$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa File: AS214943.roa (raw, json) Hash identifier: Xa8g+ITMML5Dpfk5CIfvG5yMRT05WjawHCNoOfwBAFU= Subject key identifier: CC:E6:ED:B1:EB:B9:CE:32:1C:EA:B6:93:10:3D:DB:72:97:62:2B:89 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 72C44EC4C06F9FF80696DDD2FA5F892CCB1214EA Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa Signing time: Mon 12 May 2025 18:18:31 +0000 ROA not before: Mon 12 May 2025 18:13:31 +0000 ROA not after: Mon 11 May 2026 18:18:31 +0000 asID: 214943 IP address blocks: 66.63.187.0/24 maxlen: 24 107.150.0.0/24 maxlen: 24 155.94.155.0/24 maxlen: 24 167.160.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 01:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:c4:4e:c4:c0:6f:9f:f8:06:96:dd:d2:fa:5f:89:2c:cb:12:14:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 12 18:13:31 2025 GMT Not After : May 11 18:18:31 2026 GMT Subject: CN=CCE6EDB1EBB9CE321CEAB693103DDB7297622B89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:a8:c6:08:70:98:39:f9:ad:0e:b8:2c:0f: 48:c5:fc:37:85:16:8c:66:bd:51:6b:3e:7c:a6:4c: dc:37:c0:02:2e:ef:53:2d:df:d0:c2:68:ea:75:a7: 80:1f:1a:66:0c:c6:f4:e4:05:9d:38:9c:a0:61:47: 9f:a0:3b:0f:8a:77:65:8d:71:93:23:c2:8b:e7:fa: 1c:55:37:0d:1e:1b:60:66:b2:e2:62:4e:14:a7:da: 7e:99:88:c8:43:88:6c:20:b1:38:67:c4:81:63:38: fd:d2:a1:c1:75:7e:42:cf:d6:74:dc:17:1a:b4:64: cd:bc:04:ce:52:f3:ce:84:64:78:99:a8:f4:76:0b: c1:c5:62:3a:48:21:d9:44:1e:43:78:19:3a:b5:3a: 52:52:db:08:f0:e6:aa:bc:9e:f5:5b:7b:83:ad:c3: c0:ba:d6:34:95:2a:ca:28:9d:e3:30:c3:33:d5:ee: 4e:e4:f5:ae:e4:28:c0:d5:a8:19:2a:80:01:82:a8: b8:68:7b:9e:44:21:ef:0b:1c:67:4f:ba:83:f4:78: 2b:c3:e7:e8:16:f4:1d:c5:63:52:94:32:96:16:4e: a9:f8:43:a6:f8:8b:96:72:0a:bc:80:d1:53:29:6c: 6f:a2:63:9e:f0:63:95:fd:bd:be:ed:7a:f8:75:e4: 3c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E6:ED:B1:EB:B9:CE:32:1C:EA:B6:93:10:3D:DB:72:97:62:2B:89 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.63.187.0/24 107.150.0.0/24 155.94.155.0/24 167.160.161.0/24 Signature Algorithm: sha256WithRSAEncryption 11:61:f7:8f:7c:69:f6:53:72:29:ee:b4:51:c9:75:58:6d:bc: 8f:2a:a0:d3:6f:fb:06:98:63:ca:97:ed:fa:24:5f:43:d2:d2: ae:22:aa:53:b7:9c:b7:3e:24:56:a3:fc:88:46:c6:65:94:99: f4:b8:a8:37:cf:1b:55:d8:6d:72:1f:db:91:45:4f:06:97:fc: 09:a1:46:83:3c:65:82:54:e9:c8:ad:fe:08:3b:fa:7e:20:c2: 6c:f8:7b:ed:08:49:f1:1f:80:1e:e5:00:74:3b:67:e9:de:9a: b0:43:55:be:76:b4:e4:ed:4b:73:f9:4e:02:c4:8f:90:0e:3a: f2:ac:b0:30:23:ee:05:03:4a:5b:6e:d0:84:5b:fb:2d:d2:fb: 2b:96:29:41:88:eb:ed:15:a1:58:73:6d:1a:63:9b:98:14:20: e8:68:26:72:65:bf:51:8b:2c:a9:1d:58:e4:69:77:7d:69:ee: 3c:75:5a:bd:27:3d:1c:7b:b9:64:02:2c:96:51:25:70:14:a0: f2:39:c1:58:81:e4:8b:68:07:9b:2c:a1:50:3f:c4:21:1d:8d: 43:09:ce:db:66:ec:35:34:b8:6b:74:5e:09:cf:15:5a:ae:df: 3c:d5:2e:1e:f1:9a:c5:8e:4d:a0:14:6b:88:db:c7:90:9e:2d: d1:86:d4:40 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUcsROxMBvn/gGlt3S+l+JLMsSFOowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTEyMTgxMzMxWhcNMjYwNTExMTgxODMx WjAzMTEwLwYDVQQDEyhDQ0U2RURCMUVCQjlDRTMyMUNFQUI2OTMxMDNEREI3Mjk3 NjIyQjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA6oxghwmDn5 rQ64LA9Ixfw3hRaMZr1Raz58pkzcN8ACLu9TLd/QwmjqdaeAHxpmDMb05AWdOJyg YUefoDsPindljXGTI8KL5/ocVTcNHhtgZrLiYk4Up9p+mYjIQ4hsILE4Z8SBYzj9 0qHBdX5Cz9Z03BcatGTNvATOUvPOhGR4maj0dgvBxWI6SCHZRB5DeBk6tTpSUtsI 8OaqvJ71W3uDrcPAutY0lSrKKJ3jMMMz1e5O5PWu5CjA1agZKoABgqi4aHueRCHv CxxnT7qD9Hgrw+foFvQdxWNSlDKWFk6p+EOm+IuWcgq8gNFTKWxvomOe8GOV/b2+ 7Xr4deQ8OQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFMzm7bHruc4yHOq2kxA923KX YiuJMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNDk0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAEI/uwMEAGuWAAMEAJtemwMEAKeg oTANBgkqhkiG9w0BAQsFAAOCAQEAEWH3j3xp9lNyKe60Ucl1WG28jyqg02/7Bphj ypft+iRfQ9LSriKqU7ectz4kVqP8iEbGZZSZ9LioN88bVdhtch/bkUVPBpf8CaFG gzxlglTpyK3+CDv6fiDCbPh77QhJ8R+AHuUAdDtn6d6asENVvna05O1Lc/lOAsSP kA468qywMCPuBQNKW27QhFv7LdL7K5YpQYjr7RWhWHNtGmObmBQg6GgmcmW/UYss qR1Y5Gl3fWnuPHVavSc9HHu5ZAIsllElcBSg8jnBWIHki2gHmyyhUD/EIR2NQwnO 22bsNTS4a3ReCc8VWq7fPNUuHvGaxY5NoBRriNvHkJ4t0YbUQA== -----END CERTIFICATE-----Generated at Fri Jun 6 06:16:38 2025 by rpki-client