$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa File: AS3223.roa (raw, json) Hash identifier: rJtwHWeYvR90eT4a3SnFsbwxLGuzjfAgWkMdKGSAy2E= Subject key identifier: E5:CB:61:57:FB:11:EF:E0:25:86:DD:D0:0E:30:5E:09:B9:89:E0:81 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4B4A492EDBDE39444FFB658DE9C897BCE717F95B Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa Signing time: Tue 28 Apr 2026 11:19:52 +0000 ROA not before: Tue 28 Apr 2026 11:14:52 +0000 ROA not after: Tue 27 Apr 2027 11:19:52 +0000 asID: 3223 IP address blocks: 64.50.184.0/24 maxlen: 24 64.50.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 12:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:4a:49:2e:db:de:39:44:4f:fb:65:8d:e9:c8:97:bc:e7:17:f9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 28 11:14:52 2026 GMT Not After : Apr 27 11:19:52 2027 GMT Subject: CN=E5CB6157FB11EFE02586DDD00E305E09B989E081 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:45:74:1c:b8:63:8b:df:46:92:f5:60:0c: ea:2b:50:c4:f0:36:e6:aa:92:7f:d7:e0:bf:c5:62: 52:8b:64:de:88:ba:c2:ce:c2:33:65:9c:95:25:6b: 13:d6:19:a2:11:6b:ad:fc:c5:06:2e:d6:8d:f1:71: d1:03:1f:3c:44:aa:2a:9e:a4:00:64:c6:4e:d7:8a: 73:ea:4b:5d:dc:fd:5a:52:79:42:7f:da:12:43:43: 62:7e:45:53:c0:00:59:ef:b4:53:b7:a1:06:10:ea: a3:4a:a7:0e:f9:e9:e7:e2:d6:b3:79:48:52:5f:3b: 70:5d:31:58:2a:09:1c:b3:e4:13:ff:ce:64:b1:e5: c8:7f:1e:6a:ef:c8:21:0e:70:d0:17:7d:3f:bc:1b: 93:8b:3b:ef:25:ad:50:31:e6:bb:90:a1:a9:42:a7: 2b:e8:61:79:f9:96:ae:0e:d7:80:ab:6a:11:2a:7e: bb:84:cf:23:c5:4b:6c:19:08:f4:35:27:0c:73:1e: 34:8b:f9:49:c2:a8:87:79:5c:e5:a0:d3:61:92:67: 4f:64:e8:a3:ab:a2:d9:cc:a8:88:2a:06:39:d3:54: ec:52:6d:bd:30:05:8c:4b:5b:75:00:29:fa:77:c0: f0:f9:c5:b2:16:08:d7:b5:be:aa:44:93:9e:63:b0: 23:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CB:61:57:FB:11:EF:E0:25:86:DD:D0:0E:30:5E:09:B9:89:E0:81 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.184.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:f3:d0:9a:f6:de:cf:ba:40:cc:d5:3c:22:a7:e0:0c:77:86: 61:da:c9:19:88:03:f2:d1:a5:e8:7d:3e:61:6b:98:f1:ae:4b: f8:8e:89:f7:45:01:96:e8:bd:85:6c:78:c7:c2:eb:8e:73:65: 87:84:5a:c4:9d:7d:59:91:bf:76:fd:a8:bb:de:45:69:d0:9f: bf:5e:07:a1:41:db:24:64:5f:f8:36:b4:97:e8:98:e7:69:f0: 11:5f:63:46:e0:96:b6:ac:2b:8d:d2:39:ba:9e:28:41:ea:9b: 1f:b5:58:e1:8e:d3:7e:f9:f0:c8:89:5e:7c:ae:73:7b:2b:77: f3:5d:1e:ea:89:19:25:2e:82:56:41:5e:c7:fb:c6:76:a8:c8: 08:60:62:ff:ab:d0:b9:7a:d5:39:6a:d9:17:ff:41:ca:6a:f5: 79:b4:c3:22:37:52:75:70:7d:a7:47:a2:bf:c1:b4:02:f2:b9: b6:ac:77:6f:1e:75:2b:cd:2a:8e:9e:64:eb:92:f7:65:b6:a7: 71:2b:5f:2d:b9:b3:6c:5e:6f:88:1b:a6:6b:4a:fb:72:2c:d2: b6:07:93:37:50:f6:66:30:06:be:eb:65:88:73:fa:d7:7d:89: 2f:6e:3a:cd:04:11:91:ef:f7:f8:c1:d5:a8:c7:c8:28:1b:94: 65:0d:28:63 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUS0pJLtveOURP+2WN6ciXvOcX+VswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDI4MTExNDUyWhcNMjcwNDI3MTExOTUy WjAzMTEwLwYDVQQDEyhFNUNCNjE1N0ZCMTFFRkUwMjU4NkRERDAwRTMwNUUwOUI5 ODlFMDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lxFdBy4Y4vf RpL1YAzqK1DE8DbmqpJ/1+C/xWJSi2TeiLrCzsIzZZyVJWsT1hmiEWut/MUGLtaN 8XHRAx88RKoqnqQAZMZO14pz6ktd3P1aUnlCf9oSQ0NifkVTwABZ77RTt6EGEOqj SqcO+enn4tazeUhSXztwXTFYKgkcs+QT/85kseXIfx5q78ghDnDQF30/vBuTizvv Ja1QMea7kKGpQqcr6GF5+ZauDteAq2oRKn67hM8jxUtsGQj0NScMcx40i/lJwqiH eVzloNNhkmdPZOijq6LZzKiIKgY501TsUm29MAWMS1t1ACn6d8Dw+cWyFgjXtb6q RJOeY7AjHwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFOXLYVf7Ee/gJYbd0A4wXgm5 ieCBMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzMyMjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFAMrgwDQYJKoZIhvcNAQELBQADggEB AArz0Jr23s+6QMzVPCKn4Ax3hmHayRmIA/LRpeh9PmFrmPGuS/iOifdFAZbovYVs eMfC645zZYeEWsSdfVmRv3b9qLveRWnQn79eB6FB2yRkX/g2tJfomOdp8BFfY0bg lrasK43SObqeKEHqmx+1WOGO03758MiJXnyuc3srd/NdHuqJGSUuglZBXsf7xnao yAhgYv+r0Ll61Tlq2Rf/Qcpq9Xm0wyI3UnVwfadHor/BtALyubasd28edSvNKo6e ZOuS92W2p3ErXy25s2xeb4gbpmtK+3Is0rYHkzdQ9mYwBr7rZYhz+td9iS9uOs0E EZHv9/jB1ajHyCgblGUNKGM= -----END CERTIFICATE-----Generated at Tue May 12 22:53:46 2026 by rpki-client