$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214828.roa File: AS214828.roa (raw, json) Hash identifier: 2e29uU5I49fYzuOLYgOqBt8fNOrf1918yARPolq3S5c= Subject key identifier: D4:10:60:88:C9:59:32:4B:9B:FA:31:3D:52:7D:A1:19:6E:26:15:DA Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 35EA579B36A679D3393FF7C694C3819614B0AB80 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214828.roa Signing time: Sat 29 Mar 2025 01:10:56 +0000 ROA not before: Sat 29 Mar 2025 01:05:56 +0000 ROA not after: Sat 28 Mar 2026 01:10:56 +0000 asID: 214828 IP address blocks: 208.76.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 14:51:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ea:57:9b:36:a6:79:d3:39:3f:f7:c6:94:c3:81:96:14:b0:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 29 01:05:56 2025 GMT Not After : Mar 28 01:10:56 2026 GMT Subject: CN=D4106088C959324B9BFA313D527DA1196E2615DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:16:84:99:e4:8b:48:58:b1:7a:4b:7e:f0:11: 67:6b:1f:4f:62:ca:1b:fc:b1:19:01:2a:3d:01:52: ae:9c:f3:ce:0c:bc:d9:4f:6d:75:7d:21:5b:20:31: 8e:a8:d6:c7:c4:97:2e:b1:1f:dc:c8:b0:5f:6c:6e: 43:75:c7:b8:ff:73:13:57:47:e5:fa:1b:7e:8d:6c: c4:c3:5c:8d:ca:0c:85:38:10:d8:05:cd:0e:7c:00: f9:5f:ba:f4:a8:74:ed:d5:eb:bd:d7:be:d5:40:48: 2f:d2:04:fe:e3:15:3f:9a:f1:06:08:15:fe:99:aa: e7:5e:70:e1:c9:66:96:07:f9:4c:78:8c:a2:c3:6b: cd:b8:82:8c:1a:d2:f6:5d:19:0d:13:28:48:40:2d: 51:fe:8e:94:59:41:e4:ef:c3:99:17:d0:fc:26:65: 15:2f:ba:e9:2d:bb:c9:e7:8d:a9:15:80:01:8b:e1: 5f:6c:8e:d6:1e:6d:26:51:cd:dc:0c:00:7d:6c:bd: 45:58:8d:f2:00:5c:e6:c5:54:5d:43:f3:e5:d3:58: 77:4c:e6:e0:3a:b7:a0:62:2a:e4:00:4f:b8:70:c6: 2d:1b:c7:e2:83:e4:5b:e3:cf:77:a7:89:c5:ce:24: e7:d7:dd:27:4f:87:ef:98:8a:78:5f:e0:9a:2a:5f: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:60:88:C9:59:32:4B:9B:FA:31:3D:52:7D:A1:19:6E:26:15:DA X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214828.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.76.43.0/24 Signature Algorithm: sha256WithRSAEncryption b8:92:5a:5d:8b:2d:25:eb:f0:7c:04:4f:d0:e6:f6:bd:e9:f8: d2:1b:28:0b:e2:53:77:0e:c3:68:33:ee:b7:31:dd:3c:09:7d: f8:68:35:93:71:4d:0a:7a:a3:87:f2:ea:30:40:d9:ff:ac:84: a6:b3:bd:d9:92:b5:58:7b:a2:f6:61:11:96:b9:4e:2f:4e:21: 78:c7:c7:93:78:ef:d7:e0:41:cf:37:4f:ef:34:4b:e8:94:c8: 24:f0:de:2a:06:f3:2c:31:f6:26:bd:33:45:ee:c3:c0:a4:25: 1e:a6:00:fa:8c:7c:db:91:15:6d:25:a9:a1:f5:27:8b:61:d2: 87:9a:18:7d:dd:3e:4e:5f:0e:1b:62:b6:65:ae:da:48:bd:a6: 94:6a:61:39:31:7d:53:06:6b:85:6e:56:a7:70:77:95:5d:be: a1:7d:7a:58:15:41:d5:46:fb:7e:80:db:81:0e:bf:0e:ab:00: e0:57:7a:b5:0f:9f:5a:cf:61:88:81:19:03:72:2f:f1:85:3f: a3:38:75:9e:0d:9d:7d:dc:1d:9d:2f:0b:2c:40:9f:27:12:90: 7b:49:04:6f:43:7f:38:d8:9c:19:34:6e:ab:cf:71:b2:47:9f: bf:a4:31:a7:b4:5b:82:26:fe:f2:26:75:eb:2d:61:80:1a:2e: a4:70:56:67 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUNepXmzamedM5P/fGlMOBlhSwq4AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMzI5MDEwNTU2WhcNMjYwMzI4MDExMDU2 WjAzMTEwLwYDVQQDEyhENDEwNjA4OEM5NTkzMjRCOUJGQTMxM0Q1MjdEQTExOTZF MjYxNURBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xaEmeSLSFix ekt+8BFnax9PYsob/LEZASo9AVKunPPODLzZT211fSFbIDGOqNbHxJcusR/cyLBf bG5Ddce4/3MTV0fl+ht+jWzEw1yNygyFOBDYBc0OfAD5X7r0qHTt1eu9177VQEgv 0gT+4xU/mvEGCBX+marnXnDhyWaWB/lMeIyiw2vNuIKMGtL2XRkNEyhIQC1R/o6U WUHk78OZF9D8JmUVL7rpLbvJ542pFYABi+FfbI7WHm0mUc3cDAB9bL1FWI3yAFzm xVRdQ/Pl01h3TObgOregYirkAE+4cMYtG8fig+Rb4893p4nFziTn190nT4fvmIp4 X+CaKl9jeQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNQQYIjJWTJLm/oxPVJ9oRlu JhXaMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNDgyOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBMKzANBgkqhkiG9w0BAQsFAAOC AQEAuJJaXYstJevwfARP0Ob2ven40hsoC+JTdw7DaDPutzHdPAl9+Gg1k3FNCnqj h/LqMEDZ/6yEprO92ZK1WHui9mERlrlOL04heMfHk3jv1+BBzzdP7zRL6JTIJPDe KgbzLDH2Jr0zRe7DwKQlHqYA+ox825EVbSWpofUni2HSh5oYfd0+Tl8OG2K2Za7a SL2mlGphOTF9UwZrhW5Wp3B3lV2+oX16WBVB1Ub7foDbgQ6/DqsA4Fd6tQ+fWs9h iIEZA3Iv8YU/ozh1ng2dfdwdnS8LLECfJxKQe0kEb0N/ONicGTRuq89xskefv6Qx p7Rbgib+8iZ16y1hgBoupHBWZw== -----END CERTIFICATE-----Generated at Tue Apr 8 17:06:56 2025 by rpki-client