$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21743.roa File: AS21743.roa (raw, json) Hash identifier: jMIshyLnl7HCTXXbnCT4kRpsV37Xao1bgMIVGI7kISI= Subject key identifier: 56:A4:9C:1E:14:7B:4F:3E:F1:DE:CC:C3:51:15:32:24:67:1E:AE:B1 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 0257CF1E39597F1A5AC5BE4B62F8AEDF0C95832C Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21743.roa Signing time: Sun 01 Jun 2025 00:02:16 +0000 ROA not before: Sat 31 May 2025 23:57:16 +0000 ROA not after: Sun 31 May 2026 00:02:16 +0000 asID: 21743 IP address blocks: 209.200.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 17:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:57:cf:1e:39:59:7f:1a:5a:c5:be:4b:62:f8:ae:df:0c:95:83:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 31 23:57:16 2025 GMT Not After : May 31 00:02:16 2026 GMT Subject: CN=56A49C1E147B4F3EF1DECCC351153224671EAEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a1:90:ee:8e:43:88:d4:78:2e:b1:c4:c6:41: 24:70:de:31:cc:24:e3:53:4f:e3:62:f1:2c:ea:a4: 9e:e2:6a:dd:fb:ee:00:83:d0:0e:9e:c4:80:3b:fd: 25:de:2d:7d:19:0f:c1:3b:0c:80:a0:ff:e0:b0:d8: e8:7a:26:91:02:3d:d1:aa:b7:c8:16:24:7f:7c:87: 5a:1b:af:a3:39:20:de:45:27:26:0b:c8:53:49:38: 4e:16:fd:07:89:78:d2:bf:ec:19:b4:57:fa:30:48: 87:0a:25:fc:a2:03:a9:d7:f9:53:7d:46:e3:d9:33: 8b:97:dd:99:a5:29:33:5b:4d:8c:4d:3a:6d:fd:77: 2d:cc:81:20:3a:93:21:6b:e7:5c:35:0e:b8:ae:44: eb:f4:d6:2d:25:75:57:ba:ed:7e:20:08:32:c1:98: 04:6d:0d:21:df:b0:5d:46:de:57:29:54:f1:52:85: be:26:9d:c8:b1:f2:fa:36:d4:85:36:2f:b0:c2:1e: 42:27:95:4d:a6:9b:6d:c0:e4:8f:ca:02:1f:e6:34: ed:54:c7:4b:5d:dc:4e:06:c6:90:4f:24:2b:f9:dd: 95:16:ac:b4:f1:9b:a8:4c:53:6f:23:10:c2:58:bd: 84:24:98:56:fb:98:1e:49:36:c9:b2:c3:de:25:3c: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A4:9C:1E:14:7B:4F:3E:F1:DE:CC:C3:51:15:32:24:67:1E:AE:B1 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21743.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.234.0/23 Signature Algorithm: sha256WithRSAEncryption 88:61:6f:53:ab:42:78:3d:e2:14:73:11:77:83:7d:21:f8:22: e9:23:f0:2f:93:5c:7c:4e:a4:e5:e0:39:dc:65:54:dd:43:f7: 2b:17:f1:7e:97:a9:bb:53:df:1b:d4:b3:cf:84:23:ea:63:9f: 9e:d5:bc:89:16:2f:a6:21:cc:3b:1e:11:c9:6f:87:7d:e2:d4: 02:5e:ab:7c:2f:bd:32:82:1b:e9:cc:95:00:25:6c:4a:1e:e1: 32:b0:85:62:54:e7:61:49:cd:d9:3a:f6:5b:4c:d5:73:9e:f7: 1a:cf:83:1c:85:d5:8c:89:8c:33:35:ef:ef:1c:bb:5d:85:c5: 12:4a:1a:b5:b7:21:db:9d:82:84:ee:bd:4a:d8:d0:7d:0d:39: 9e:74:28:9a:4a:ad:53:6b:a0:7e:8d:81:47:a0:6a:81:86:0c: bd:78:2c:05:75:97:32:d1:0e:da:73:cb:e8:74:79:b9:8a:49: b7:79:e0:c4:c5:b4:f1:f7:ff:2b:f6:ed:18:ac:d0:44:39:b1: e4:8a:e2:a2:73:3b:91:2b:ac:fc:b0:f5:07:1e:40:45:1a:c7: e8:a5:46:70:99:b2:ed:a3:49:55:ee:cb:a6:d3:9f:cc:57:a4: c6:2a:7e:63:9f:32:14:ad:5a:2b:aa:58:ae:01:5a:95:9b:62: ee:25:d6:5e -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUAlfPHjlZfxpaxb5LYviu3wyVgywwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTMxMjM1NzE2WhcNMjYwNTMxMDAwMjE2 WjAzMTEwLwYDVQQDEyg1NkE0OUMxRTE0N0I0RjNFRjFERUNDQzM1MTE1MzIyNDY3 MUVBRUIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaGQ7o5DiNR4 LrHExkEkcN4xzCTjU0/jYvEs6qSe4mrd++4Ag9AOnsSAO/0l3i19GQ/BOwyAoP/g sNjoeiaRAj3RqrfIFiR/fIdaG6+jOSDeRScmC8hTSThOFv0HiXjSv+wZtFf6MEiH CiX8ogOp1/lTfUbj2TOLl92ZpSkzW02MTTpt/XctzIEgOpMha+dcNQ64rkTr9NYt JXVXuu1+IAgywZgEbQ0h37BdRt5XKVTxUoW+Jp3IsfL6NtSFNi+wwh5CJ5VNpptt wOSPygIf5jTtVMdLXdxOBsaQTyQr+d2VFqy08ZuoTFNvIxDCWL2EJJhW+5geSTbJ ssPeJTzS9wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFFaknB4Ue08+8d7Mw1EVMiRn Hq6xMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0cjqMA0GCSqGSIb3DQEBCwUAA4IB AQCIYW9Tq0J4PeIUcxF3g30h+CLpI/Avk1x8TqTl4DncZVTdQ/crF/F+l6m7U98b 1LPPhCPqY5+e1byJFi+mIcw7HhHJb4d94tQCXqt8L70yghvpzJUAJWxKHuEysIVi VOdhSc3ZOvZbTNVznvcaz4MchdWMiYwzNe/vHLtdhcUSShq1tyHbnYKE7r1K2NB9 DTmedCiaSq1Ta6B+jYFHoGqBhgy9eCwFdZcy0Q7ac8vodHm5ikm3eeDExbTx9/8r 9u0YrNBEObHkiuKiczuRK6z8sPUHHkBFGsfopUZwmbLto0lV7sum05/MV6TGKn5j nzIUrVorqliuAVqVm2LuJdZe -----END CERTIFICATE-----Generated at Sat Jun 7 04:03:09 2025 by rpki-client