$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: gzfYqGo8FjNBUa4J3i2ZwX0N3zfmkRAyaCk12yJ1Plc= Subject key identifier: 97:D1:22:3D:26:1F:2D:06:AC:C4:F1:A2:EF:C7:28:26:5D:AD:A4:6D Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 3072240EA0BF4E5C8394664DF50E175E068BC412 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS205886.roa Signing time: Sat 11 Oct 2025 03:39:58 +0000 ROA not before: Sat 11 Oct 2025 03:34:58 +0000 ROA not after: Sat 10 Oct 2026 03:39:58 +0000 asID: 205886 IP address blocks: 23.226.139.0/24 maxlen: 24 64.50.162.0/24 maxlen: 24 64.50.163.0/24 maxlen: 24 72.11.139.0/24 maxlen: 24 192.228.123.0/24 maxlen: 24 216.227.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Oct 2025 22:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:72:24:0e:a0:bf:4e:5c:83:94:66:4d:f5:0e:17:5e:06:8b:c4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 11 03:34:58 2025 GMT Not After : Oct 10 03:39:58 2026 GMT Subject: CN=97D1223D261F2D06ACC4F1A2EFC728265DADA46D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:67:e1:4b:c1:78:74:0c:6a:06:96:8b:43: 65:44:21:e3:05:6e:86:58:ec:0a:7f:d4:c5:dd:79: 54:5f:1a:ef:b3:a6:44:e0:a5:e1:e5:2b:5c:17:09: 8a:02:13:e9:14:e0:58:0e:b1:fb:7a:f5:02:84:42: 35:40:f0:eb:99:0b:67:fb:1c:9d:fd:a8:ea:88:a0: 0a:58:d3:25:bc:3d:7a:9b:fd:55:7d:98:8b:ef:7c: 87:45:1d:8e:81:53:5f:15:54:56:f1:3d:60:20:0d: 38:6d:f8:e7:3e:3a:50:14:c0:47:d4:01:1b:3c:d3: 44:98:97:7b:44:56:d2:ab:9b:26:86:67:95:f6:25: 1c:cb:1a:24:c7:32:37:7f:f0:11:bc:2a:56:6c:1b: 45:82:93:44:ed:cc:35:8d:73:82:fb:a5:34:57:b3: c8:8c:e1:44:31:77:cf:35:e3:f4:75:41:e9:63:57: 25:03:c3:e0:b7:30:ee:ed:ab:81:be:07:0e:22:1f: 56:1b:8e:73:22:aa:a7:a8:43:2e:e4:33:09:c9:7b: d5:bc:1e:4a:f1:8a:7a:c5:68:7a:90:87:e9:d1:c0: 31:bf:3b:d8:7a:a5:8f:3e:0d:bd:3a:12:d5:45:ab: 44:a1:48:b7:48:48:57:47:7b:d2:2f:93:9b:a5:ed: d1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D1:22:3D:26:1F:2D:06:AC:C4:F1:A2:EF:C7:28:26:5D:AD:A4:6D X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.139.0/24 64.50.162.0/23 72.11.139.0/24 192.228.123.0/24 216.227.217.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:51:e0:c9:f1:b1:3c:43:f0:9d:2f:f7:89:21:75:71:fb:e2: 52:cd:b4:95:ce:40:62:5b:c7:93:73:a7:b2:80:cc:c0:03:88: ee:97:e7:21:d6:cc:1d:f3:02:6b:95:91:18:70:55:3f:2d:02: d9:72:a1:5d:f6:f1:04:ab:a7:5b:6f:60:88:a3:a2:3e:90:d0: f8:b1:2b:c9:94:6e:59:75:e0:1c:29:8d:0c:88:11:df:d9:91: 5a:f0:0c:72:a4:34:78:fe:37:ce:2c:96:d1:81:55:82:3e:73: bf:6d:23:54:ce:14:02:c4:ce:c0:b7:5f:14:82:7f:96:5e:c7: d6:fc:ff:35:70:9c:a3:65:83:76:1e:e0:b2:f4:70:86:45:a2: 3e:21:45:c0:43:6f:bc:eb:cd:09:0c:64:9e:a1:32:21:f0:6d: 36:14:7f:25:0e:6f:1b:4a:54:2e:8d:27:fe:99:14:87:16:1a: 7a:df:8f:d6:4a:10:fe:0a:b2:8f:2c:eb:80:78:bb:85:bc:7c: 5e:7e:37:b8:73:ff:14:d3:74:0f:a4:d8:5d:8e:d7:ba:43:73: ee:6c:db:25:c8:8f:9e:0b:07:55:56:87:53:fe:73:17:39:30: 05:6f:45:e3:63:01:7b:f2:60:12:bc:b7:86:7b:af:c0:3e:53: 9b:2d:0e:04 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUMHIkDqC/TlyDlGZN9Q4XXgaLxBIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDExMDMzNDU4WhcNMjYxMDEwMDMzOTU4 WjAzMTEwLwYDVQQDEyg5N0QxMjIzRDI2MUYyRDA2QUNDNEYxQTJFRkM3MjgyNjVE QURBNDZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG1n4UvBeHQM agaWi0NlRCHjBW6GWOwKf9TF3XlUXxrvs6ZE4KXh5StcFwmKAhPpFOBYDrH7evUC hEI1QPDrmQtn+xyd/ajqiKAKWNMlvD16m/1VfZiL73yHRR2OgVNfFVRW8T1gIA04 bfjnPjpQFMBH1AEbPNNEmJd7RFbSq5smhmeV9iUcyxokxzI3f/ARvCpWbBtFgpNE 7cw1jXOC+6U0V7PIjOFEMXfPNeP0dUHpY1clA8PgtzDu7auBvgcOIh9WG45zIqqn qEMu5DMJyXvVvB5K8Yp6xWh6kIfp0cAxvzvYeqWPPg29OhLVRatEoUi3SEhXR3vS L5Obpe3RFQIDAQABo4IClzCCApMwHQYDVR0OBBYEFJfRIj0mHy0GrMTxou/HKCZd raRtMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwNTg4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEABfiiwMEAUAyogMEAEgLiwMEAMDk ewMEANjj2TANBgkqhkiG9w0BAQsFAAOCAQEAPFHgyfGxPEPwnS/3iSF1cfviUs20 lc5AYlvHk3OnsoDMwAOI7pfnIdbMHfMCa5WRGHBVPy0C2XKhXfbxBKunW29giKOi PpDQ+LEryZRuWXXgHCmNDIgR39mRWvAMcqQ0eP43ziyW0YFVgj5zv20jVM4UAsTO wLdfFIJ/ll7H1vz/NXCco2WDdh7gsvRwhkWiPiFFwENvvOvNCQxknqEyIfBtNhR/ JQ5vG0pULo0n/pkUhxYaet+P1koQ/gqyjyzrgHi7hbx8Xn43uHP/FNN0D6TYXY7X ukNz7mzbJciPngsHVVaHU/5zFzkwBW9F42MBe/JgEry3hnuvwD5Tmy0OBA== -----END CERTIFICATE-----Generated at Sat Oct 18 20:28:41 2025 by rpki-client