$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa File: AS200017.roa (raw, json) Hash identifier: xP47S8LokBdMmiXTqDckfswTV7W92to2gf6XxAsL7kE= Subject key identifier: 01:B3:38:2B:00:72:9B:79:9A:C0:65:CE:AA:32:31:5D:A7:15:72:5F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 33ADDB6C7BA93962437D09E47F683645B452B50C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa Signing time: Thu 01 May 2025 14:28:32 +0000 ROA not before: Thu 01 May 2025 14:23:32 +0000 ROA not after: Thu 30 Apr 2026 14:28:32 +0000 asID: 200017 IP address blocks: 98.142.248.0/24 maxlen: 24 104.234.71.0/24 maxlen: 24 104.234.111.0/24 maxlen: 24 104.234.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 09:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ad:db:6c:7b:a9:39:62:43:7d:09:e4:7f:68:36:45:b4:52:b5:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 1 14:23:32 2025 GMT Not After : Apr 30 14:28:32 2026 GMT Subject: CN=01B3382B00729B799AC065CEAA32315DA715725F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:12:84:b0:bb:f1:88:02:4e:50:3f:e5:59: 35:85:30:2f:73:d1:46:84:8d:06:0a:65:80:94:65: 8c:e1:f1:6f:f5:ed:f7:85:bb:2c:34:3e:b5:fa:3a: f2:3f:81:bc:a6:d3:ba:5c:96:f7:43:ca:a8:36:13: bd:ed:98:90:a0:a0:6d:f0:39:7f:55:56:12:3a:e7: 51:62:b4:66:3b:13:2f:6b:4a:d8:21:29:a9:dd:49: 2a:94:d5:72:63:6c:a6:a6:36:a8:e0:ca:4f:26:98: 64:62:2a:55:df:89:c2:c0:5e:fa:c7:bf:90:a7:9b: 57:f5:d2:a7:6e:7f:b4:1c:c1:25:44:f2:f8:64:27: 43:cc:b3:7e:1a:d4:3a:40:d4:9b:25:61:41:ad:e8: 83:81:b9:78:10:54:8d:68:4b:c3:dc:d3:67:78:ea: d6:f8:dd:72:6b:e1:dc:95:48:bc:a1:16:9a:38:95: af:3f:79:41:8c:2d:bd:88:14:b4:85:46:32:f7:0a: 9b:99:89:ee:1e:5d:43:a0:af:67:4b:28:31:99:86: 41:d4:96:50:0c:7c:69:e0:98:7f:c5:08:cc:75:16: 6d:d7:18:6c:81:a8:4d:00:48:05:04:bc:10:5d:21: 23:54:1a:88:87:2a:ac:b9:fd:58:7e:4a:84:4d:81: a5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:38:2B:00:72:9B:79:9A:C0:65:CE:AA:32:31:5D:A7:15:72:5F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.248.0/24 104.234.71.0/24 104.234.111.0/24 104.234.188.0/24 Signature Algorithm: sha256WithRSAEncryption 71:27:b2:3c:aa:39:5d:e1:ba:f6:df:67:b4:86:0a:30:f6:48: 90:b8:16:29:0f:dd:8d:d0:b5:7d:22:95:43:98:8a:b6:ab:af: 78:8e:39:58:8e:e0:0c:14:e5:29:ef:86:b0:d1:59:15:31:0c: 72:a0:1b:30:f7:a9:27:29:d0:3c:91:da:d6:ed:13:f2:db:0b: b7:c1:7b:e3:19:c3:ca:10:88:41:7b:fa:78:12:bb:a1:d2:b8: ff:63:bd:6a:b2:d8:64:c3:5b:81:af:dd:29:88:94:b0:7b:d8: 5b:20:3c:49:23:91:46:5e:cf:ef:ea:7c:c5:3e:f5:ea:1e:35: 4e:97:bb:a2:69:5a:67:d3:52:a5:33:77:38:81:1f:7b:b3:c6: e2:c4:b1:b2:8c:fe:bc:64:0e:6c:bc:9b:45:62:aa:45:52:ad: 11:ef:f7:ff:68:17:98:87:16:9f:3c:07:f8:cd:d3:b4:a7:d5: 4f:bd:b7:88:83:69:dc:56:73:79:cb:3d:9c:9e:9b:dd:d1:39: 5d:8a:ed:92:b5:9c:0a:ec:ef:df:69:60:97:0b:b1:10:87:87: 45:89:1b:da:90:21:1c:69:3c:94:cd:98:d8:0d:e4:11:36:d1: db:b1:c4:72:e5:3a:d8:6c:37:08:08:2d:ac:fb:38:a8:33:65: 1e:55:3d:2e -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUM63bbHupOWJDfQnkf2g2RbRStQwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTAxMTQyMzMyWhcNMjYwNDMwMTQyODMy WjAzMTEwLwYDVQQDEygwMUIzMzgyQjAwNzI5Qjc5OUFDMDY1Q0VBQTMyMzE1REE3 MTU3MjVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprwShLC78YgC TlA/5Vk1hTAvc9FGhI0GCmWAlGWM4fFv9e33hbssND61+jryP4G8ptO6XJb3Q8qo NhO97ZiQoKBt8Dl/VVYSOudRYrRmOxMva0rYISmp3UkqlNVyY2ympjao4MpPJphk YipV34nCwF76x7+Qp5tX9dKnbn+0HMElRPL4ZCdDzLN+GtQ6QNSbJWFBreiDgbl4 EFSNaEvD3NNneOrW+N1ya+HclUi8oRaaOJWvP3lBjC29iBS0hUYy9wqbmYnuHl1D oK9nSygxmYZB1JZQDHxp4Jh/xQjMdRZt1xhsgahNAEgFBLwQXSEjVBqIhyqsuf1Y fkqETYGl/wIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFAGzOCsAcpt5msBlzqoyMV2n FXJfMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDAxNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGKO+AMEAGjqRwMEAGjqbwMEAGjq vDANBgkqhkiG9w0BAQsFAAOCAQEAcSeyPKo5XeG69t9ntIYKMPZIkLgWKQ/djdC1 fSKVQ5iKtquveI45WI7gDBTlKe+GsNFZFTEMcqAbMPepJynQPJHa1u0T8tsLt8F7 4xnDyhCIQXv6eBK7odK4/2O9arLYZMNbga/dKYiUsHvYWyA8SSORRl7P7+p8xT71 6h41Tpe7omlaZ9NSpTN3OIEfe7PG4sSxsoz+vGQObLybRWKqRVKtEe/3/2gXmIcW nzwH+M3TtKfVT723iINp3FZzecs9nJ6b3dE5XYrtkrWcCuzv32lglwuxEIeHRYkb 2pAhHGk8lM2Y2A3kETbR27HEcuU62Gw3CAgtrPs4qDNlHlU9Lg== -----END CERTIFICATE-----Generated at Mon May 5 22:49:52 2025 by rpki-client