$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400956.roa File: AS400956.roa (raw, json) Hash identifier: ifvsWA+QsUBjxlnEN1dYq5DwHqvqR99TQ9/2qxPadXA= Subject key identifier: CA:7C:8E:37:E9:BA:A9:3C:A6:44:7C:A5:1C:86:66:BE:5A:AD:10:85 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 39B2B9AA67E2111D7068D079C956AB1D73E76C4B Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400956.roa Signing time: Mon 16 Jun 2025 16:06:18 +0000 ROA not before: Mon 16 Jun 2025 16:01:18 +0000 ROA not after: Mon 15 Jun 2026 16:06:18 +0000 asID: 400956 IP address blocks: 140.99.144.0/22 maxlen: 22 140.99.172.0/22 maxlen: 22 140.99.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 02:40:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:b2:b9:aa:67:e2:11:1d:70:68:d0:79:c9:56:ab:1d:73:e7:6c:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jun 16 16:01:18 2025 GMT Not After : Jun 15 16:06:18 2026 GMT Subject: CN=CA7C8E37E9BAA93CA6447CA51C8666BE5AAD1085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b0:29:6e:7c:ec:57:3d:c6:d5:b0:de:d5:e5: da:e8:03:ae:1f:b6:ba:48:a7:39:13:9d:90:60:d3: f4:3d:a5:9f:94:e7:45:da:7e:d9:4c:de:df:09:7b: 72:3e:ee:e6:51:a3:2f:4c:87:b9:a0:58:5a:f6:ba: ff:18:29:73:a1:b3:96:ed:0d:b6:b8:08:28:e2:6c: a9:26:6e:f2:22:56:e2:67:f8:be:eb:5b:7a:0b:72: 86:93:c9:e4:fa:14:2e:d0:df:16:83:aa:9e:e7:15: 0b:e0:68:ba:13:3f:aa:4c:4e:ca:02:05:3d:9d:8e: fd:9d:93:96:ed:36:91:63:99:6b:1e:c0:aa:01:c1: 95:a2:79:e7:bd:65:4d:98:18:46:8c:23:00:17:62: 30:2c:16:66:51:bb:52:85:16:3f:8e:7e:03:6a:ac: 3d:72:bb:af:3c:c5:07:7c:d8:be:64:1d:a7:1a:44: 58:ab:19:24:2a:d9:3e:29:0a:66:b7:30:65:7a:70: e8:70:6a:20:85:f5:90:06:fa:50:67:90:a3:df:4c: 31:b4:61:1e:f2:af:d1:97:65:6e:ac:80:88:97:81: 15:6c:35:f2:ec:34:dd:51:67:53:ae:a4:a8:63:00: 1f:7f:3c:ff:d1:cc:b6:81:0a:88:29:29:dc:33:c2: 77:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7C:8E:37:E9:BA:A9:3C:A6:44:7C:A5:1C:86:66:BE:5A:AD:10:85 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS400956.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.144.0/22 140.99.172.0-140.99.179.255 Signature Algorithm: sha256WithRSAEncryption 90:ef:93:e9:ac:65:58:06:bd:c0:dd:f2:57:9b:00:9f:2e:83: d7:8a:82:70:6d:94:12:04:fe:4b:fd:4b:48:07:a6:0f:f5:22: e3:94:71:aa:c5:d5:9d:cd:a2:c6:c1:9c:95:6c:8e:23:a5:5e: 18:f1:9d:fb:58:29:08:de:d7:6a:ad:76:17:8a:c4:bf:a0:46: a7:10:e3:a8:ec:20:e8:a2:d1:d3:fe:64:5d:83:11:7c:95:09: ec:82:27:c9:d4:3d:71:00:67:a4:73:25:d4:a9:5e:43:54:31: 9c:26:3c:df:4b:43:0d:8d:ec:23:fd:78:85:23:60:51:1c:a4: 5d:47:01:49:40:e6:b6:06:22:f7:5d:f1:4a:98:2e:48:fc:fc: 32:fa:6c:ba:df:38:20:93:54:ea:77:b4:b4:b6:96:7c:11:3b: d1:f1:a4:32:13:0b:10:35:c6:61:60:db:c1:c0:f9:51:4d:f7: 5e:b9:97:8b:e5:ba:43:41:37:71:d3:0f:02:19:eb:7e:28:69: c3:80:0f:ff:8e:66:e3:e6:63:71:b1:59:5b:ce:9b:ff:83:9a: bb:7e:fc:3b:7e:2a:1e:93:8a:79:86:03:4e:e4:f4:0a:c0:81: 3f:6b:0e:db:84:d1:48:c5:00:dd:9f:8f:1c:ea:a6:6a:a3:01: 03:dc:ad:74 -----BEGIN CERTIFICATE----- MIIFjTCCBHWgAwIBAgIUObK5qmfiER1waNB5yVarHXPnbEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNjE2MTYwMTE4WhcNMjYwNjE1MTYwNjE4 WjAzMTEwLwYDVQQDEyhDQTdDOEUzN0U5QkFBOTNDQTY0NDdDQTUxQzg2NjZCRTVB QUQxMDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LApbnzsVz3G 1bDe1eXa6AOuH7a6SKc5E52QYNP0PaWflOdF2n7ZTN7fCXtyPu7mUaMvTIe5oFha 9rr/GClzobOW7Q22uAgo4mypJm7yIlbiZ/i+61t6C3KGk8nk+hQu0N8Wg6qe5xUL 4Gi6Ez+qTE7KAgU9nY79nZOW7TaRY5lrHsCqAcGVonnnvWVNmBhGjCMAF2IwLBZm UbtShRY/jn4Daqw9cruvPMUHfNi+ZB2nGkRYqxkkKtk+KQpmtzBlenDocGoghfWQ BvpQZ5Cj30wxtGEe8q/Rl2VurICIl4EVbDXy7DTdUWdTrqSoYwAffzz/0cy2gQqI KSncM8J3wQIDAQABo4ICjTCCAokwHQYDVR0OBBYEFMp8jjfpuqk8pkR8pRyGZr5a rRCFMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzQwMDk1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAt BggrBgEFBQcBBwEB/wQeMBwwGgQCAAEwFAMEAoxjkDAMAwQCjGOsAwQCjGOwMA0G CSqGSIb3DQEBCwUAA4IBAQCQ75PprGVYBr3A3fJXmwCfLoPXioJwbZQSBP5L/UtI B6YP9SLjlHGqxdWdzaLGwZyVbI4jpV4Y8Z37WCkI3tdqrXYXisS/oEanEOOo7CDo otHT/mRdgxF8lQnsgifJ1D1xAGekcyXUqV5DVDGcJjzfS0MNjewj/XiFI2BRHKRd RwFJQOa2BiL3XfFKmC5I/Pwy+my63zggk1Tqd7S0tpZ8ETvR8aQyEwsQNcZhYNvB wPlRTfdeuZeL5bpDQTdx0w8CGet+KGnDgA//jmbj5mNxsVlbzpv/g5q7fvw7fioe k4p5hgNO5PQKwIE/aw7bhNFIxQDdn48c6qZqowED3K10 -----END CERTIFICATE-----Generated at Sun Jun 29 12:43:36 2025 by rpki-client