$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402221.roa File: AS402221.roa (raw, json) Hash identifier: xUjuM/shbPqJRQPbmI36Ve3JilymAXHwkIkazLHm58Y= Subject key identifier: 1F:EF:EA:78:DA:06:9A:F7:1F:6B:0B:73:EF:A6:22:B8:4A:87:45:6D Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 01F9FF1A0D66C6D8F682B90E48B97E4260403771 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402221.roa Signing time: Tue 26 May 2026 09:11:08 +0000 ROA not before: Tue 26 May 2026 09:06:08 +0000 ROA not after: Tue 25 May 2027 09:11:08 +0000 asID: 402221 IP address blocks: 64.188.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 30 May 2026 13:34:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:f9:ff:1a:0d:66:c6:d8:f6:82:b9:0e:48:b9:7e:42:60:40:37:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 26 09:06:08 2026 GMT Not After : May 25 09:11:08 2027 GMT Subject: CN=1FEFEA78DA069AF71F6B0B73EFA622B84A87456D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a1:5b:22:26:54:6a:05:e5:a9:1f:65:64:e3: 35:80:83:81:46:02:da:e0:d5:70:b8:47:4e:1d:5c: 27:ee:e9:ad:f5:ca:27:14:90:01:1d:8e:df:1d:b0: 2c:0e:be:94:75:ee:91:86:e2:7b:56:3f:b7:05:b3: e5:4e:fa:d2:f5:66:9e:7f:9d:be:97:d9:7e:6e:ab: 1f:71:95:fa:87:e5:2e:13:e2:34:97:1f:7e:83:03: 08:e4:6e:16:1a:bf:34:f7:fd:57:40:a7:e0:84:93: 86:f7:0a:69:69:02:79:9e:2d:73:8e:bc:43:75:c4: c8:7b:aa:d9:53:a5:b9:9f:ad:b5:46:3e:1b:01:03: db:f7:42:ec:e2:3c:9a:ae:d8:70:cc:ab:d2:9b:06: a0:14:48:b1:8a:38:7b:21:97:67:a1:ba:a2:ae:49: 42:07:d1:42:5d:44:71:28:57:53:5e:e3:f4:cc:c9: df:cd:66:3e:97:0b:da:c0:8a:bb:14:8c:19:81:dd: 8a:91:59:9d:50:3c:90:a8:e6:d1:21:91:bf:12:4c: b9:0f:11:d2:ae:2e:b4:1d:cb:af:d0:6e:45:26:68: 56:87:7c:1a:94:43:ce:23:51:01:9b:a3:84:5d:d5: 19:e5:c4:c8:79:d3:be:cb:39:ef:2b:f1:7c:7d:ab: 6c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:EF:EA:78:DA:06:9A:F7:1F:6B:0B:73:EF:A6:22:B8:4A:87:45:6D X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS402221.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.188.20.0/24 Signature Algorithm: sha256WithRSAEncryption 36:d0:cc:45:68:76:3b:44:0d:0f:b6:5b:9a:a0:5c:08:23:ac: 6a:50:13:71:26:ea:8f:f9:82:34:e5:64:0f:b5:27:56:30:7e: 64:6f:c8:05:a1:2c:eb:5b:77:11:9d:7f:d2:33:52:9d:4e:a9: e6:bc:95:03:09:e6:bd:1a:6c:a5:7b:64:4a:89:da:e6:05:0a: 61:b8:bb:d9:60:ff:6e:66:56:32:46:46:13:3c:5a:9a:14:15: 5f:69:09:09:ad:7b:49:13:1f:da:cc:bb:6c:3e:99:f6:1f:cf: cc:be:4a:b8:b0:02:02:cb:65:bf:df:f2:11:f7:43:d2:7f:f8: 89:c4:be:84:9c:e8:b0:a6:7c:75:35:e2:61:74:28:52:a0:43: 65:65:4a:ab:bd:4d:4d:aa:2a:50:ca:7d:92:4c:9b:c9:61:4f: dc:6d:2b:b3:59:af:96:2d:29:18:dc:09:63:82:da:9f:0d:b8: 7d:49:9b:92:f1:bc:f0:88:d8:6c:84:1a:7b:93:5f:68:df:9c: 0d:ad:b3:49:e7:fa:fd:a9:83:c6:8a:78:db:4e:b2:45:e8:76: 40:94:3c:fb:12:6c:d8:a1:06:93:c9:19:ab:1a:2b:47:81:12: 31:87:47:46:ad:57:81:20:85:e3:9c:e8:2d:d6:85:56:79:fa: 5f:e3:0f:78 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUAfn/Gg1mxtj2grkOSLl+QmBAN3EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNTI2MDkwNjA4WhcNMjcwNTI1MDkxMTA4 WjAzMTEwLwYDVQQDEygxRkVGRUE3OERBMDY5QUY3MUY2QjBCNzNFRkE2MjJCODRB ODc0NTZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaFbIiZUagXl qR9lZOM1gIOBRgLa4NVwuEdOHVwn7umt9conFJABHY7fHbAsDr6Ude6RhuJ7Vj+3 BbPlTvrS9Waef52+l9l+bqsfcZX6h+UuE+I0lx9+gwMI5G4WGr809/1XQKfghJOG 9wppaQJ5ni1zjrxDdcTIe6rZU6W5n621Rj4bAQPb90Ls4jyarthwzKvSmwagFEix ijh7IZdnobqirklCB9FCXURxKFdTXuP0zMnfzWY+lwvawIq7FIwZgd2KkVmdUDyQ qObRIZG/Eky5DxHSri60Hcuv0G5FJmhWh3walEPOI1EBm6OEXdUZ5cTIedO+yznv K/F8fatsLQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFB/v6njaBpr3H2sLc++mIrhK h0VtMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMjIyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAEC8FDANBgkqhkiG9w0BAQsFAAOC AQEANtDMRWh2O0QND7ZbmqBcCCOsalATcSbqj/mCNOVkD7UnVjB+ZG/IBaEs61t3 EZ1/0jNSnU6p5ryVAwnmvRpspXtkSona5gUKYbi72WD/bmZWMkZGEzxamhQVX2kJ Ca17SRMf2sy7bD6Z9h/PzL5KuLACAstlv9/yEfdD0n/4icS+hJzosKZ8dTXiYXQo UqBDZWVKq71NTaoqUMp9kkybyWFP3G0rs1mvli0pGNwJY4Lanw24fUmbkvG88IjY bIQae5NfaN+cDa2zSef6/amDxop4206yReh2QJQ8+xJs2KEGk8kZqxorR4ESMYdH Rq1XgSCF45zoLdaFVnn6X+MPeA== -----END CERTIFICATE-----Generated at Fri May 29 15:27:44 2026 by rpki-client