$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS18811.roa File: AS18811.roa (raw, json) Hash identifier: uxxMxerWwd0vy8+g1oYyXnYR580Jcp4k0oC1kAvL3DY= Subject key identifier: DD:FD:68:A8:6B:DE:85:7F:AD:CC:8C:12:F8:AB:F6:42:6B:10:A5:1E Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 2D5C56E0A18D21DDECF1B35AF980E9C7C3E0CD22 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS18811.roa Signing time: Fri 20 Jun 2025 09:35:09 +0000 ROA not before: Fri 20 Jun 2025 09:30:09 +0000 ROA not after: Fri 19 Jun 2026 09:35:09 +0000 asID: 18811 IP address blocks: 40.27.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:5c:56:e0:a1:8d:21:dd:ec:f1:b3:5a:f9:80:e9:c7:c3:e0:cd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 20 09:30:09 2025 GMT Not After : Jun 19 09:35:09 2026 GMT Subject: CN=DDFD68A86BDE857FADCC8C12F8ABF6426B10A51E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:42:d6:53:b9:3e:b6:90:60:7d:12:5a:44:4d: cf:6b:0a:5f:96:40:ad:93:9b:71:f0:cd:2a:1c:5c: 5c:5b:12:63:63:c0:42:78:54:f2:e1:ad:d2:a9:8d: af:f4:d1:85:ef:19:29:0f:c9:65:25:cc:c0:9d:d1: 68:20:70:07:a4:21:ea:98:66:72:03:51:31:ca:2a: cb:78:3d:d5:5c:03:c7:9c:e9:39:fd:f8:5f:56:5a: 1d:64:27:5c:7f:1b:24:44:30:ed:94:c1:ec:e9:a9: 4a:f3:2f:14:32:04:c6:fd:ed:62:60:81:86:07:db: 31:eb:a2:0d:42:f5:1e:2b:84:be:b7:d4:59:b6:95: 59:04:5d:ad:46:31:9f:f6:7b:0f:86:ce:04:13:71: 84:43:cd:4e:dd:3c:20:d6:8d:50:ce:c2:8a:c8:fb: 2c:28:2f:ae:b8:0d:ed:2f:5a:cc:14:0d:b5:3f:92: 2c:49:1b:95:d9:79:f6:27:08:75:44:5b:ab:d8:38: 8e:5f:ee:83:ba:d2:5a:f5:84:03:f1:02:37:46:19: 60:eb:8a:da:36:48:ba:35:a1:f2:80:8d:42:ff:fe: 07:5b:b6:65:46:e5:3f:2b:b0:2c:19:78:b8:8a:c9: c1:62:6b:ea:4e:fa:22:53:7b:a1:7f:1a:11:9b:9d: e5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FD:68:A8:6B:DE:85:7F:AD:CC:8C:12:F8:AB:F6:42:6B:10:A5:1E X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS18811.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.192.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:94:25:24:5e:e6:4b:02:54:48:a3:9b:66:c5:3d:1f:80:80: 31:91:47:69:14:f9:ea:b0:22:4f:ba:d4:d3:0b:61:60:4d:82: f4:32:96:ad:5c:a0:a2:6f:53:77:1a:f1:46:90:cc:8f:2f:70: 5c:25:1d:9e:05:88:af:8d:dc:af:61:de:d4:09:3e:37:61:34: e4:bc:57:3b:d2:2f:7a:49:71:80:e5:1d:96:28:e2:76:bd:de: d3:6c:90:6b:ab:4a:35:7a:75:6b:39:31:6b:21:86:f9:3e:6c: 3a:b0:11:3a:ea:08:c0:b8:bb:ff:f2:dd:06:e9:2d:71:b2:45: 53:38:ed:2b:cf:53:18:50:d4:b8:7e:01:7f:46:92:ff:56:5c: d2:50:8e:e0:c9:96:13:31:19:7a:6b:d6:a0:91:bd:51:7b:68: 4d:dd:02:06:c1:e9:fe:a9:46:f3:30:6c:37:0f:89:66:a1:e8: bb:e9:33:0d:fd:d1:30:c4:15:6e:1b:33:da:82:e8:5b:b5:98: 2a:60:1b:8c:70:28:19:8e:0d:8c:e2:f4:0c:3d:c4:d7:c9:a6: f2:a6:fb:fe:23:b9:09:fa:6a:93:46:a2:34:d8:d0:05:92:e8: 54:60:78:e1:95:09:ea:b9:bc:7d:ae:69:88:56:0a:c7:4d:87: 90:67:99:84 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIULVxW4KGNId3s8bNa+YDpx8PgzSIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjIwMDkzMDA5WhcNMjYwNjE5MDkzNTA5 WjAzMTEwLwYDVQQDEyhEREZENjhBODZCREU4NTdGQURDQzhDMTJGOEFCRjY0MjZC MTBBNTFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnELWU7k+tpBg fRJaRE3PawpflkCtk5tx8M0qHFxcWxJjY8BCeFTy4a3SqY2v9NGF7xkpD8llJczA ndFoIHAHpCHqmGZyA1ExyirLeD3VXAPHnOk5/fhfVlodZCdcfxskRDDtlMHs6alK 8y8UMgTG/e1iYIGGB9sx66INQvUeK4S+t9RZtpVZBF2tRjGf9nsPhs4EE3GEQ81O 3Twg1o1QzsKKyPssKC+uuA3tL1rMFA21P5IsSRuV2Xn2Jwh1RFur2DiOX+6DutJa 9YQD8QI3Rhlg64raNki6NaHygI1C//4HW7ZlRuU/K7AsGXi4isnBYmvqTvoiU3uh fxoRm53lmQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFN39aKhr3oV/rcyMEvir9kJr EKUeMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzE4ODExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKBvAMA0GCSqGSIb3DQEBCwUAA4IB AQAslCUkXuZLAlRIo5tmxT0fgIAxkUdpFPnqsCJPutTTC2FgTYL0MpatXKCib1N3 GvFGkMyPL3BcJR2eBYivjdyvYd7UCT43YTTkvFc70i96SXGA5R2WKOJ2vd7TbJBr q0o1enVrOTFrIYb5Pmw6sBE66gjAuLv/8t0G6S1xskVTOO0rz1MYUNS4fgF/RpL/ VlzSUI7gyZYTMRl6a9agkb1Re2hN3QIGwen+qUbzMGw3D4lmoei76TMN/dEwxBVu GzPaguhbtZgqYBuMcCgZjg2M4vQMPcTXyabypvv+I7kJ+mqTRqI02NAFkuhUYHjh lQnqubx9rmmIVgrHTYeQZ5mE -----END CERTIFICATE-----Generated at Sun Jun 29 16:34:30 2025 by rpki-client