$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: KJxrrAo79M81GnOANvEoF2vKutg3OQO5hnR6qJwyPRY= Subject key identifier: C4:41:5D:4E:E6:B4:FF:96:CC:D8:CD:D4:8B:16:5F:16:01:3C:47:70 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6B3A64183D43210B40AB99B26F12EEA77B195737 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa Signing time: Tue 24 Jun 2025 16:44:26 +0000 ROA not before: Tue 24 Jun 2025 16:39:26 +0000 ROA not after: Tue 23 Jun 2026 16:44:26 +0000 asID: 214432 IP address blocks: 40.27.12.0/24 maxlen: 24 40.27.13.0/24 maxlen: 24 40.27.14.0/24 maxlen: 24 40.27.15.0/24 maxlen: 24 40.27.16.0/24 maxlen: 24 40.27.18.0/24 maxlen: 24 40.27.109.0/24 maxlen: 24 40.183.92.0/24 maxlen: 24 40.183.93.0/24 maxlen: 24 40.183.158.0/24 maxlen: 24 40.183.159.0/24 maxlen: 24 40.183.253.0/24 maxlen: 24 40.223.4.0/24 maxlen: 24 40.223.5.0/24 maxlen: 24 40.223.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 07:25:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3a:64:18:3d:43:21:0b:40:ab:99:b2:6f:12:ee:a7:7b:19:57:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jun 24 16:39:26 2025 GMT Not After : Jun 23 16:44:26 2026 GMT Subject: CN=C4415D4EE6B4FF96CCD8CDD48B165F16013C4770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:aa:2a:20:55:3c:bd:bc:2e:f6:a7:65:61:4c: d6:e3:97:c2:f5:75:6f:f5:f7:cb:45:32:ae:4a:9c: a4:d6:e8:63:a1:f6:03:71:4d:a5:3d:92:66:3f:d8: e0:3f:c2:cd:1f:5a:ea:fa:4b:d1:63:7d:6e:24:75: 0f:e4:42:c2:a0:9f:af:59:41:88:e9:41:b2:7c:e5: 7b:c6:b5:2b:c2:a4:a2:b8:f1:58:27:80:de:60:87: 5a:f1:5d:0a:0c:fc:6e:e7:62:4e:75:e9:de:7c:7e: 23:5c:90:87:0d:79:64:fd:11:4e:ce:8c:d3:01:0c: 8d:18:94:2e:2c:9f:b4:e8:27:dc:96:f5:4a:3d:7f: 90:79:eb:04:13:28:04:4e:48:b7:a5:6b:39:3a:5d: 63:b9:c7:2e:9d:b1:8b:a3:f7:e2:eb:2e:d6:4e:06: 10:8c:70:49:71:ea:2f:88:51:d8:ff:c5:21:0a:0a: b3:b5:a4:8a:82:f8:e2:ca:de:17:77:81:51:72:dc: ef:c2:86:60:9a:d7:fe:e5:53:4a:fa:66:f7:f8:47: 44:4f:99:8c:b7:40:c5:b9:cc:b3:e9:e8:40:17:64: f8:6d:e5:ae:fd:d3:38:e3:9e:57:10:d7:f8:12:58: b3:49:83:0b:4b:e7:a2:ba:47:fb:d0:39:30:6c:1d: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:41:5D:4E:E6:B4:FF:96:CC:D8:CD:D4:8B:16:5F:16:01:3C:47:70 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.12.0-40.27.16.255 40.27.18.0/24 40.27.109.0/24 40.183.92.0/23 40.183.158.0/23 40.183.253.0/24 40.223.4.0/23 40.223.9.