$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62240.roa File: AS62240.roa (raw, json) Hash identifier: 9D/5wwOP+4xCuODavh3+FXT8JX2zCKNPOTzMn/Mobkw= Subject key identifier: 1F:14:EC:6F:E2:96:7B:02:03:11:DE:E5:59:CF:0C:CE:83:C2:F3:0E Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 6D64C4F9D7EA2460C0128A8B539319D18B4D36A4 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62240.roa Signing time: Wed 21 May 2025 16:51:48 +0000 ROA not before: Wed 21 May 2025 16:46:48 +0000 ROA not after: Wed 20 May 2026 16:51:48 +0000 asID: 62240 IP address blocks: 23.95.161.0/24 maxlen: 24 192.227.203.0/24 maxlen: 24 209.200.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 07:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:64:c4:f9:d7:ea:24:60:c0:12:8a:8b:53:93:19:d1:8b:4d:36:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 21 16:46:48 2025 GMT Not After : May 20 16:51:48 2026 GMT Subject: CN=1F14EC6FE2967B020311DEE559CF0CCE83C2F30E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:13:47:df:ac:0e:df:d8:ba:a8:61:d4:c8:02: a6:44:18:73:e4:59:d8:21:6f:b8:7e:09:36:df:d6: 58:79:21:bc:00:10:7b:6b:3b:8c:e3:13:89:07:d4: 4b:8a:80:7e:bc:a3:fe:0e:57:04:09:2c:98:83:cb: 6f:23:71:f3:f0:3e:f7:fc:98:a9:56:67:25:e3:a5: ad:c1:34:e6:7a:d1:0b:fa:24:21:16:ab:f2:5f:03: d8:46:f8:23:70:a3:c9:d3:bb:7f:e2:c5:a2:e3:39: ed:aa:90:61:7f:6b:61:60:5f:d8:ca:01:ad:29:a9: 7d:ac:0b:96:ce:dc:3f:63:04:00:3c:24:80:04:7b: 38:2c:79:1a:23:a1:50:d7:58:8b:9a:09:d7:56:91: 7d:bb:4b:49:33:a0:85:70:bd:fb:83:04:2c:96:f5: 9b:6e:04:ab:ab:57:3b:c4:27:93:e7:74:8e:15:c1: 97:57:84:92:41:3b:2e:ee:06:f3:68:58:79:1e:ff: 6a:7e:8e:6e:43:93:68:51:47:e5:7a:4f:e6:eb:a1: ec:28:89:8a:3f:8f:9f:4e:25:71:02:5f:66:6e:a9: 99:6d:2e:8a:61:2f:b3:42:d9:06:d8:a5:25:2e:53: 7e:e9:58:1b:fb:fd:6c:c0:4c:c3:27:2a:22:bf:95: da:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:14:EC:6F:E2:96:7B:02:03:11:DE:E5:59:CF:0C:CE:83:C2:F3:0E X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62240.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.161.0/24 192.227.203.0/24 209.200.233.0/24 Signature Algorithm: sha256WithRSAEncryption 91:11:4b:9d:8f:b5:27:c3:52:68:29:96:71:c3:74:43:2f:2e: 90:30:2d:3f:37:ed:2f:1a:49:1a:33:8c:6a:7b:3a:66:1f:5a: c6:e1:fd:d7:f1:8e:af:74:55:28:2b:34:ae:8b:19:db:04:84: e4:46:0a:c5:b7:b8:de:61:d8:f5:2f:f6:3d:86:1a:a3:a8:7d: 47:13:e1:7c:57:d6:e9:3e:a0:47:e9:8c:11:2e:d5:fc:38:78: 75:ef:5c:6b:0d:8b:b5:b3:45:67:1b:01:2f:0f:2e:3b:0f:d9: b4:d0:3d:20:d8:9f:d7:53:73:2f:f1:74:35:61:e9:b7:dd:cb: 25:20:52:3e:4e:95:b5:b1:99:95:c4:d4:34:04:7d:25:15:c7: 34:5c:52:6d:52:93:52:86:37:31:15:b2:e0:a3:87:da:77:32: 26:a1:e5:6c:20:4c:1e:c2:63:d7:9d:04:94:1d:3b:91:42:95: 89:5a:66:79:fa:0a:37:7a:85:c6:3d:9c:04:bb:12:7a:5a:22: 5d:08:5d:0e:b9:ce:7c:12:5d:b6:fe:e3:55:ca:a8:62:b4:d2: 64:b0:be:c4:be:7d:63:a7:ff:4e:95:3f:88:c5:62:b4:27:20: c7:d7:10:53:3d:2c:97:ff:d9:13:d7:0e:57:de:ce:23:cf:70: b8:9d:45:cb -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUbWTE+dfqJGDAEoqLU5MZ0YtNNqQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTIxMTY0NjQ4WhcNMjYwNTIwMTY1MTQ4 WjAzMTEwLwYDVQQDEygxRjE0RUM2RkUyOTY3QjAyMDMxMURFRTU1OUNGMENDRTgz QzJGMzBFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRNH36wO39i6 qGHUyAKmRBhz5FnYIW+4fgk239ZYeSG8ABB7azuM4xOJB9RLioB+vKP+DlcECSyY g8tvI3Hz8D73/JipVmcl46WtwTTmetEL+iQhFqvyXwPYRvgjcKPJ07t/4sWi4znt qpBhf2thYF/YygGtKal9rAuWztw/YwQAPCSABHs4LHkaI6FQ11iLmgnXVpF9u0tJ M6CFcL37gwQslvWbbgSrq1c7xCeT53SOFcGXV4SSQTsu7gbzaFh5Hv9qfo5uQ5No UUflek/m66HsKImKP4+fTiVxAl9mbqmZbS6KYS+zQtkG2KUlLlN+6Vgb+/1swEzD Jyoiv5XaaQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFB8U7G/ilnsCAxHe5VnPDM6D wvMOMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzYyMjQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAF1+hAwQAwOPLAwQA0cjpMA0GCSqG SIb3DQEBCwUAA4IBAQCREUudj7Unw1JoKZZxw3RDLy6QMC0/N+0vGkkaM4xqezpm H1rG4f3X8Y6vdFUoKzSuixnbBITkRgrFt7jeYdj1L/Y9hhqjqH1HE+F8V9bpPqBH 6YwRLtX8OHh171xrDYu1s0VnGwEvDy47D9m00D0g2J/XU3Mv8XQ1Yem33cslIFI+ TpW1sZmVxNQ0BH0lFcc0XFJtUpNShjcxFbLgo4fadzImoeVsIEwewmPXnQSUHTuR QpWJWmZ5+go3eoXGPZwEuxJ6WiJdCF0Ouc58El22/uNVyqhitNJksL7Evn1jp/9O lT+IxWK0JyDH1xBTPSyX/9kT1w5X3s4jz3C4nUXL -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:13 2025 by rpki-client