$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa File: AS215672.roa (raw, json) Hash identifier: c2cqyP635XG2luOm6WZgXBuTNJB4Cz4Jm0u9jHa6fMQ= Subject key identifier: 02:43:25:89:DE:8F:96:57:83:39:C2:37:AF:16:3C:30:ED:DA:44:2C Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 0D8E1190B384D631FD3C3A99741B4570C74F9AD0 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa Signing time: Fri 28 Mar 2025 16:51:32 +0000 ROA not before: Fri 28 Mar 2025 16:46:32 +0000 ROA not after: Fri 27 Mar 2026 16:51:32 +0000 asID: 215672 IP address blocks: 23.94.129.0/24 maxlen: 24 74.50.4.0/24 maxlen: 24 162.213.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:8e:11:90:b3:84:d6:31:fd:3c:3a:99:74:1b:45:70:c7:4f:9a:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 28 16:46:32 2025 GMT Not After : Mar 27 16:51:32 2026 GMT Subject: CN=02432589DE8F96578339C237AF163C30EDDA442C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a2:9a:f8:91:b3:e9:74:e2:8c:98:3b:00:48: 0d:62:79:17:a6:82:f6:36:79:cd:75:df:74:e9:36: 3f:80:1d:b7:65:a2:32:a6:28:1a:8e:9c:de:5b:9c: 27:57:28:80:c9:21:ef:30:3e:3a:5d:2e:45:e0:d5: 24:1d:e3:78:9e:ed:a3:71:4d:d4:e0:b6:2d:e4:84: be:91:6b:a6:7b:7f:c8:65:2c:f4:48:e5:dd:c2:fd: 2a:27:cf:af:f6:8f:49:6d:8c:76:c1:30:9c:ce:56: 83:55:ea:5b:01:a4:6b:91:a3:68:c5:c3:36:b8:6b: 2f:b1:e6:d2:14:76:d9:95:a4:a8:c6:e8:45:6c:64: 21:e7:97:84:20:d7:ad:1f:ed:17:6e:ab:76:0a:1f: 71:bc:a2:1c:52:a9:05:4d:52:d4:f6:00:a4:e0:9e: 01:26:28:b3:08:55:89:77:15:6e:f7:49:d4:39:1b: df:a8:ac:11:ab:03:28:64:58:2d:72:89:70:9a:bc: 68:20:91:07:87:17:d9:69:7d:7e:5e:c2:ec:3d:d3: 85:b7:4e:5e:a5:86:cc:bf:20:a2:d9:2e:7d:58:71: b2:9f:61:ed:a0:8f:35:e8:82:a2:70:24:2f:51:34: 08:a4:97:08:43:df:33:92:c5:9a:9b:43:88:60:4f: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:25:89:DE:8F:96:57:83:39:C2:37:AF:16:3C:30:ED:DA:44:2C X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.129.0/24 74.50.4.0/24 162.213.0.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:86:64:f9:50:00:2c:bc:2d:e2:14:db:07:16:18:41:98:2c: d8:f1:ba:4c:4d:e5:da:e7:fc:3a:89:de:5e:6b:8e:ec:aa:4f: 1d:1c:68:59:73:8e:6a:09:ca:08:ab:12:14:4a:a4:0d:f6:b6: b9:0d:8b:9e:82:ef:8b:f9:a9:53:80:d9:f5:e8:f5:87:27:86: 4d:03:c5:28:ed:5f:a4:bb:19:bc:6b:47:1d:42:79:25:5e:6b: 1e:6b:38:b7:b0:f2:f1:e3:47:b3:63:9d:a0:d1:0e:ec:9d:03: c0:ae:c9:d7:38:66:f3:42:71:a7:34:7e:fb:ae:ba:a8:8a:22: ba:9f:47:15:a8:e3:4e:be:91:c6:f5:06:0b:dd:42:14:06:54: e3:a8:16:85:ad:c9:5d:2d:b7:53:6a:ef:4a:50:9c:7a:94:2b: 2b:ad:28:14:54:e0:aa:99:02:16:52:86:cf:89:17:3f:cd:2b: df:c4:5b:0c:42:9b:22:85:b5:7a:b8:21:2a:4d:79:2c:b1:8c: f7:a0:05:22:ab:53:38:32:ec:60:0b:6c:60:60:ea:6b:3d:71: c0:f7:58:9b:0b:e0:22:36:61:f9:2e:70:91:69:f4:10:ef:bb: 13:c4:90:b6:24:ad:94:be:4a:f6:81:5e:b3:29:24:05:00:a4: 9e:98:18:ca -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUDY4RkLOE1jH9PDqZdBtFcMdPmtAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMzI4MTY0NjMyWhcNMjYwMzI3MTY1MTMy WjAzMTEwLwYDVQQDEygwMjQzMjU4OURFOEY5NjU3ODMzOUMyMzdBRjE2M0MzMEVE REE0NDJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KKa+JGz6XTi jJg7AEgNYnkXpoL2NnnNdd906TY/gB23ZaIypigajpzeW5wnVyiAySHvMD46XS5F 4NUkHeN4nu2jcU3U4LYt5IS+kWume3/IZSz0SOXdwv0qJ8+v9o9JbYx2wTCczlaD VepbAaRrkaNoxcM2uGsvsebSFHbZlaSoxuhFbGQh55eEINetH+0Xbqt2Ch9xvKIc UqkFTVLU9gCk4J4BJiizCFWJdxVu90nUORvfqKwRqwMoZFgtcolwmrxoIJEHhxfZ aX1+XsLsPdOFt05epYbMvyCi2S59WHGyn2HtoI816IKicCQvUTQIpJcIQ98zksWa m0OIYE9c9QIDAQABo4ICizCCAocwHQYDVR0OBBYEFAJDJYnej5ZXgznCN68WPDDt 2kQsMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNTY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEABdegQMEAEoyBAMEAKLVADANBgkq hkiG9w0BAQsFAAOCAQEACoZk+VAALLwt4hTbBxYYQZgs2PG6TE3l2uf8OoneXmuO 7KpPHRxoWXOOagnKCKsSFEqkDfa2uQ2LnoLvi/mpU4DZ9ej1hyeGTQPFKO1fpLsZ vGtHHUJ5JV5rHms4t7Dy8eNHs2OdoNEO7J0DwK7J1zhm80JxpzR++666qIoiup9H FajjTr6RxvUGC91CFAZU46gWha3JXS23U2rvSlCcepQrK60oFFTgqpkCFlKGz4kX P80r38RbDEKbIoW1erghKk15LLGM96AFIqtTODLsYAtsYGDqaz1xwPdYmwvgIjZh +S5wkWn0EO+7E8SQtiStlL5K9oFesykkBQCknpgYyg== -----END CERTIFICATE-----Generated at Mon May 5 23:57:36 2025 by rpki-client