3a:13:72:4c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jan 10 13:23:23 2025 GMT Not After : Jan 9 13:28:23 2026 GMT Subject: CN=4D88CBC56EF89E9E44A333A9AFC0D09F67AE9519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:90:22:ec:70:7f:02:d9:4b:8e:bb:b9:5b: 03:57:d0:5c:39:2b:65:d4:d9:66:fd:25:6f:fc:d5: ac:93:14:2a:55:cc:ce:90:82:b1:01:39:0c:46:27: 3d:ad:11:3c:4b:e1:89:33:36:16:ac:a3:99:69:c1: ca:0a:7d:9b:86:c6:d3:37:06:4c:dd:b1:d2:8c:57: 65:27:cc:fe:11:cd:7f:00:ff:45:07:dc:d9:02:54: d5:5c:4c:d0:0a:ca:d7:6f:9e:f8:86:51:56:ea:a1: 7d:c8:c0:ed:29:0a:5c:ca:ae:cb:34:77:1b:ed:f1: 92:aa:cf:b3:2a:f0:3d:98:60:e3:b3:8e:dc:ae:c7: b3:c0:4a:1c:37:84:44:49:b7:ca:96:cf:ed:52:7b: a6:16:f0:5e:e8:f5:73:9d:62:b2:fc:b4:0f:86:9d: d3:25:f2:c4:10:be:46:70:40:ac:fd:b6:f5:cc:a5: 43:ed:11:1b:b4:e9:80:fa:b2:7b:ec:25:37:f8:58: 2a:fc:89:ee:c5:34:ee:4b:2c:6e:bd:a7:93:37:5a: af:7e:2f:c0:9e:55:00:27:f5:42:77:aa:0b:7e:33: f1:cc:dd:d6:18:5c:c7:43:88:5d:03:50:76:e4:3f: fe:e2:c6:71:db:bc:50:87:d8:19:06:ca:4d:c0:27: 47:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:88:CB:C5:6E:F8:9E:9E:44:A3:33:A9:AF:C0:D0:9F:67:AE:95:19 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS399519.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.8.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:c8:f1:84:76:c3:9a:3f:ad:37:a1:6f:a0:22:0e:3c:d2:e4: 6f:36:98:65:57:06:98:4e:0c:df:90:ce:57:9e:56:28:a1:0d: e9:d7:28:53:e9:a2:52:18:4f:cf:28:b7:88:9d:ad:12:e9:6b: 72:3f:ce:70:39:6f:cf:6d:94:3d:e5:4c:c1:e4:c4:63:8b:25: a2:f5:01:0a:02:91:2b:35:9b:0f:22:e9:d5:26:14:58:98:98: e0:9d:e3:a8:d0:25:da:58:c8:27:36:f4:8c:8a:59:37:69:25: 3d:cb:b6:3a:5e:b5:c8:0b:5e:e2:b6:f2:08:c8:72:10:68:34: f2:5a:d6:d9:51:08:1d:19:6e:e7:5a:96:d8:af:c4:bc:52:46: 6c:d6:17:c4:0b:ab:de:cb:a4:a1:42:10:dd:2d:ac:d0:e2:42: 37:20:8a:fb:f8:42:96:08:8f:cd:ea:63:ce:59:44:8c:5e:3a: 15:c4:9a:f9:8c:a5:eb:25:6d:05:8b:d5:87:95:96:11:0f:c9: 23:ea:58:9b:77:e1:df:16:6a:e9:d4:3c:a8:ff:0b:25:9d:04: 6e:ef:43:65:98:57:8a:80:7c:d8:1d:ee:68:cc:62:21:51:cd: 42:45:61:da:dc:c2:1a:dd:4e:5f:69:96:f5:89:b0:18:5b:dd: 82:c8:4e:ea -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUZG7AVMHGbAti9W/zwC83OhNyTMUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMTEwMTMyMzIzWhcNMjYwMTA5MTMyODIz WjAzMTEwLwYDVQQDEyg0RDg4Q0JDNTZFRjg5RTlFNDRBMzMzQTlBRkMwRDA5RjY3 QUU5NTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCOQIuxwfwLZ S467uVsDV9BcOStl1Nlm/SVv/NWskxQqVczOkIKxATkMRic9rRE8S+GJMzYWrKOZ acHKCn2bhsbTNwZM3bHSjFdlJ8z+Ec1/AP9FB9zZAlTVXEzQCsrXb574hlFW6qF9 yMDtKQpcyq7LNHcb7fGSqs+zKvA9mGDjs47crsezwEocN4RESbfKls/tUnumFvBe 6PVznWKy/LQPhp3TJfLEEL5GcECs/bb1zKVD7REbtOmA+rJ77CU3+Fgq/InuxTTu SyxuvaeTN1qvfi/AnlUAJ/VCd6oLfjPxzN3WGFzHQ4hdA1B25D/+4sZx27xQh9gZ BspNwCdHtQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFE2Iy8Vu+J6eRKMzqa/A0J9n rpUZMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzM5OTUxOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAoxjCDANBgkqhkiG9w0BAQsFAAOC AQEAO8jxhHbDmj+tN6FvoCIOPNLkbzaYZVcGmE4M35DOV55WKKEN6dcoU+miUhhP zyi3iJ2tEulrcj/OcDlvz22UPeVMweTEY4slovUBCgKRKzWbDyLp1SYUWJiY4J3j qNAl2ljIJzb0jIpZN2klPcu2Ol61yAte4rbyCMhyEGg08lrW2VEIHRlu51qW2K/E vFJGbNYXxAur3sukoUIQ3S2s0OJCNyCK+/hClgiPzepjzllEjF46FcSa+Yyl6yVt BYvVh5WWEQ/JI+pYm3fh3xZq6dQ8qP8LJZ0Ebu9DZZhXioB82B3uaMxiIVHNQkVh 2tzCGt1OX2mW9YmwGFvdgshO6g== -----END CERTIFICATE-----Generated at Sun Apr 6 11:40:37 2025 by rpki-client