$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa File: AS210008.roa (raw, json) Hash identifier: GNsHA7zF8FccznBcbSf6bykAgMjoyFfDSNtlIjz4MvE= Subject key identifier: FF:8D:E5:92:50:E3:B4:22:F0:1A:EE:AC:4F:5B:04:7F:CD:80:EE:5B Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 5CC0CDC96D52D3D92F9BFCBAC27162681A0EDED4 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa Signing time: Wed 23 Apr 2025 03:25:44 +0000 ROA not before: Wed 23 Apr 2025 03:20:44 +0000 ROA not after: Wed 22 Apr 2026 03:25:44 +0000 asID: 210008 IP address blocks: 209.200.244.0/23 maxlen: 23 209.200.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c0:cd:c9:6d:52:d3:d9:2f:9b:fc:ba:c2:71:62:68:1a:0e:de:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 23 03:20:44 2025 GMT Not After : Apr 22 03:25:44 2026 GMT Subject: CN=FF8DE59250E3B422F01AEEAC4F5B047FCD80EE5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:15:d6:4c:78:0a:a9:e4:de:17:75:f9:04: 79:ab:ea:0b:36:0e:79:7c:ac:d0:1b:c9:f1:e2:7d: 08:6d:e1:a3:d1:46:57:6d:a7:3f:e6:d7:a0:ed:ce: 8f:52:ec:7c:55:92:2e:eb:1a:55:26:8f:8c:cd:de: 5c:e9:3c:ae:52:36:ba:c8:19:82:22:8e:c6:ad:84: 2d:27:5c:4f:4b:48:73:99:53:1b:97:1f:81:ca:cc: e7:e2:de:0b:4f:16:0f:c1:b5:c6:82:09:52:0d:0b: b9:5d:38:b7:b6:64:c4:59:0c:69:f2:72:64:b5:d3: 77:8a:3b:5c:99:db:8f:62:86:51:63:4d:f3:9e:1b: cd:77:a9:3f:b7:f5:a0:d0:53:74:fa:0a:df:d6:db: 56:51:c5:7d:e4:4e:58:54:a8:df:e1:58:01:d4:14: 30:ed:9c:40:77:8b:dd:5f:b7:92:90:f8:91:15:54: 83:1c:c2:d5:a8:df:7f:82:9d:ea:66:ce:b9:16:a4: 69:a2:40:4e:36:11:88:b7:0f:e9:6b:35:83:24:bc: 49:67:aa:3d:19:84:7e:9e:24:6f:a7:17:49:ee:14: 0e:70:bd:26:74:3a:f3:09:00:cd:09:df:d6:d9:d1: 4e:cc:f7:3d:b3:c0:3e:1a:4c:b9:7a:90:82:10:94: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:E5:92:50:E3:B4:22:F0:1A:EE:AC:4F:5B:04:7F:CD:80:EE:5B X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS210008.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.244.0/23 209.200.255.0/24 Signature Algorithm: sha256WithRSAEncryption 18:db:f8:94:fb:1a:b3:f9:59:f9:ea:69:9e:54:cd:5c:28:1c: 2f:d0:b7:72:e6:3a:91:62:1a:86:1d:c2:0d:d8:78:a8:5b:3e: 36:6b:98:5d:5f:7b:97:de:5d:26:63:7d:a3:80:60:40:fc:2b: 3c:18:77:9d:65:31:4b:6e:83:fa:c0:7f:a1:e4:a7:56:1a:d5: 9e:f9:91:3f:64:c1:3e:79:f8:68:fb:7b:31:aa:f4:51:cf:8e: 83:14:74:9e:9f:f8:54:ac:e6:2c:85:3b:26:a0:f1:49:49:ae: cf:d3:1f:51:60:f5:8f:4c:9c:f9:1c:7a:24:bc:67:ee:b7:46: 72:c7:c2:19:14:a1:e9:24:7c:44:82:38:75:43:8d:a0:a5:ed: 0e:98:66:6f:4c:3d:28:70:d5:6b:f5:bd:2e:14:28:36:92:84: 36:4e:ea:c0:f7:cd:a7:75:d8:05:6f:48:65:38:1a:cc:59:20: da:58:fb:a2:cb:27:f2:69:e3:d5:46:eb:55:0b:66:04:95:8d: 43:1a:1b:3f:39:7c:f6:fd:85:1a:d1:e7:eb:cc:ba:0d:15:fa: 4d:ca:82:f3:9b:28:3f:5c:14:c8:a2:28:1f:0d:9e:b4:78:43: 57:86:e3:98:37:95:10:dd:6b:17:fe:47:ee:d4:70:e7:aa:c9: 16:6d:97:b9 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUXMDNyW1S09kvm/y6wnFiaBoO3tQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDIzMDMyMDQ0WhcNMjYwNDIyMDMyNTQ0 WjAzMTEwLwYDVQQDEyhGRjhERTU5MjUwRTNCNDIyRjAxQUVFQUM0RjVCMDQ3RkNE ODBFRTVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXwV1kx4Cqnk 3hd1+QR5q+oLNg55fKzQG8nx4n0IbeGj0UZXbac/5teg7c6PUux8VZIu6xpVJo+M zd5c6TyuUja6yBmCIo7GrYQtJ1xPS0hzmVMblx+Byszn4t4LTxYPwbXGgglSDQu5 XTi3tmTEWQxp8nJktdN3ijtcmduPYoZRY03znhvNd6k/t/Wg0FN0+grf1ttWUcV9 5E5YVKjf4VgB1BQw7ZxAd4vdX7eSkPiRFVSDHMLVqN9/gp3qZs65FqRpokBONhGI tw/pazWDJLxJZ6o9GYR+niRvpxdJ7hQOcL0mdDrzCQDNCd/W2dFOzPc9s8A+Gky5 epCCEJQQ7wIDAQABo4IChTCCAoEwHQYDVR0OBBYEFP+N5ZJQ47Qi8BrurE9bBH/N gO5bMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMDAwOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAdHI9AMEANHI/zANBgkqhkiG9w0B AQsFAAOCAQEAGNv4lPsas/lZ+eppnlTNXCgcL9C3cuY6kWIahh3CDdh4qFs+NmuY XV97l95dJmN9o4BgQPwrPBh3nWUxS26D+sB/oeSnVhrVnvmRP2TBPnn4aPt7Mar0 Uc+OgxR0np/4VKzmLIU7JqDxSUmuz9MfUWD1j0yc+Rx6JLxn7rdGcsfCGRSh6SR8 RII4dUONoKXtDphmb0w9KHDVa/W9LhQoNpKENk7qwPfNp3XYBW9IZTgazFkg2lj7 ossn8mnj1UbrVQtmBJWNQxobPzl89v2FGtHn68y6DRX6TcqC85soP1wUyKIoHw2e tHhDV4bjmDeVEN1rF/5H7tRw56rJFm2XuQ== -----END CERTIFICATE-----Generated at Tue May 6 01:53:57 2025 by rpki-client