$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa File: AS214432.roa (raw, json) Hash identifier: 5keo8HHbjWwE+KkVWj86kEAGfJ7YhXtgpRSMRUjU0D0= Subject key identifier: 49:7D:E4:DA:89:13:E9:AD:3F:E5:26:1D:D3:F0:D5:E5:BB:BD:20:D0 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4898552C279A63C50C3F40D629087B55D85D822A Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa Signing time: Fri 22 Aug 2025 00:01:07 +0000 ROA not before: Thu 21 Aug 2025 23:56:07 +0000 ROA not after: Fri 21 Aug 2026 00:01:07 +0000 asID: 214432 IP address blocks: 40.183.92.0/24 maxlen: 24 40.183.93.0/24 maxlen: 24 40.223.4.0/24 maxlen: 24 40.223.5.0/24 maxlen: 24 40.223.7.0/24 maxlen: 24 40.223.242.0/24 maxlen: 24 40.223.243.0/24 maxlen: 24 40.223.248.0/24 maxlen: 24 40.223.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:98:55:2c:27:9a:63:c5:0c:3f:40:d6:29:08:7b:55:d8:5d:82:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 21 23:56:07 2025 GMT Not After : Aug 21 00:01:07 2026 GMT Subject: CN=497DE4DA8913E9AD3FE5261DD3F0D5E5BBBD20D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:d8:9c:f0:b2:55:d8:fe:e7:d3:66:46:06: 1f:74:26:0f:12:eb:17:84:e3:54:bb:b9:10:00:be: 09:c4:50:6c:fa:13:1b:68:f8:eb:9f:25:45:a3:de: f0:e6:97:d9:84:93:24:1d:54:ad:9c:61:5b:c5:ff: ad:aa:85:af:87:75:18:37:40:13:03:aa:4b:c1:52: 7f:69:d3:f2:d5:2d:fa:8a:f5:48:a8:a6:f7:be:35: 8e:07:b4:e9:88:ac:18:8d:16:3b:2e:1c:0f:6b:f5: c1:d3:dd:fa:0c:e3:6a:4a:7c:e6:7a:5f:9c:93:19: f6:b2:e7:ba:27:c8:5b:45:c1:59:0f:a5:e9:ca:ba: 7d:76:bd:15:1b:d3:2e:db:e8:37:e4:cb:fa:1d:51: ea:0a:15:27:69:37:c3:1e:eb:83:fc:19:89:50:b3: 51:1c:00:68:56:44:c9:ba:20:c3:bb:6f:35:7d:ce: ce:7d:2e:9a:41:e0:96:31:f5:c5:7a:c7:d6:f4:a2: d7:b0:a9:ca:b0:2c:9d:b4:67:f4:50:65:70:e4:3a: 31:05:d1:ba:15:31:fa:60:62:99:f5:e3:79:58:94: 93:c4:d5:6f:ab:e0:c6:d2:5c:b7:72:32:13:e7:59: cd:bd:72:0d:05:2e:77:84:af:80:07:e3:07:96:f5: a8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7D:E4:DA:89:13:E9:AD:3F:E5:26:1D:D3:F0:D5:E5:BB:BD:20:D0 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS214432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.183.92.0/23 40.223.4.0/23 40.223.7.0/24 40.223.242.0/23 40.223.248.0/23 Signature Algorithm: sha256WithRSAEncryption 15:c0:a2:1f:d9:9a:bf:0e:cc:4b:fc:2d:72:db:2e:f0:0d:e5: 5f:9a:f2:18:4a:69:15:1a:72:e0:63:f7:0b:55:85:3b:b5:44: b5:42:38:40:7d:cd:7e:6c:d4:6a:bc:84:80:92:cb:79:37:5c: 60:3a:0a:65:d1:d9:e9:08:24:16:d0:36:75:bf:09:de:50:7b: c8:95:52:53:96:e5:89:91:8a:79:57:48:af:df:86:f6:23:12: 90:03:74:df:13:23:82:dc:bf:e7:77:a3:c9:1b:0b:6e:05:5f: 93:17:f8:81:92:71:df:63:b5:a5:ae:7d:db:70:a0:49:58:90: a0:1d:28:a8:f4:9c:8b:bb:ec:cf:09:b6:35:eb:8f:14:02:ad: b3:a9:04:4a:54:8b:3e:d5:fe:65:e9:28:d6:e4:92:8c:6d:1c: 99:8a:8c:bc:9c:f7:16:00:ca:55:c4:90:51:1c:55:58:44:c4: 3e:f7:ef:a5:04:89:99:fb:a0:e5:bf:91:ab:4a:64:33:29:44: 99:f0:8d:40:2d:1a:d4:03:3e:06:e2:97:43:d2:b0:0a:0d:c2: 19:e5:ae:38:bf:51:8e:e0:01:9b:10:25:c5:d4:38:49:c8:4c: 8f:68:ce:4e:65:ea:6c:f7:0d:1e:ba:c0:26:d1:38:2b:82:65: 19:5e:63:3c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUSJhVLCeaY8UMP0DWKQh7VdhdgiowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODIxMjM1NjA3WhcNMjYwODIxMDAwMTA3 WjAzMTEwLwYDVQQDEyg0OTdERTREQTg5MTNFOUFEM0ZFNTI2MUREM0YwRDVFNUJC QkQyMEQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqnYnPCyVdj+ 59NmRgYfdCYPEusXhONUu7kQAL4JxFBs+hMbaPjrnyVFo97w5pfZhJMkHVStnGFb xf+tqoWvh3UYN0ATA6pLwVJ/adPy1S36ivVIqKb3vjWOB7TpiKwYjRY7LhwPa/XB 0936DONqSnzmel+ckxn2sue6J8hbRcFZD6Xpyrp9dr0VG9Mu2+g35Mv6HVHqChUn aTfDHuuD/BmJULNRHABoVkTJuiDDu281fc7OfS6aQeCWMfXFesfW9KLXsKnKsCyd tGf0UGVw5DoxBdG6FTH6YGKZ9eN5WJSTxNVvq+DG0ly3cjIT51nNvXINBS53hK+A B+MHlvWoswIDAQABo4IClzCCApMwHQYDVR0OBBYEFEl95NqJE+mtP+UmHdPw1eW7 vSDQMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNDQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEASi3XAMEASjfBAMEACjfBwMEASjf 8gMEASjf+DANBgkqhkiG9w0BAQsFAAOCAQEAFcCiH9mavw7MS/wtctsu8A3lX5ry GEppFRpy4GP3C1WFO7VEtUI4QH3NfmzUaryEgJLLeTdcYDoKZdHZ6QgkFtA2db8J 3lB7yJVSU5bliZGKeVdIr9+G9iMSkAN03xMjgty/53ejyRsLbgVfkxf4gZJx32O1 pa5923CgSViQoB0oqPSci7vszwm2NeuPFAKts6kESlSLPtX+Zeko1uSSjG0cmYqM vJz3FgDKVcSQURxVWETEPvfvpQSJmfug5b+Rq0pkMylEmfCNQC0a1AM+BuKXQ9Kw Cg3CGeWuOL9RjuABmxAlxdQ4SchMj2jOTmXqbPcNHrrAJtE4K4JlGV5jPA== -----END CERTIFICATE-----Generated at Sat Aug 23 14:10:54 2025 by rpki-client