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:ee:4b:f9:33:e7:e5:63:47:49:7e:a5:7f:ba:13:86:a0:f7: ec:96:9a:d7:bf:fb:ae:17:7d:a5:25:41:30:f4:bb:c6:3f:0b: f4:3c:17:d2:3a:b6:16:3b:4c:9e:e4:66:11:4a:2c:41:af:c0: b8:da:7e:a8:5d:6e:da:12:a9:18:7f:b7:8d:78:34:64:e0:78: 57:0b:ee:54:f6:dd:f6:fd:dd:56:53:69:54:d6:74:0b:1a:2a: 95:6a:aa:5f:1d:1e:9e:04:dd:90:73:f1:3d:c6:16:83:5e:bf: 7a:d9:f9:e5:7c:ae:9c:3d:55:be:cb:d4:e1:a8:aa:05:27:4b: 7a:0a:72:77:ed:a5:ce:13:b7:4c:76:07:41:e5:9c:01:bd:c4: 05:b6:67:8d:25:ae:6c:c5:75:69:13:f1:95:8e:73:cf:85:1d: 9c:f3:24:31:aa:74:da:60:6a:4d:e0:02:b2:6f:8e:81:44:b0: 64:43:b5:0c:46:10:88:d3:ef:8e:da:ef:6b:3b:6c:b1:58:a0: 36:78:e2:e2:e8:66:a9:3a:39:fb:00:5a:63:5c:a7:9e:31:ed: 89:2c:08:79:23:14:92:56:bd:11:09:99:9f:6e:5c:8d:a2:75: 3c:b0:76:39:c2:cd:ab:3b:e8:91:16:4c:58:6c:74:fe:40:26: 72:fe:7e:4f -----BEGIN CERTIFICATE----- MIIFsTCCBJmgAwIBAgIUazpkGD1DIQtAq5mybxLup3sZVzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjI0MTYzOTI2WhcNMjYwNjIzMTY0NDI2 WjAzMTEwLwYDVQQDEyhDNDQxNUQ0RUU2QjRGRjk2Q0NEOENERDQ4QjE2NUYxNjAx M0M0NzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaoqIFU8vbwu 9qdlYUzW45fC9XVv9ffLRTKuSpyk1uhjofYDcU2lPZJmP9jgP8LNH1rq+kvRY31u JHUP5ELCoJ+vWUGI6UGyfOV7xrUrwqSiuPFYJ4DeYIda8V0KDPxu52JOdenefH4j XJCHDXlk/RFOzozTAQyNGJQuLJ+06CfclvVKPX+QeesEEygETki3pWs5Ol1juccu nbGLo/fi6y7WTgYQjHBJceoviFHY/8UhCgqztaSKgvjiyt4Xd4FRctzvwoZgmtf+ 5VNK+mb3+EdET5mMt0DFucyz6ehAF2T4beWu/dM4455XENf4ElizSYMLS+eiukf7 0DkwbB2FEwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFMRBXU7mtP+WzNjN1IsWXxYB PEdwMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNDQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBR BggrBgEFBQcBBwEB/wRCMEAwPgQCAAEwODAMAwQCKBsMAwQAKBsQAwQAKBsSAwQA KBttAwQBKLdcAwQBKLeeAwQAKLf9AwQBKN8EAwQAKN8JMA0GCSqGSIb3DQEBCwUA A4IBAQBP7kv5M+flY0dJfqV/uhOGoPfslprXv/uuF32lJUEw9LvGPwv0PBfSOrYW O0ye5GYRSixBr8C42n6oXW7aEqkYf7eNeDRk4HhXC+5U9t32/d1WU2lU1nQLGiqV aqpfHR6eBN2Qc/E9xhaDXr962fnlfK6cPVW+y9ThqKoFJ0t6CnJ37aXOE7dMdgdB 5ZwBvcQFtmeNJa5sxXVpE/GVjnPPhR2c8yQxqnTaYGpN4AKyb46BRLBkQ7UMRhCI 0++O2u9rO2yxWKA2eOLi6GapOjn7AFpjXKeeMe2JLAh5IxSSVr0RCZmfblyNonU8 sHY5ws2rO+iRFkxYbHT+QCZy/n5P -----END CERTIFICATE-----Generated at Sun Jun 29 13:23:53 2025 by rpki-client