$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200017.roa File: AS200017.roa (raw, json) Hash identifier: jOYO04Xe+wZ/lUUdeEBZf9tSGj/mHPjZduXaHndcckQ= Subject key identifier: 44:D6:13:93:91:13:BB:AB:A2:83:70:8B:24:03:5C:45:3E:31:18:95 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 362DF7017A843D26D266CC40D661A8D7313CFBCC Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200017.roa Signing time: Mon 01 Sep 2025 00:18:17 +0000 ROA not before: Mon 01 Sep 2025 00:13:17 +0000 ROA not after: Mon 31 Aug 2026 00:18:17 +0000 asID: 200017 IP address blocks: 67.210.106.0/24 maxlen: 24 67.210.127.0/24 maxlen: 24 209.200.248.0/24 maxlen: 24 216.97.238.0/23 maxlen: 24 216.227.220.0/24 maxlen: 24 216.227.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 15:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:2d:f7:01:7a:84:3d:26:d2:66:cc:40:d6:61:a8:d7:31:3c:fb:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 1 00:13:17 2025 GMT Not After : Aug 31 00:18:17 2026 GMT Subject: CN=44D613939113BBABA283708B24035C453E311895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0f:aa:38:dc:07:c0:32:29:35:56:95:ef:f0: df:4f:da:f3:65:ab:f2:df:c1:63:fd:23:32:49:96: 5e:04:79:3f:c2:13:c6:29:d5:e5:e7:a9:4d:62:98: 5b:4c:ad:80:42:cb:a7:32:32:43:4f:67:e2:b0:dc: ce:fd:5b:70:67:a2:07:f3:81:e1:4a:45:04:fa:a3: 14:1d:7f:ea:33:44:50:c2:89:a3:e5:bc:37:82:5e: 0a:d1:90:40:5b:79:6e:6e:ca:0a:29:a8:7c:3e:92: d1:d4:f8:7b:be:be:f5:0e:0d:0f:33:96:94:de:24: d7:d6:c4:56:66:df:90:18:5d:85:3a:08:7e:a2:a2: e8:9e:37:86:7a:60:36:0a:21:a5:39:d2:db:cd:9c: 8c:37:55:d7:f1:6b:b6:7b:e8:18:12:06:79:fa:3d: e3:0a:29:ad:b9:f2:77:b2:ac:90:3c:e0:30:ae:b1: 71:72:40:3e:bd:9f:bc:bc:85:64:76:ce:47:b4:21: 33:0c:ee:95:bc:b7:de:be:a1:3e:50:65:7f:a4:f3: 92:97:98:36:ff:a9:6c:a4:a2:f9:da:5e:4f:09:91: a1:43:29:a7:70:ba:50:70:f3:58:6e:f7:de:21:6c: 6a:45:a0:8e:56:46:dc:dc:fa:15:09:5c:8f:9b:db: 01:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D6:13:93:91:13:BB:AB:A2:83:70:8B:24:03:5C:45:3E:31:18:95 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS200017.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.106.0/24 67.210.127.0/24 209.200.248.0/24 216.97.238.0/23 216.227.220.0/24 216.227.222.0/24 Signature Algorithm: sha256WithRSAEncryption 52:73:2c:07:57:b4:02:79:35:6b:5a:5b:12:b2:59:db:40:bd: 6e:ce:9c:77:8a:f4:7b:6d:0b:10:0a:ee:0b:f1:d7:72:2c:7d: a3:0a:bb:c3:e9:49:e4:6b:e0:14:45:74:2a:62:37:98:6b:89: cd:a0:8f:a2:15:8c:b8:bb:87:8b:ae:dd:de:fc:9f:53:1b:c5: 07:8c:9f:39:c8:20:91:5a:ea:76:5c:06:d1:0f:3f:d9:1e:88: 66:f9:cc:45:53:80:37:a7:ed:1c:34:c8:e6:3a:1e:f5:ea:8b: 54:1e:7e:b1:dc:d3:89:58:0a:52:33:0a:96:76:7a:60:35:f2: 52:48:b5:4b:ed:aa:6f:a2:83:6d:9f:9a:86:34:85:fc:58:e5: bb:e4:24:11:f0:57:62:60:7f:56:c9:8d:2a:2c:aa:54:d3:f0: 2d:10:cd:c9:ff:28:08:06:da:cb:f7:42:ae:fb:5b:ef:91:64: e1:c0:b2:05:ae:71:87:43:e8:32:e2:b1:b7:cf:62:a2:46:8f: 6a:8b:a7:25:6d:07:d6:9a:a1:69:cf:83:4c:30:fd:a9:4e:b6: 85:3d:2e:b8:63:c1:52:39:b9:2d:e7:38:d5:75:b8:cb:19:08: 2f:09:9e:a7:84:9a:7f:c3:49:be:9f:da:02:7c:29:15:39:cf: c3:e8:ed:b0 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUNi33AXqEPSbSZsxA1mGo1zE8+8wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTAxMDAxMzE3WhcNMjYwODMxMDAxODE3 WjAzMTEwLwYDVQQDEyg0NEQ2MTM5MzkxMTNCQkFCQTI4MzcwOEIyNDAzNUM0NTNF MzExODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w+qONwHwDIp NVaV7/DfT9rzZavy38Fj/SMySZZeBHk/whPGKdXl56lNYphbTK2AQsunMjJDT2fi sNzO/VtwZ6IH84HhSkUE+qMUHX/qM0RQwomj5bw3gl4K0ZBAW3lubsoKKah8PpLR 1Ph7vr71Dg0PM5aU3iTX1sRWZt+QGF2FOgh+oqLonjeGemA2CiGlOdLbzZyMN1XX 8Wu2e+gYEgZ5+j3jCimtufJ3sqyQPOAwrrFxckA+vZ+8vIVkds5HtCEzDO6VvLfe vqE+UGV/pPOSl5g2/6lspKL52l5PCZGhQymncLpQcPNYbvfeIWxqRaCOVkbc3PoV CVyPm9sBsQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFETWE5ORE7urooNwiyQDXEU+ MRiVMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIwMDAxNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9 BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAEPSagMEAEPSfwMEANHI+AMEAdhh 7gMEANjj3AMEANjj3jANBgkqhkiG9w0BAQsFAAOCAQEAUnMsB1e0Ank1a1pbErJZ 20C9bs6cd4r0e20LEAruC/HXcix9owq7w+lJ5GvgFEV0KmI3mGuJzaCPohWMuLuH i67d3vyfUxvFB4yfOcggkVrqdlwG0Q8/2R6IZvnMRVOAN6ftHDTI5joe9eqLVB5+ sdzTiVgKUjMKlnZ6YDXyUki1S+2qb6KDbZ+ahjSF/Fjlu+QkEfBXYmB/VsmNKiyq VNPwLRDNyf8oCAbay/dCrvtb75Fk4cCyBa5xh0PoMuKxt89iokaPaounJW0H1pqh ac+DTDD9qU62hT0uuGPBUjm5Lec41XW4yxkILwmep4Saf8NJvp/aAnwpFTnPw+jt sA== -----END CERTIFICATE-----Generated at Sun Oct 19 23:48:40 2025 by rpki-client