$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa File: AS137235.roa (raw, json) Hash identifier: 5HR/BXlf59iRkifNQbVbuU80vK1YJMcyyLc4m5DSFJg= Subject key identifier: 67:4F:C7:10:A1:83:67:0B:41:38:A0:83:D7:73:69:FC:4E:54:E8:77 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1801C953E616270CD2B56F7304AB6E1088574614 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa Signing time: Thu 19 Mar 2026 01:28:14 +0000 ROA not before: Thu 19 Mar 2026 01:23:14 +0000 ROA not after: Thu 18 Mar 2027 01:28:14 +0000 asID: 137235 IP address blocks: 23.95.98.0/24 maxlen: 24 192.228.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 04:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:01:c9:53:e6:16:27:0c:d2:b5:6f:73:04:ab:6e:10:88:57:46:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 19 01:23:14 2026 GMT Not After : Mar 18 01:28:14 2027 GMT Subject: CN=674FC710A183670B4138A083D77369FC4E54E877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:72:43:b9:24:dc:0d:dd:82:4d:3e:04:00:33: f5:ae:51:9d:b6:5a:50:f4:c6:06:8e:81:af:b2:b5: ff:19:0a:1f:b7:30:ff:59:91:b4:1c:b1:61:ca:2c: f2:b1:10:ed:36:ba:5e:98:91:e8:7e:fc:f9:34:fa: 8e:b2:91:e2:6f:de:e8:ea:1b:d8:d5:bf:6d:f4:c7: e7:f8:ce:78:0e:93:2a:d7:c0:74:f2:5f:9c:2e:74: 89:89:d6:36:52:be:bb:7c:0c:2b:66:79:b2:1b:c6: e5:62:12:11:ac:db:91:1f:48:db:b4:9a:94:34:bc: 91:49:dd:d9:11:b4:9d:44:99:b4:da:90:c3:90:3e: 22:02:11:86:b2:c0:57:00:ac:c3:56:74:39:9d:b1: 62:f4:c7:8b:9f:e2:06:ed:0c:53:8a:92:17:2c:82: 27:27:08:2d:16:43:53:3f:93:27:db:2a:cf:f6:73: 1a:9d:72:0f:86:4b:2d:4d:5d:b2:c7:c0:ef:6d:e1: 51:0d:cd:c2:71:9e:cf:bf:73:cb:0a:cd:51:3e:56: 49:33:1c:8b:eb:45:24:10:47:27:c3:50:fd:52:3c: c0:74:b1:3e:bd:9d:39:33:ce:a5:4d:0b:73:5e:bd: a0:92:6b:1e:80:ac:78:0e:c2:fb:bf:5f:95:4c:ef: 49:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:4F:C7:10:A1:83:67:0B:41:38:A0:83:D7:73:69:FC:4E:54:E8:77 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.98.0/24 192.228.118.0/24 Signature Algorithm: sha256WithRSAEncryption a6:49:58:bf:55:f8:16:7f:cd:66:d4:1e:97:54:9b:c0:a4:00: 61:5f:a3:1c:1f:4e:dd:05:1c:71:a8:83:97:73:16:c2:68:0b: 4d:39:7b:45:1a:1c:89:21:6a:70:5c:b5:43:6c:36:98:fe:0c: 2d:25:37:09:bd:e4:b1:ca:a7:dd:56:7a:31:6a:71:8d:c5:b1: d7:be:35:9f:cd:d6:5c:ba:a1:bc:1e:cb:9d:5d:bb:f5:18:e3: 0c:4b:8b:da:77:a5:2f:25:c5:60:6d:a7:80:e8:03:7e:c3:1e: 99:5d:f9:25:43:1d:df:12:68:f8:05:71:07:52:db:81:27:59: 20:c4:8c:6c:80:bb:b5:95:13:e7:c2:32:66:73:ce:5b:98:2c: 62:af:ab:41:69:e9:a4:33:65:45:2c:d2:b7:d3:1e:98:cc:52: 75:dd:dd:1e:78:f5:d4:59:ee:fc:68:af:09:39:a8:a7:72:66: a0:54:9a:17:06:45:c0:76:87:de:7b:90:ef:8c:13:c7:42:eb: 01:b9:62:26:c5:99:ea:19:bb:0f:fb:79:06:5d:0b:dd:77:20: b9:d7:b4:4f:32:a1:89:2e:9e:3c:0b:01:2d:8e:3b:df:4e:e3: e4:bd:61:2f:0f:0c:00:3b:6e:c8:a0:cf:5c:8f:77:79:31:2d: 33:ed:4a:93 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUGAHJU+YWJwzStW9zBKtuEIhXRhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzE5MDEyMzE0WhcNMjcwMzE4MDEyODE0 WjAzMTEwLwYDVQQDEyg2NzRGQzcxMEExODM2NzBCNDEzOEEwODNENzczNjlGQzRF NTRFODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXJDuSTcDd2C TT4EADP1rlGdtlpQ9MYGjoGvsrX/GQoftzD/WZG0HLFhyizysRDtNrpemJHofvz5 NPqOspHib97o6hvY1b9t9Mfn+M54DpMq18B08l+cLnSJidY2Ur67fAwrZnmyG8bl YhIRrNuRH0jbtJqUNLyRSd3ZEbSdRJm02pDDkD4iAhGGssBXAKzDVnQ5nbFi9MeL n+IG7QxTipIXLIInJwgtFkNTP5Mn2yrP9nManXIPhkstTV2yx8DvbeFRDc3CcZ7P v3PLCs1RPlZJMxyL60UkEEcnw1D9UjzAdLE+vZ05M86lTQtzXr2gkmsegKx4DsL7 v1+VTO9JfQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFGdPxxChg2cLQTigg9dzafxO VOh3MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzEzNzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEABdfYgMEAMDkdjANBgkqhkiG9w0B AQsFAAOCAQEApklYv1X4Fn/NZtQel1SbwKQAYV+jHB9O3QUccaiDl3MWwmgLTTl7 RRociSFqcFy1Q2w2mP4MLSU3Cb3kscqn3VZ6MWpxjcWx1741n83WXLqhvB7LnV27 9RjjDEuL2nelLyXFYG2ngOgDfsMemV35JUMd3xJo+AVxB1LbgSdZIMSMbIC7tZUT 58IyZnPOW5gsYq+rQWnppDNlRSzSt9MemMxSdd3dHnj11Fnu/GivCTmop3JmoFSa FwZFwHaH3nuQ74wTx0LrAbliJsWZ6hm7D/t5Bl0L3Xcgude0TzKhiS6ePAsBLY47 307j5L1hLw8MADtuyKDPXI93eTEtM+1Kkw== -----END CERTIFICATE-----Generated at Thu Mar 26 10:01:47 2026 by rpki-client