$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: n7OzVwZn25OOHJvSGmElgbp5FrugPXRZ+qz+AsoJl0I= Subject key identifier: 59:22:47:71:A9:C2:2D:56:FB:8E:1E:1A:E5:5C:4D:39:23:39:17:EA Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2FF0103415AF2AD7EEE20F88494E5DDED94DFA91 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa Signing time: Thu 03 Apr 2025 06:11:19 +0000 ROA not before: Thu 03 Apr 2025 06:06:19 +0000 ROA not after: Thu 02 Apr 2026 06:11:19 +0000 asID: 212238 IP address blocks: 64.50.188.0/22 maxlen: 22 172.245.102.0/24 maxlen: 24 192.228.124.0/23 maxlen: 23 209.200.252.0/24 maxlen: 24 216.227.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f0:10:34:15:af:2a:d7:ee:e2:0f:88:49:4e:5d:de:d9:4d:fa:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 3 06:06:19 2025 GMT Not After : Apr 2 06:11:19 2026 GMT Subject: CN=59224771A9C22D56FB8E1E1AE55C4D39233917EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:86:0f:ad:19:3e:c5:0e:74:86:9f:81:c7:4c: f9:46:03:0c:9a:d3:2a:dd:25:ec:28:d5:31:28:df: 79:64:07:40:b4:7d:2d:12:26:90:a1:ea:d4:36:a7: 33:ff:f1:d8:73:27:c9:09:db:e8:d0:e4:f4:dd:ae: 85:2a:a9:33:da:16:f5:e8:d4:bd:42:1c:e8:51:b5: a0:25:0e:b5:e0:dc:f3:d0:c3:c5:d3:a1:18:46:17: c5:33:ca:96:2c:9b:c0:f1:c6:2c:0c:b9:fc:cf:28: d4:0d:62:6f:04:56:4a:76:ee:1a:d8:d1:c0:da:02: 94:7f:6d:6f:e2:98:33:cc:2e:e0:d8:ad:43:fb:8d: ce:ae:e7:02:0f:b2:39:f2:3f:62:42:06:66:59:f6: 1b:40:ec:67:2b:25:0d:a1:90:2a:fc:cf:68:c6:35: 49:1a:c6:cb:26:b5:67:b2:b4:08:99:38:63:bf:51: db:9b:a8:7b:b4:44:39:03:21:07:84:0d:c2:22:94: 5b:57:fc:58:5f:1f:4b:1b:dd:5a:5d:b3:14:bb:83: 7f:58:53:03:e8:4a:eb:07:2f:46:70:7c:5e:5a:8e: 57:c3:43:a4:9e:27:2f:70:a0:0d:a1:ba:47:6d:82: 41:c8:11:d3:67:1c:55:ad:88:39:d6:c0:40:1a:45: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:22:47:71:A9:C2:2D:56:FB:8E:1E:1A:E5:5C:4D:39:23:39:17:EA X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.188.0/22 172.245.102.0/24 192.228.124.0/23 209.200.252.0/24 216.227.208.0/22 Signature Algorithm: sha256WithRSAEncryption 28:a8:6b:2c:11:64:f4:ba:16:bc:d4:96:ef:dd:9f:69:97:fb: 5c:d6:14:96:67:e8:25:fb:3a:c4:d1:ac:9b:0f:b7:27:1a:e2: 39:6a:a3:23:4b:4d:eb:ee:fc:eb:af:88:60:2c:9a:82:22:a0: c7:e4:a2:3e:d6:e6:f0:3b:9e:af:88:e1:62:40:1e:f2:e3:29: 9a:9f:b7:04:0d:2a:06:2a:f8:5c:88:f7:7a:10:72:10:26:59: 84:08:e1:26:e4:76:00:36:05:55:11:84:fd:53:e8:0b:89:9b: ac:0b:45:67:63:2c:01:3e:71:25:bb:b5:20:8c:2d:c5:2a:81: df:35:0b:9e:4c:9e:f8:f8:d2:0c:61:34:07:80:f5:11:e3:c7: d8:59:1b:87:2a:ce:3a:30:28:62:bb:cb:dc:50:aa:2f:2a:bb: 4e:e3:0f:a5:95:ae:11:fb:fc:35:89:85:8b:0f:ff:80:6b:75: 8e:f4:16:43:22:00:41:b3:59:58:77:e3:71:28:a9:a0:c7:56: b0:6c:75:03:74:4c:34:8d:ba:17:89:e2:4e:55:f4:b3:99:5c: e7:a1:ad:18:cf:ca:d4:c8:82:09:82:33:af:8f:cf:8a:67:0f: d8:ee:26:03:51:ce:f8:c0:f3:79:ee:2b:b5:d8:07:4c:8f:6b: 84:71:7e:90 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUL/AQNBWvKtfu4g+ISU5d3tlN+pEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDAzMDYwNjE5WhcNMjYwNDAyMDYxMTE5 WjAzMTEwLwYDVQQDEyg1OTIyNDc3MUE5QzIyRDU2RkI4RTFFMUFFNTVDNEQzOTIz MzkxN0VBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoYPrRk+xQ50 hp+Bx0z5RgMMmtMq3SXsKNUxKN95ZAdAtH0tEiaQoerUNqcz//HYcyfJCdvo0OT0 3a6FKqkz2hb16NS9QhzoUbWgJQ614Nzz0MPF06EYRhfFM8qWLJvA8cYsDLn8zyjU DWJvBFZKdu4a2NHA2gKUf21v4pgzzC7g2K1D+43OrucCD7I58j9iQgZmWfYbQOxn KyUNoZAq/M9oxjVJGsbLJrVnsrQImThjv1Hbm6h7tEQ5AyEHhA3CIpRbV/xYXx9L G91aXbMUu4N/WFMD6ErrBy9GcHxeWo5Xw0OknicvcKANobpHbYJByBHTZxxVrYg5 1sBAGkUTGQIDAQABo4IClzCCApMwHQYDVR0OBBYEFFkiR3Gpwi1W+44eGuVcTTkj ORfqMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAkAyvAMEAKz1ZgMEAcDkfAMEANHI /AMEAtjj0DANBgkqhkiG9w0BAQsFAAOCAQEAKKhrLBFk9LoWvNSW792faZf7XNYU lmfoJfs6xNGsmw+3JxriOWqjI0tN6+7866+IYCyagiKgx+SiPtbm8Duer4jhYkAe 8uMpmp+3BA0qBir4XIj3ehByECZZhAjhJuR2ADYFVRGE/VPoC4mbrAtFZ2MsAT5x Jbu1IIwtxSqB3zULnkye+PjSDGE0B4D1EePH2FkbhyrOOjAoYrvL3FCqLyq7TuMP pZWuEfv8NYmFiw//gGt1jvQWQyIAQbNZWHfjcSipoMdWsGx1A3RMNI26F4niTlX0 s5lc56GtGM/K1MiCCYIzr4/PimcP2O4mA1HO+MDzee4rtdgHTI9rhHF+kA== -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:00 2025 by rpki-client