$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa File: AS209888.roa (raw, json) Hash identifier: ZupPIc4lUo/u5D2pNkjahoRsxgIEmFfiicW8jfmRSpk= Subject key identifier: DD:6E:4F:75:37:1D:D9:6C:F7:BE:FC:9F:8C:F3:E2:28:A0:78:96:9A Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 329D982CCF07EAC796D635B550CA57F59E7AA21A Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa Signing time: Tue 05 May 2026 16:41:39 +0000 ROA not before: Tue 05 May 2026 16:36:39 +0000 ROA not after: Tue 04 May 2027 16:41:39 +0000 asID: 209888 IP address blocks: 23.226.138.0/24 maxlen: 24 74.50.12.0/24 maxlen: 24 74.50.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 May 2026 13:11:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:9d:98:2c:cf:07:ea:c7:96:d6:35:b5:50:ca:57:f5:9e:7a:a2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 5 16:36:39 2026 GMT Not After : May 4 16:41:39 2027 GMT Subject: CN=DD6E4F75371DD96CF7BEFC9F8CF3E228A078969A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ef:51:d3:08:2e:c8:b3:af:c9:5a:04:21:2e: 1d:4b:06:3a:77:ce:5b:41:21:cc:5b:9d:2a:4a:51: e5:db:38:ad:bc:db:8d:b9:86:32:5b:dd:2f:d2:42: 4c:86:11:79:cd:11:19:30:84:2e:db:1a:57:ad:72: 17:b5:83:4e:9e:ac:c0:fb:7b:f0:e3:59:ad:3c:bc: b0:cd:db:40:d7:a6:80:f6:ef:f7:da:57:2b:de:f4: 29:71:2a:52:77:43:08:25:38:f1:f5:b9:08:20:c6: 8d:41:7b:a3:09:7b:c6:98:af:63:7a:46:fa:31:8b: d6:d8:f8:7e:11:17:99:92:ef:eb:e7:95:f6:c9:7e: 14:71:0c:b4:dd:93:84:00:53:3a:83:f8:23:0e:46: 7c:29:55:85:0b:2d:10:7f:59:69:27:2a:5f:22:05: 8d:81:97:cc:d5:cb:db:e0:30:83:29:35:93:54:4f: 92:2a:85:48:f3:6b:d0:7d:0c:e7:3a:5f:9a:51:78: 13:16:7d:d4:99:f9:6e:dc:49:bf:95:8b:e0:1f:bb: 83:cc:c9:32:76:ce:8a:dd:6a:b2:af:d2:6f:f0:5e: ee:57:a6:3d:d6:09:e3:06:95:2a:04:33:ac:b8:a0: 95:95:6a:9f:72:a6:60:7c:d1:96:b2:4a:65:d6:44: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6E:4F:75:37:1D:D9:6C:F7:BE:FC:9F:8C:F3:E2:28:A0:78:96:9A X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS209888.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.138.0/24 74.50.12.0/24 74.50.15.0/24 Signature Algorithm: sha256WithRSAEncryption b9:5b:e1:4f:9d:47:4f:79:93:15:c7:70:c5:b4:3e:ee:21:f7: af:d4:dd:b4:66:95:e0:c7:22:b1:e8:89:ff:08:27:04:a0:1e: c6:2e:08:86:d3:dd:15:67:8f:d1:3d:0b:54:b9:66:7c:94:cd: 92:8b:d4:88:bf:ee:59:70:38:e0:3c:58:a0:50:b2:2c:2a:37: eb:49:69:6e:62:e2:d9:14:17:c7:66:fd:dd:7d:b1:db:e8:14: e7:fc:b4:5b:a5:e5:df:15:25:a6:73:a0:2d:72:e5:cc:8c:93: 02:26:02:c6:a1:de:a4:97:a3:58:6d:77:ff:bf:bd:97:b7:54: 51:fb:61:72:c7:db:8b:13:e3:d1:99:05:f9:bf:53:bf:80:8f: c3:28:da:de:75:c6:bb:a0:1a:ec:2c:a4:52:4d:99:25:2a:0f: 9d:b8:10:f5:81:4f:79:b0:97:b4:b4:9b:ec:42:99:f7:a3:d6: 36:7d:f8:8c:5b:b0:a5:23:02:ed:95:c7:06:6f:01:6e:3a:86: af:50:ba:05:95:5d:4b:e0:52:26:76:0e:fa:38:c1:5f:b2:dc: ef:22:59:2e:a1:b2:7e:3b:6b:e5:96:98:fc:4c:80:81:c5:5f: b2:86:29:1e:61:99:47:9c:77:ed:a0:c3:e5:02:2f:f3:2a:57: d0:dd:13:06 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUMp2YLM8H6seW1jW1UMpX9Z56ohowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNTA1MTYzNjM5WhcNMjcwNTA0MTY0MTM5 WjAzMTEwLwYDVQQDEyhERDZFNEY3NTM3MUREOTZDRjdCRUZDOUY4Q0YzRTIyOEEw Nzg5NjlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7O9R0wguyLOv yVoEIS4dSwY6d85bQSHMW50qSlHl2zitvNuNuYYyW90v0kJMhhF5zREZMIQu2xpX rXIXtYNOnqzA+3vw41mtPLywzdtA16aA9u/32lcr3vQpcSpSd0MIJTjx9bkIIMaN QXujCXvGmK9jekb6MYvW2Ph+EReZku/r55X2yX4UcQy03ZOEAFM6g/gjDkZ8KVWF Cy0Qf1lpJypfIgWNgZfM1cvb4DCDKTWTVE+SKoVI82vQfQznOl+aUXgTFn3Umflu 3Em/lYvgH7uDzMkyds6K3Wqyr9Jv8F7uV6Y91gnjBpUqBDOsuKCVlWqfcqZgfNGW skpl1kQziQIDAQABo4ICizCCAocwHQYDVR0OBBYEFN1uT3U3Hdls9778n4zz4iig eJaaMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwOTg4OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEABfiigMEAEoyDAMEAEoyDzANBgkq hkiG9w0BAQsFAAOCAQEAuVvhT51HT3mTFcdwxbQ+7iH3r9TdtGaV4MciseiJ/wgn BKAexi4IhtPdFWeP0T0LVLlmfJTNkovUiL/uWXA44DxYoFCyLCo360lpbmLi2RQX x2b93X2x2+gU5/y0W6Xl3xUlpnOgLXLlzIyTAiYCxqHepJejWG13/7+9l7dUUfth csfbixPj0ZkF+b9Tv4CPwyja3nXGu6Aa7CykUk2ZJSoPnbgQ9YFPebCXtLSb7EKZ 96PWNn34jFuwpSMC7ZXHBm8BbjqGr1C6BZVdS+BSJnYO+jjBX7Lc7yJZLqGyfjtr 5ZaY/EyAgcVfsoYpHmGZR5x37aDD5QIv8ypX0N0TBg== -----END CERTIFICATE-----Generated at Sun May 10 18:27:33 2026 by rpki-client