$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa File: AS211440.roa (raw, json) Hash identifier: LfVEq8gS02q+FIZZREnQYqfxMxiTOvCqqgfZKWhlhQ8= Subject key identifier: BC:AD:70:BE:91:37:AB:BB:B3:AE:E6:72:39:0E:0C:B3:6C:02:12:D7 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 79FE0BA899F06767502E03C22C51746529DACB05 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa Signing time: Wed 10 Sep 2025 08:17:14 +0000 ROA not before: Wed 10 Sep 2025 08:12:14 +0000 ROA not after: Wed 09 Sep 2026 08:17:14 +0000 asID: 211440 IP address blocks: 23.95.175.0/24 maxlen: 24 67.210.100.0/24 maxlen: 24 67.210.106.0/24 maxlen: 24 67.210.126.0/24 maxlen: 24 74.50.2.0/24 maxlen: 24 74.50.5.0/24 maxlen: 24 209.200.251.0/24 maxlen: 24 209.200.253.0/24 maxlen: 24 209.200.254.0/24 maxlen: 24 216.97.224.0/24 maxlen: 24 216.227.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Sep 2025 02:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fe:0b:a8:99:f0:67:67:50:2e:03:c2:2c:51:74:65:29:da:cb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 10 08:12:14 2025 GMT Not After : Sep 9 08:17:14 2026 GMT Subject: CN=BCAD70BE9137ABBBB3AEE672390E0CB36C0212D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:af:da:ff:7e:b3:e4:5b:b7:4f:a5:04:41:76: f9:fe:e9:9c:a1:18:b8:f5:fd:3b:89:16:38:df:ea: 49:04:44:46:90:51:c4:80:48:09:82:09:44:1a:99: 06:07:32:ad:2b:95:9a:31:f0:9b:fd:dc:b8:8a:8c: 1f:2a:05:00:e0:99:ea:6a:37:8f:ac:75:f3:15:49: 18:ef:b9:0f:f7:f4:69:d5:b7:fc:d5:49:4c:88:d3: 41:77:2e:13:02:2b:b3:17:69:0e:b6:ae:a8:bc:11: 8d:70:91:9b:73:b0:72:65:d5:fc:b5:90:03:fd:39: 43:21:e5:e6:8d:5b:1e:d1:f4:7f:2d:1a:48:e6:d7: 86:3c:d3:de:78:7f:c2:cd:64:c4:5f:26:e6:06:8c: 32:ec:dc:43:77:82:4d:41:77:e5:70:c4:b8:66:08: bf:14:af:46:6b:92:92:43:8c:1c:8c:b1:18:8e:ea: b1:e2:e7:83:1f:ea:65:11:0d:3d:d7:45:2f:bd:92: 13:ce:2e:58:07:8c:03:5e:5b:49:b1:e5:04:db:9b: 7a:85:93:91:0a:07:7e:dc:2b:b6:e0:69:ca:f1:f1: 0a:6e:6c:1a:c0:e5:e2:59:3f:e8:08:3c:ac:22:4c: 61:2c:b2:2e:6c:03:02:b3:29:b0:bc:45:90:67:80: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AD:70:BE:91:37:AB:BB:B3:AE:E6:72:39:0E:0C:B3:6C:02:12:D7 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS211440.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.175.0/24 67.210.100.0/24 67.210.106.0/24 67.210.126.0/24 74.50.2.0/24 74.50.5.0/24 209.200.251.0/24 209.200.253.0-209.200.254.255 216.97.224.0/24 216.227.220.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:45:81:47:e1:91:39:5e:b5:ce:90:01:52:19:60:7c:b3:6f: cd:3d:70:f2:b2:53:78:76:e6:57:59:f7:59:f2:1f:ad:f9:65: 60:d2:61:3a:92:1d:a8:d8:28:2b:26:76:0f:67:a9:fc:91:43: 26:5a:8b:71:ec:4c:19:db:cb:6a:31:e5:46:d0:4b:bc:da:fb: 18:96:57:df:58:e8:9d:8b:58:8f:17:2a:a3:bb:57:76:ef:15: f0:3f:f2:b9:ec:ed:ec:f8:0d:22:bf:50:61:c6:25:44:60:08: ad:7c:04:e2:f9:24:19:86:29:b3:40:58:25:c5:cd:6e:dc:66: 06:9d:b2:ff:52:de:26:b5:38:61:4d:d9:43:87:bf:ba:d9:1b: a1:ab:84:5b:81:eb:3e:9b:44:42:19:fd:1d:8c:3b:0a:da:54: 7b:ae:dc:12:9a:a4:15:94:c0:58:e9:f5:b6:2b:6b:04:e4:9d: 82:67:8c:46:24:62:56:58:04:1c:06:6c:e9:fc:96:f4:fc:bf: 23:d0:6a:71:12:a3:23:5b:03:9f:11:4a:d1:81:60:de:61:2d: 98:21:9a:c6:6a:57:f2:22:d4:93:92:39:5e:1b:34:91:69:13: 9c:34:85:10:93:a4:d6:e0:f3:b0:d6:dd:72:eb:f8:d8:21:9a: b7:10:c7:4e -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIUef4LqJnwZ2dQLgPCLFF0ZSnaywUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTEwMDgxMjE0WhcNMjYwOTA5MDgxNzE0 WjAzMTEwLwYDVQQDEyhCQ0FENzBCRTkxMzdBQkJCQjNBRUU2NzIzOTBFMENCMzZD MDIxMkQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1q/a/36z5Fu3 T6UEQXb5/umcoRi49f07iRY43+pJBERGkFHEgEgJgglEGpkGBzKtK5WaMfCb/dy4 iowfKgUA4JnqajePrHXzFUkY77kP9/Rp1bf81UlMiNNBdy4TAiuzF2kOtq6ovBGN cJGbc7ByZdX8tZAD/TlDIeXmjVse0fR/LRpI5teGPNPeeH/CzWTEXybmBowy7NxD d4JNQXflcMS4Zgi/FK9Ga5KSQ4wcjLEYjuqx4ueDH+plEQ0910UvvZITzi5YB4wD XltJseUE25t6hZORCgd+3Cu24GnK8fEKbmwawOXiWT/oCDysIkxhLLIubAMCsymw vEWQZ4A+FwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFLytcL6RN6u7s67mcjkODLNs AhLXMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMTQ0MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd BggrBgEFBQcBBwEB/wROMEwwSgQCAAEwRAMEABdfrwMEAEPSZAMEAEPSagMEAEPS fgMEAEoyAgMEAEoyBQMEANHI+zAMAwQA0cj9AwQA0cj+AwQA2GHgAwQA2OPcMA0G CSqGSIb3DQEBCwUAA4IBAQAPRYFH4ZE5XrXOkAFSGWB8s2/NPXDyslN4duZXWfdZ 8h+t+WVg0mE6kh2o2CgrJnYPZ6n8kUMmWotx7EwZ28tqMeVG0Eu82vsYllffWOid i1iPFyqju1d27xXwP/K57O3s+A0iv1BhxiVEYAitfATi+SQZhimzQFglxc1u3GYG nbL/Ut4mtThhTdlDh7+62Ruhq4Rbges+m0RCGf0djDsK2lR7rtwSmqQVlMBY6fW2 K2sE5J2CZ4xGJGJWWAQcBmzp/Jb0/L8j0GpxEqMjWwOfEUrRgWDeYS2YIZrGalfy ItSTkjleGzSRaROcNIUQk6TW4POw1t1y6/jYIZq3EMdO -----END CERTIFICATE-----Generated at Tue Sep 16 03:45:49 2025 by rpki-client