$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219394.roa File: AS219394.roa (raw, json) Hash identifier: KQb3D0Dn197PIMGn95Lq4Lm+u7/jjiCpZx1hjNVZRe8= Subject key identifier: 8A:25:AF:1B:A3:22:3B:2A:53:CE:D4:80:2F:C9:86:49:62:BB:EA:89 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 589FCD558640283222D812466A53B9F17D41959C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219394.roa Signing time: Mon 31 Aug 2026 15:50:29 +0000 ROA not before: Mon 31 Aug 2026 15:45:29 +0000 ROA not after: Mon 30 Aug 2027 15:50:29 +0000 asID: 219394 IP address blocks: 40.223.16.0/24 maxlen: 24 40.223.21.0/24 maxlen: 24 40.223.22.0/24 maxlen: 24 40.223.81.0/24 maxlen: 24 40.223.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 10:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:9f:cd:55:86:40:28:32:22:d8:12:46:6a:53:b9:f1:7d:41:95:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 31 15:45:29 2026 GMT Not After : Aug 30 15:50:29 2027 GMT Subject: CN=8A25AF1BA3223B2A53CED4802FC9864962BBEA89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:0a:64:5c:ef:9d:df:53:a2:25:b1:2f:83:9c: cd:f5:81:40:18:f7:18:47:8f:a0:bb:d1:0d:70:fb: 55:90:8c:07:d2:85:b8:da:ac:bb:d8:36:55:34:f5: 00:a3:b7:58:c3:88:1b:77:0e:39:e0:ab:66:2f:38: a2:70:be:e4:98:9a:f9:82:51:61:ef:6a:6d:a4:b2: 72:e7:60:cb:6d:96:ef:1a:00:27:e5:76:fb:62:a0: a1:7c:72:ca:9c:a7:03:91:5e:40:db:24:41:62:bf: 44:65:bf:49:18:18:80:c9:d7:b9:85:5c:24:56:2a: 36:ec:ed:5d:c1:aa:c8:41:a5:a0:56:5c:3d:bd:23: 8e:39:2f:ae:e0:cf:9f:c1:0a:7f:5b:63:fe:98:be: aa:3b:04:cf:25:da:2b:dd:e8:ab:6b:4f:fd:af:82: 63:1c:ef:c8:d7:f7:28:2f:e0:16:a6:c2:ea:1b:72: 46:e4:f0:53:e5:91:e1:e1:be:25:ff:05:18:c6:8e: 9c:69:6f:aa:41:52:c5:2c:6a:eb:2d:f2:92:6a:26: ba:39:30:e4:fc:77:91:da:84:1d:95:8b:7c:aa:fd: 53:b9:a7:6b:8e:f6:3c:7f:3a:7f:35:8c:89:19:1c: d2:1e:94:9f:c7:82:be:85:ab:49:5c:68:9c:23:b6: d1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:25:AF:1B:A3:22:3B:2A:53:CE:D4:80:2F:C9:86:49:62:BB:EA:89 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219394.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.16.0/24 40.223.21.0-40.223.22.255 40.223.81.0/24 40.223.83.0/24 Signature Algorithm: sha256WithRSAEncryption 86:29:9f:94:9c:b6:e3:50:07:7a:97:ba:1c:a8:63:fe:85:48: a4:93:6b:88:a4:8f:f1:7f:5a:74:f1:47:7b:d0:4f:e8:ad:f2: 9d:0d:b3:16:5f:ea:dc:1c:fb:62:d4:06:6c:e2:04:db:96:0d: 3d:01:18:85:3c:b9:e4:92:14:6e:91:30:b5:4a:d1:cf:f3:0a: 2c:6b:63:6d:36:24:d3:0a:b0:23:31:ee:86:05:58:8e:96:4c: af:08:5d:95:49:6b:15:d6:b5:de:72:30:05:c4:81:20:2b:85: b8:6b:6e:d2:a4:b4:77:b5:cb:e5:76:6e:e3:6d:3b:57:b4:9c: 71:5f:41:a2:64:4c:5f:a4:19:78:6e:1a:cf:6e:cd:4b:82:cc: 8e:77:fa:0b:8d:5f:8d:b0:5a:cb:68:2d:50:15:bd:35:8e:3b: 84:e6:eb:44:cc:24:b1:96:aa:06:e8:7e:67:b8:c3:a3:54:ef: 9f:58:25:f7:e3:54:97:45:68:20:d8:99:0c:84:6c:cc:e8:39: 60:be:c1:25:ee:a6:46:0d:bf:15:b2:70:1e:3f:f6:8d:16:59: 34:a1:5c:cf:14:e6:79:93:ea:75:f8:4d:bf:ed:04:d1:e9:9b: 54:97:c5:2b:ff:b9:c7:1a:bc:02:5c:05:5a:88:83:74:84:ad: d7:05:ce:b0 -----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIUWJ/NVYZAKDIi2BJGalO58X1BlZwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwODMxMTU0NTI5WhcNMjcwODMwMTU1MDI5 WjAzMTEwLwYDVQQDEyg4QTI1QUYxQkEzMjIzQjJBNTNDRUQ0ODAyRkM5ODY0OTYy QkJFQTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwpkXO+d31Oi JbEvg5zN9YFAGPcYR4+gu9ENcPtVkIwH0oW42qy72DZVNPUAo7dYw4gbdw454Ktm LziicL7kmJr5glFh72ptpLJy52DLbZbvGgAn5Xb7YqChfHLKnKcDkV5A2yRBYr9E Zb9JGBiAyde5hVwkVio27O1dwarIQaWgVlw9vSOOOS+u4M+fwQp/W2P+mL6qOwTP Jdor3eira0/9r4JjHO/I1/coL+AWpsLqG3JG5PBT5ZHh4b4l/wUYxo6caW+qQVLF LGrrLfKSaia6OTDk/HeR2oQdlYt8qv1TuadrjvY8fzp/NYyJGRzSHpSfx4K+hatJ XGicI7bRwQIDAQABo4ICmTCCApUwHQYDVR0OBBYEFIolrxujIjsqU87UgC/Jhkli u+qJMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxOTM5NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5 BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEACjfEDAMAwQAKN8VAwQAKN8WAwQA KN9RAwQAKN9TMA0GCSqGSIb3DQEBCwUAA4IBAQCGKZ+UnLbjUAd6l7ocqGP+hUik k2uIpI/xf1p08Ud70E/orfKdDbMWX+rcHPti1AZs4gTblg09ARiFPLnkkhRukTC1 StHP8wosa2NtNiTTCrAjMe6GBViOlkyvCF2VSWsV1rXecjAFxIEgK4W4a27SpLR3 tcvldm7jbTtXtJxxX0GiZExfpBl4bhrPbs1LgsyOd/oLjV+NsFrLaC1QFb01jjuE 5utEzCSxlqoG6H5nuMOjVO+fWCX341SXRWgg2JkMhGzM6DlgvsEl7qZGDb8VsnAe P/aNFlk0oVzPFOZ5k+p1+E2/7QTR6ZtUl8Ur/7nHGrwCXAVaiIN0hK3XBc6w -----END CERTIFICATE-----Generated at Fri Sep 4 16:28:55 2026 by rpki-client