$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16589.roa File: AS16589.roa (raw, json) Hash identifier: krfNHX9lZwaPULvOD6r7sVzQga3cnWWc/XH07jSJ4Dg= Subject key identifier: 3D:F0:35:3B:A8:BA:B9:CE:66:0D:F7:14:ED:45:DC:27:02:9C:90:6A Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 146E402EEF80B9D681D4EFFD0573870B5194ED39 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16589.roa Signing time: Thu 19 Jun 2025 09:39:36 +0000 ROA not before: Thu 19 Jun 2025 09:34:36 +0000 ROA not after: Thu 18 Jun 2026 09:39:36 +0000 asID: 16589 IP address blocks: 40.223.122.0/24 maxlen: 24 40.223.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:6e:40:2e:ef:80:b9:d6:81:d4:ef:fd:05:73:87:0b:51:94:ed:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 19 09:34:36 2025 GMT Not After : Jun 18 09:39:36 2026 GMT Subject: CN=3DF0353BA8BAB9CE660DF714ED45DC27029C906A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:60:19:e6:db:01:8a:b8:e3:f3:b2:fd:42:60: c0:0a:91:25:38:67:9f:63:a4:4c:5e:0d:5a:f6:df: 6b:15:5f:c4:49:72:0b:dd:0c:29:a2:b6:21:d7:5b: 51:dc:cf:c5:dd:da:34:a1:ca:26:8c:fe:33:cc:e1: cd:3a:56:51:bb:5d:78:a7:f8:de:37:13:7e:68:54: 10:a0:13:69:f9:a9:49:9c:2e:1e:19:40:7f:60:64: 4b:db:39:f7:b5:c7:8c:39:0f:b1:88:35:9b:4a:e1: cb:78:6d:c3:78:13:9a:1e:24:02:99:9c:c9:e5:e0: 4a:77:4c:2a:8c:26:f4:b5:e4:dc:cc:f4:91:30:dc: ae:ab:06:bc:ce:0a:de:a1:9b:30:02:f3:4b:2b:21: 02:ca:c5:56:7f:46:65:b2:a6:d2:0f:2e:84:db:fa: ba:92:14:63:32:5f:a7:1c:9d:b4:53:87:91:10:ee: bd:29:77:25:93:4a:4d:36:c1:5f:af:69:e5:9d:4c: 2a:1d:d8:74:8e:b9:19:d9:e8:02:1b:4e:a6:d0:c6: 0b:e4:27:ad:ba:6e:c7:28:c7:43:95:96:ee:fa:de: fb:19:70:fa:92:3d:c1:c4:56:ec:1c:84:4d:6d:62: 65:b2:bc:ee:46:2e:4a:ed:39:e0:82:8e:f0:85:6e: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F0:35:3B:A8:BA:B9:CE:66:0D:F7:14:ED:45:DC:27:02:9C:90:6A X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS16589.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.122.0/24 40.223.245.0/24 Signature Algorithm: sha256WithRSAEncryption a6:31:6d:94:f1:5e:fa:ea:e7:79:64:52:33:45:02:c0:f9:1a: 2d:65:3e:0e:c4:9c:58:85:25:74:99:38:a0:fa:76:7e:32:51: c5:e2:c2:3e:4a:ed:0d:50:c4:d3:4d:a9:d9:0f:0b:90:e7:34: fb:ce:24:c3:17:ca:20:6d:72:eb:61:9a:1a:0a:45:df:bf:75: 1d:31:d0:3d:6d:dd:a1:45:d7:71:5c:57:e2:2e:38:3a:7c:91: b9:bb:98:35:18:54:ee:9a:2d:33:e1:12:44:d2:7b:b3:73:a6: 5f:94:41:86:1b:c6:86:17:06:05:1b:2e:2b:af:cf:8f:ef:82: 7a:ab:6d:d9:85:db:b3:b6:3b:84:96:31:d1:98:7b:35:e3:b5: f3:b3:fe:e9:09:17:b1:57:75:4f:b8:98:5c:f2:06:18:f1:01: 7b:67:fc:81:d6:a3:8a:29:ea:bb:7b:1a:89:3b:4f:54:78:0e: 99:8e:84:89:4c:af:ef:5f:4e:1b:b4:6d:13:c4:62:c3:e6:74: 49:e9:8f:0f:89:f3:52:38:43:95:10:7b:f2:fe:74:02:8f:9d: 5c:93:69:a1:29:15:6a:fc:83:f3:5e:03:fc:f7:97:29:68:79: 9a:15:74:77:f1:8b:9e:96:11:3c:1f:4a:71:c2:df:1c:19:93: 72:76:1a:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUFG5ALu+AudaB1O/9BXOHC1GU7TkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjE5MDkzNDM2WhcNMjYwNjE4MDkzOTM2 WjAzMTEwLwYDVQQDEygzREYwMzUzQkE4QkFCOUNFNjYwREY3MTRFRDQ1REMyNzAy OUM5MDZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WAZ5tsBirjj 87L9QmDACpElOGefY6RMXg1a9t9rFV/ESXIL3QwporYh11tR3M/F3do0ocomjP4z zOHNOlZRu114p/jeNxN+aFQQoBNp+alJnC4eGUB/YGRL2zn3tceMOQ+xiDWbSuHL eG3DeBOaHiQCmZzJ5eBKd0wqjCb0teTczPSRMNyuqwa8zgreoZswAvNLKyECysVW f0ZlsqbSDy6E2/q6khRjMl+nHJ20U4eREO69KXclk0pNNsFfr2nlnUwqHdh0jrkZ 2egCG06m0MYL5Cetum7HKMdDlZbu+t77GXD6kj3BxFbsHIRNbWJlsrzuRi5K7Tng go7whW6oxwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFD3wNTuournOZg33FO1F3CcC nJBqMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE2NTg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAKN96AwQAKN/1MA0GCSqGSIb3DQEB CwUAA4IBAQCmMW2U8V766ud5ZFIzRQLA+RotZT4OxJxYhSV0mTig+nZ+MlHF4sI+ Su0NUMTTTanZDwuQ5zT7ziTDF8ogbXLrYZoaCkXfv3UdMdA9bd2hRddxXFfiLjg6 fJG5u5g1GFTumi0z4RJE0nuzc6ZflEGGG8aGFwYFGy4rr8+P74J6q23ZhduztjuE ljHRmHs147Xzs/7pCRexV3VPuJhc8gYY8QF7Z/yB1qOKKeq7exqJO09UeA6ZjoSJ TK/vX04btG0TxGLD5nRJ6Y8PifNSOEOVEHvy/nQCj51ck2mhKRVq/IPzXgP895cp aHmaFXR38YuelhE8H0pxwt8cGZNydhpv -----END CERTIFICATE-----Generated at Sun Jun 29 16:46:18 2025 by rpki-client