$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219393.roa File: AS219393.roa (raw, json) Hash identifier: GvFwbAbVcT3edC4HjOc4P8wVXg8kvflUKALdl1ycLBM= Subject key identifier: 4A:16:49:91:20:24:91:72:FD:33:EE:46:23:89:B8:C4:1A:CA:60:49 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 68505B7F030C9C20C3009535A24C2A18C58549CF Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219393.roa Signing time: Mon 31 Aug 2026 15:50:29 +0000 ROA not before: Mon 31 Aug 2026 15:45:29 +0000 ROA not after: Mon 30 Aug 2027 15:50:29 +0000 asID: 219393 IP address blocks: 40.223.16.0/24 maxlen: 24 40.223.21.0/24 maxlen: 24 40.223.22.0/24 maxlen: 24 40.223.81.0/24 maxlen: 24 40.223.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:50:5b:7f:03:0c:9c:20:c3:00:95:35:a2:4c:2a:18:c5:85:49:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 31 15:45:29 2026 GMT Not After : Aug 30 15:50:29 2027 GMT Subject: CN=4A16499120249172FD33EE462389B8C41ACA6049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c2:9f:98:15:b3:aa:4f:38:a2:35:ae:b9:67: ed:e0:e4:7d:46:d5:82:34:86:49:33:75:bd:23:2e: 1a:c4:3e:18:c8:5b:ee:21:c3:b7:c6:5d:34:cc:65: fb:f8:d7:eb:89:76:3b:c5:42:73:3e:c7:39:3e:9b: 25:95:a7:36:ab:c3:1b:85:3b:82:85:d0:ac:1a:ae: d4:63:fe:df:a2:fd:7b:fc:0e:df:cc:77:43:fd:71: 4a:3a:80:79:c7:6f:8f:58:3f:fb:09:82:e7:22:32: e0:5c:e5:c4:c7:4b:62:e7:09:09:06:87:f3:31:1f: f5:20:20:0a:81:08:62:de:73:95:02:91:9e:bc:4a: 0b:65:03:18:16:57:69:65:a6:ce:4c:d6:26:a6:0b: f2:48:c2:85:dc:4b:96:50:73:8a:8a:7d:19:5c:8b: 03:52:f5:c2:a9:10:4b:74:d5:0c:7c:b5:fb:dd:8d: b9:3d:13:89:dd:1b:b8:d4:99:a6:32:c5:cc:c1:9a: 5f:b2:d6:50:d2:c0:3d:28:9d:76:ab:4a:fc:ec:53: 24:ae:76:dc:0d:b1:ee:c5:b1:07:9c:75:53:62:58: 89:43:28:8a:f9:81:86:e8:50:0b:2d:43:6a:34:12: 43:90:0b:db:51:39:76:b0:12:7f:1a:fa:98:63:3b: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:16:49:91:20:24:91:72:FD:33:EE:46:23:89:B8:C4:1A:CA:60:49 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219393.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.16.0/24 40.223.21.0-40.223.22.255 40.223.81.0/24 40.223.83.0/24 Signature Algorithm: sha256WithRSAEncryption b7:d8:cf:e5:a6:c1:15:bf:fe:c9:64:2d:f5:f1:4b:2d:48:44: 02:46:dc:ca:d1:aa:4b:bc:09:98:97:01:0a:5b:b1:87:0e:6c: b5:ea:b7:75:b8:20:5a:18:d8:47:42:5b:6e:8c:12:9b:36:35: 19:c0:ed:47:93:53:e3:bc:b0:7f:66:66:83:37:7a:da:f7:56: 85:1c:3f:47:ad:04:d4:31:a5:35:33:f7:d4:94:24:74:a9:2b: ef:dd:fb:fd:c4:d0:c0:ac:07:5e:00:80:06:b6:bb:1c:cf:8b: 94:f4:3b:85:d6:ca:3a:fa:f9:cd:e8:1f:5e:e6:fb:b3:74:9c: 33:35:28:17:85:02:13:bd:e7:7c:15:33:fd:cf:49:e9:ba:8e: fd:a9:4c:7e:bb:c3:0b:98:07:8b:9e:9e:b4:29:9e:7a:b4:a0: 31:c7:51:4b:54:68:83:32:31:23:94:f8:e3:08:59:a8:95:13: 73:7f:ad:b2:a8:56:4e:11:07:94:c7:e4:54:42:cd:c5:06:02: 28:78:8f:5e:b4:41:64:77:86:12:46:97:60:f5:85:ef:fc:de: 25:91:8e:ff:d8:a1:e3:6d:9e:ff:17:b2:58:f5:fb:69:cf:e3: 80:cf:bd:45:cd:37:4d:98:34:43:07:66:79:5d:91:da:ad:58: da:2b:14:86 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUaFBbfwMMnCDDAJU1okwqGMWFSc8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODMxMTU0NTI5WhcNMjcwODMwMTU1MDI5 WjAzMTEwLwYDVQQDEyg0QTE2NDk5MTIwMjQ5MTcyRkQzM0VFNDYyMzg5QjhDNDFB Q0E2MDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8KfmBWzqk84 ojWuuWft4OR9RtWCNIZJM3W9Iy4axD4YyFvuIcO3xl00zGX7+NfriXY7xUJzPsc5 Ppsllac2q8MbhTuChdCsGq7UY/7fov17/A7fzHdD/XFKOoB5x2+PWD/7CYLnIjLg XOXEx0ti5wkJBofzMR/1ICAKgQhi3nOVApGevEoLZQMYFldpZabOTNYmpgvySMKF 3EuWUHOKin0ZXIsDUvXCqRBLdNUMfLX73Y25PROJ3Ru41JmmMsXMwZpfstZQ0sA9 KJ12q0r87FMkrnbcDbHuxbEHnHVTYliJQyiK+YGG6FALLUNqNBJDkAvbUTl2sBJ/ GvqYYzvmywIDAQABo4ICmTCCApUwHQYDVR0OBBYEFEoWSZEgJJFy/TPuRiOJuMQa ymBJMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxOTM5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5 BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEACjfEDAMAwQAKN8VAwQAKN8WAwQA KN9RAwQAKN9TMA0GCSqGSIb3DQEBCwUAA4IBAQC32M/lpsEVv/7JZC318UstSEQC RtzK0apLvAmYlwEKW7GHDmy16rd1uCBaGNhHQltujBKbNjUZwO1Hk1PjvLB/ZmaD N3ra91aFHD9HrQTUMaU1M/fUlCR0qSvv3fv9xNDArAdeAIAGtrscz4uU9DuF1so6 +vnN6B9e5vuzdJwzNSgXhQITved8FTP9z0npuo79qUx+u8MLmAeLnp60KZ56tKAx x1FLVGiDMjEjlPjjCFmolRNzf62yqFZOEQeUx+RUQs3FBgIoeI9etEFkd4YSRpdg 9YXv/N4lkY7/2KHjbZ7/F7JY9ftpz+OAz71FzTdNmDRDB2Z5XZHarVjaKxSG -----END CERTIFICATE-----Generated at Fri Sep 4 16:28:56 2026 by rpki-client