$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa File: AS214943.roa (raw, json) Hash identifier: 14AlIqojxd8AXVKxHF892fig1q1DbkFFQM5udYbTLhg= Subject key identifier: A0:51:58:78:FC:F8:4F:6F:9B:38:5D:41:E4:14:73:BA:DD:4D:87:D7 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2DAE5F6C5087528CE79D8C91239C144C010C6987 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa Signing time: Fri 15 Aug 2025 20:14:53 +0000 ROA not before: Fri 15 Aug 2025 20:09:53 +0000 ROA not after: Fri 14 Aug 2026 20:14:53 +0000 asID: 214943 IP address blocks: 66.63.187.0/24 maxlen: 24 107.150.0.0/24 maxlen: 24 155.94.155.0/24 maxlen: 24 167.160.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ae:5f:6c:50:87:52:8c:e7:9d:8c:91:23:9c:14:4c:01:0c:69:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 15 20:09:53 2025 GMT Not After : Aug 14 20:14:53 2026 GMT Subject: CN=A0515878FCF84F6F9B385D41E41473BADD4D87D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:39:ec:5a:14:2d:f4:78:0b:73:db:e8:b4:94: 3a:cd:9e:ab:da:ea:96:6c:ff:2b:97:91:dc:c9:99: 1d:6a:f9:e8:58:e8:53:a1:c0:3a:18:e5:60:f2:d5: 8d:0e:e0:ce:9b:20:76:74:98:26:48:30:ea:2e:df: e9:ec:db:ed:58:72:ea:38:90:dc:d0:5f:6d:cf:89: 6e:d3:c0:72:bd:d3:80:5e:49:0d:30:a3:7c:aa:db: 65:c1:de:90:35:db:ab:fd:a8:61:15:fd:a8:e1:6d: 21:84:0f:73:50:b5:b3:fe:15:a3:87:f5:ea:dd:41: b5:c5:b1:25:13:63:a6:e2:7e:9f:e4:a1:20:81:4d: 67:20:05:2a:66:38:63:74:fe:02:a8:6b:fd:a7:40: 5e:d1:17:83:2c:50:9d:d3:00:a1:be:f3:a8:36:26: dd:63:94:64:f8:51:e0:31:7e:a8:7a:f1:16:1a:49: f0:f2:72:db:c2:35:98:bf:38:08:5c:ad:c3:26:a8: f0:c1:73:49:d2:cd:59:71:89:b0:83:68:6a:3a:f2: 58:e2:cb:e7:a2:43:82:6d:68:4b:53:42:eb:48:87: 75:82:03:84:7e:9f:fc:4b:1b:2f:fb:b2:42:d1:73: 44:06:4d:e9:27:48:86:1a:99:be:18:db:82:7d:af: a0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:51:58:78:FC:F8:4F:6F:9B:38:5D:41:E4:14:73:BA:DD:4D:87:D7 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.63.187.0/24 107.150.0.0/24 155.94.155.0/24 167.160.161.0/24 Signature Algorithm: sha256WithRSAEncryption 96:a3:87:c5:09:b0:f4:fe:37:00:79:bc:90:75:31:b2:2a:d5: c7:0b:c1:fd:4e:8a:ab:42:bc:83:d9:ec:9f:5b:be:60:62:08: 27:5a:ba:eb:13:f6:80:f5:b4:1f:0c:c7:94:4a:b0:69:4a:30: bf:e1:74:70:75:a0:10:42:af:77:1c:14:4f:fb:76:44:71:9e: b5:67:8b:ac:19:43:79:99:97:35:30:b9:e6:94:0b:45:e7:75: e2:81:c7:6d:94:01:9e:ea:fe:53:0e:17:d6:05:58:f0:ed:c6: 93:9e:0e:10:0b:31:f7:19:04:69:06:9c:6d:3d:c8:de:69:d5: a7:6f:32:94:48:d7:ce:c1:5e:07:c3:3c:9f:f2:49:b2:f6:24: 7e:79:1a:cf:73:fe:dc:49:73:03:3b:6c:6f:60:b3:8b:c0:3a: 8f:db:c8:73:58:5e:d9:7c:56:00:87:31:ca:6f:a7:2e:7b:26: a0:c9:b3:ee:78:06:ee:f6:6e:91:90:a8:b8:3a:5d:33:1c:27: 87:6a:38:89:e2:9d:04:cc:3c:23:ae:21:26:70:f0:73:0d:28: 29:2e:c2:5a:92:af:bf:4c:2c:63:3d:c8:3c:f5:fc:38:5b:bc: 64:6c:82:98:a1:5f:bd:4e:73:2a:74:09:a9:4c:69:da:98:7c: 65:9d:d2:e4 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIULa5fbFCHUoznnYyRI5wUTAEMaYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODE1MjAwOTUzWhcNMjYwODE0MjAxNDUz WjAzMTEwLwYDVQQDEyhBMDUxNTg3OEZDRjg0RjZGOUIzODVENDFFNDE0NzNCQURE NEQ4N0Q3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jnsWhQt9HgL c9votJQ6zZ6r2uqWbP8rl5HcyZkdavnoWOhTocA6GOVg8tWNDuDOmyB2dJgmSDDq Lt/p7NvtWHLqOJDc0F9tz4lu08ByvdOAXkkNMKN8qttlwd6QNdur/ahhFf2o4W0h hA9zULWz/hWjh/Xq3UG1xbElE2Om4n6f5KEggU1nIAUqZjhjdP4CqGv9p0Be0ReD LFCd0wChvvOoNibdY5Rk+FHgMX6oevEWGknw8nLbwjWYvzgIXK3DJqjwwXNJ0s1Z cYmwg2hqOvJY4svnokOCbWhLU0LrSId1ggOEfp/8Sxsv+7JC0XNEBk3pJ0iGGpm+ GNuCfa+gTwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFKBRWHj8+E9vmzhdQeQUc7rd TYfXMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNDk0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAEI/uwMEAGuWAAMEAJtemwMEAKeg oTANBgkqhkiG9w0BAQsFAAOCAQEAlqOHxQmw9P43AHm8kHUxsirVxwvB/U6Kq0K8 g9nsn1u+YGIIJ1q66xP2gPW0HwzHlEqwaUowv+F0cHWgEEKvdxwUT/t2RHGetWeL rBlDeZmXNTC55pQLRed14oHHbZQBnur+Uw4X1gVY8O3Gk54OEAsx9xkEaQacbT3I 3mnVp28ylEjXzsFeB8M8n/JJsvYkfnkaz3P+3ElzAztsb2Czi8A6j9vIc1he2XxW AIcxym+nLnsmoMmz7ngG7vZukZCouDpdMxwnh2o4ieKdBMw8I64hJnDwcw0oKS7C WpKvv0wsYz3IPPX8OFu8ZGyCmKFfvU5zKnQJqUxp2ph8ZZ3S5A== -----END CERTIFICATE-----Generated at Sat Aug 23 20:50:08 2025 by rpki-client