$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198949.roa File: AS198949.roa (raw, json) Hash identifier: 53qGUarcNR5UVEkF0oWroclwYdw6Q9T3ngxP69H9pFA= Subject key identifier: 9A:76:0A:83:D2:E5:2F:7A:ED:7F:98:31:7A:0B:9E:BD:56:DB:B0:FA Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 0A6C76D7D8CE779D0A4FCB1BA324EB0890588A12 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198949.roa Signing time: Sat 18 Apr 2026 12:35:59 +0000 ROA not before: Sat 18 Apr 2026 12:30:59 +0000 ROA not after: Sat 17 Apr 2027 12:35:59 +0000 asID: 198949 IP address blocks: 209.200.244.0/23 maxlen: 24 209.200.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 13:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6c:76:d7:d8:ce:77:9d:0a:4f:cb:1b:a3:24:eb:08:90:58:8a:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 18 12:30:59 2026 GMT Not After : Apr 17 12:35:59 2027 GMT Subject: CN=9A760A83D2E52F7AED7F98317A0B9EBD56DBB0FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:2d:aa:c6:4f:7f:6d:d5:df:fa:e7:24:51: 11:0d:08:94:e4:21:f8:9e:bb:b7:ff:29:9f:70:f3: fc:21:4a:eb:87:eb:d9:29:ac:08:89:ed:29:41:50: fb:e0:ae:06:c9:7c:4a:31:52:35:2b:d0:65:b7:97: a6:a2:80:9d:a1:d9:01:91:23:1d:6d:0e:3a:12:ba: 09:f5:88:ff:26:0c:82:15:b6:f1:6b:36:2d:b5:f1: 1f:c1:b6:a0:5e:a2:57:33:29:5b:bd:18:dc:6f:20: 25:ba:b1:39:93:73:4a:8f:10:51:ac:07:ab:aa:8d: 8a:84:19:8d:7e:e2:05:07:ec:4f:a9:6f:b3:33:53: 9b:4b:ea:30:d9:e0:3a:d2:a2:73:00:24:f7:08:f1: aa:ce:75:9a:32:05:6b:da:23:9b:e5:fc:08:54:c9: b9:7f:12:4a:74:e6:94:2e:15:f1:2e:38:35:59:4f: 94:f7:49:d7:76:01:a4:78:78:ec:6f:7b:86:88:02: fe:d1:1a:80:c5:b8:bc:9a:1c:39:04:5c:2f:af:ca: f0:28:25:c7:e0:83:cc:63:60:0b:36:ce:ba:2c:6c: 88:b2:d4:09:f8:86:3f:df:07:9a:5b:e4:72:b5:7a: 00:52:ed:2c:03:f7:96:1a:74:d8:4a:6e:c6:df:5d: a3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:76:0A:83:D2:E5:2F:7A:ED:7F:98:31:7A:0B:9E:BD:56:DB:B0:FA X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.244.0/23 209.200.255.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:ee:b8:2f:75:48:7b:52:f3:b2:c8:16:f3:ea:ce:b1:59:6b: 84:97:18:bc:d7:20:e2:c2:fd:24:b2:7d:a1:49:57:eb:69:16: cd:62:bb:00:61:87:b1:7c:2f:d6:da:09:28:9d:44:94:f4:3d: a7:74:20:1f:dc:73:94:f1:78:eb:17:6e:b6:0e:fe:44:74:a2: cf:22:63:77:79:6f:f8:0c:c7:a4:24:1a:46:f2:b5:25:01:4e: aa:f0:35:76:9b:75:38:ff:e7:af:88:fe:fe:e2:c0:02:c4:5f: 54:07:c1:ca:44:9a:53:20:51:5c:f6:b5:52:a9:c3:08:31:8d: 8a:53:ec:33:81:1f:61:46:38:97:9b:dd:62:20:99:43:75:47: 49:3b:7b:34:a9:cf:62:f3:2f:9e:85:ac:f0:d8:66:99:0f:8c: d9:2b:94:63:10:b7:23:1e:00:51:91:9a:4d:ad:31:3c:4c:0e: 08:cb:c8:f7:cd:93:99:47:0a:55:f3:e6:95:79:e2:33:dc:f3: b7:85:f2:38:2d:80:23:8b:5f:5b:ae:96:95:3a:af:4b:9b:17: de:df:be:c5:c2:d7:15:7a:05:a4:4e:cd:be:16:68:fd:7e:d4: f4:82:f6:be:bf:70:1f:5d:55:dc:9a:4f:ac:4a:57:fc:d9:c5: 3c:64:38:48 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUCmx219jOd50KT8sboyTrCJBYihIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDE4MTIzMDU5WhcNMjcwNDE3MTIzNTU5 WjAzMTEwLwYDVQQDEyg5QTc2MEE4M0QyRTUyRjdBRUQ3Rjk4MzE3QTBCOUVCRDU2 REJCMEZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorMtqsZPf23V 3/rnJFERDQiU5CH4nru3/ymfcPP8IUrrh+vZKawIie0pQVD74K4GyXxKMVI1K9Bl t5emooCdodkBkSMdbQ46EroJ9Yj/JgyCFbbxazYttfEfwbagXqJXMylbvRjcbyAl urE5k3NKjxBRrAerqo2KhBmNfuIFB+xPqW+zM1ObS+ow2eA60qJzACT3CPGqznWa MgVr2iOb5fwIVMm5fxJKdOaULhXxLjg1WU+U90nXdgGkeHjsb3uGiAL+0RqAxbi8 mhw5BFwvr8rwKCXH4IPMY2ALNs66LGyIstQJ+IY/3weaW+RytXoAUu0sA/eWGnTY Sm7G312jXQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFJp2CoPS5S967X+YMXoLnr1W 27D6MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE5ODk0OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAdHI9AMEANHI/zANBgkqhkiG9w0B AQsFAAOCAQEAW+64L3VIe1LzssgW8+rOsVlrhJcYvNcg4sL9JLJ9oUlX62kWzWK7 AGGHsXwv1toJKJ1ElPQ9p3QgH9xzlPF46xdutg7+RHSizyJjd3lv+AzHpCQaRvK1 JQFOqvA1dpt1OP/nr4j+/uLAAsRfVAfBykSaUyBRXPa1UqnDCDGNilPsM4EfYUY4 l5vdYiCZQ3VHSTt7NKnPYvMvnoWs8NhmmQ+M2SuUYxC3Ix4AUZGaTa0xPEwOCMvI 982TmUcKVfPmlXniM9zzt4XyOC2AI4tfW66WlTqvS5sX3t++xcLXFXoFpE7NvhZo /X7U9IL2vr9wH11V3JpPrEpX/NnFPGQ4SA== -----END CERTIFICATE-----Generated at Sun May 10 18:28:22 2026 by rpki-client