$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: ldDSYV19sGiNF9lAOQICZs9vMoxSd15k3mtZOCkjZCw= Subject key identifier: 0F:B4:B2:97:F1:56:13:BA:11:32:6A:75:10:96:58:35:EC:EE:31:A6 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 465577011318DBAAE978344F07C98C70ACC3019E Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa Signing time: Thu 04 Sep 2025 00:06:00 +0000 ROA not before: Thu 04 Sep 2025 00:01:00 +0000 ROA not after: Thu 03 Sep 2026 00:06:00 +0000 asID: 214432 IP address blocks: 40.223.4.0/24 maxlen: 24 40.223.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:55:77:01:13:18:db:aa:e9:78:34:4f:07:c9:8c:70:ac:c3:01:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 4 00:01:00 2025 GMT Not After : Sep 3 00:06:00 2026 GMT Subject: CN=0FB4B297F15613BA11326A7510965835ECEE31A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:47:74:a2:66:66:0b:c1:ea:a6:f9:19:7b:68: d9:ff:6c:3e:fb:b1:90:da:10:d9:19:ab:95:df:5b: 14:bb:ab:cf:50:23:bf:ee:6b:8d:6d:97:c1:56:78: f6:ab:83:79:4f:db:9c:dd:aa:cb:1d:4b:26:12:34: 65:63:77:9d:4d:04:1d:21:8e:95:8c:5e:db:dd:76: 46:29:a5:85:69:53:57:98:99:06:9c:4e:27:e2:5f: e7:0b:80:78:9c:fa:1d:f5:66:e8:6c:95:ba:fd:15: 16:3c:72:1d:63:f2:52:be:c1:cc:d1:e2:86:f1:12: ae:77:ac:f4:39:66:17:5f:52:98:1b:31:48:37:d6: 38:ea:ff:f2:9d:15:ba:5d:4e:91:db:d8:73:3a:c4: 00:10:64:b1:60:66:40:60:3d:92:ce:67:49:a4:5a: 2a:ad:55:a3:5c:39:fa:1b:88:a3:9d:92:b7:64:d3: dd:9b:88:7e:3e:0a:c6:41:4a:3e:d9:d7:dd:97:7c: 89:db:c4:10:46:a9:d6:46:c6:2a:a1:19:0f:e2:9c: ef:0b:52:2f:22:27:53:6f:34:a9:ed:00:fc:bc:5c: 42:d1:76:34:c6:55:63:49:64:92:77:67:b4:9f:8f: fe:c0:bf:44:31:fc:b7:7b:8e:e5:bd:d8:f6:4c:27: c5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:B4:B2:97:F1:56:13:BA:11:32:6A:75:10:96:58:35:EC:EE:31:A6 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.4.0/24 40.223.7.0/24 Signature Algorithm: sha256WithRSAEncryption 55:0a:eb:cd:04:00:d8:6c:e1:6b:6c:ac:fe:a9:5f:46:8a:f1: 2a:f0:0f:cc:80:ec:ee:b2:47:db:17:a8:70:45:94:fc:e1:69: 74:9f:04:c6:76:70:bd:43:2f:af:a8:0f:9b:5e:4e:8b:a4:47: 83:de:c2:dc:0f:2e:9b:a0:11:12:9a:aa:71:5b:02:b3:18:55: 36:00:fc:8d:9d:2f:76:f8:35:23:ae:9d:37:e9:9a:48:ae:ac: 07:5c:6e:90:2f:03:57:b2:5f:14:92:a4:bc:f0:5e:fb:e1:58: fb:63:b3:ef:a9:e7:64:07:59:48:38:58:39:15:c1:f1:f5:a9: b0:68:d4:a5:c6:ce:01:a7:3f:7c:b9:0d:32:62:c6:04:49:10: c1:e9:96:81:06:fe:14:cb:bf:ab:7d:51:7d:ad:bc:cc:c6:b5: 36:b1:37:6d:9f:09:da:40:1d:9c:a1:f8:5e:18:60:1b:f8:0a: 2f:1b:1f:41:55:33:62:87:0c:2a:19:08:09:12:0d:1d:d9:24: 69:e8:ec:2b:8f:e2:e7:1c:0d:7c:17:f7:dd:bb:e5:05:05:33: c4:af:1b:7e:ff:b4:ca:a5:52:8b:49:02:5d:64:59:2f:56:af: 60:14:14:ab:39:b6:4a:61:7b:67:1c:f2:b9:9a:4d:a7:88:5d: a1:83:9f:a7 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIURlV3ARMY26rpeDRPB8mMcKzDAZ4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwOTA0MDAwMTAwWhcNMjYwOTAzMDAwNjAw WjAzMTEwLwYDVQQDEygwRkI0QjI5N0YxNTYxM0JBMTEzMjZBNzUxMDk2NTgzNUVD RUUzMUE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0d0omZmC8Hq pvkZe2jZ/2w++7GQ2hDZGauV31sUu6vPUCO/7muNbZfBVnj2q4N5T9uc3arLHUsm EjRlY3edTQQdIY6VjF7b3XZGKaWFaVNXmJkGnE4n4l/nC4B4nPod9WbobJW6/RUW PHIdY/JSvsHM0eKG8RKud6z0OWYXX1KYGzFIN9Y46v/ynRW6XU6R29hzOsQAEGSx YGZAYD2SzmdJpFoqrVWjXDn6G4ijnZK3ZNPdm4h+PgrGQUo+2dfdl3yJ28QQRqnW RsYqoRkP4pzvC1IvIidTbzSp7QD8vFxC0XY0xlVjSWSSd2e0n4/+wL9EMfy3e47l vdj2TCfFjQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFA+0spfxVhO6ETJqdRCWWDXs 7jGmMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNDQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEACjfBAMEACjfBzANBgkqhkiG9w0B AQsFAAOCAQEAVQrrzQQA2Gzha2ys/qlfRorxKvAPzIDs7rJH2xeocEWU/OFpdJ8E xnZwvUMvr6gPm15Oi6RHg97C3A8um6AREpqqcVsCsxhVNgD8jZ0vdvg1I66dN+ma SK6sB1xukC8DV7JfFJKkvPBe++FY+2Oz76nnZAdZSDhYORXB8fWpsGjUpcbOAac/ fLkNMmLGBEkQwemWgQb+FMu/q31Rfa28zMa1NrE3bZ8J2kAdnKH4XhhgG/gKLxsf QVUzYocMKhkICRINHdkkaejsK4/i5xwNfBf33bvlBQUzxK8bfv+0yqVSi0kCXWRZ L1avYBQUqzm2SmF7ZxzyuZpNp4hdoYOfpw== -----END CERTIFICATE-----Generated at Sat Sep 6 12:29:21 2025 by rpki-client