$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa File: AS400866.roa (raw, json) Hash identifier: Avj9h5fZRtYtGpp+soawknlE75mZx04BAHkc30UQk/k= Subject key identifier: 65:CB:5E:85:B0:62:68:C2:1A:55:D9:40:F1:60:F4:71:64:BA:2B:BC Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 687626ECE6E4A4423BDA378732BD7EC1E7B6D7DB Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa Signing time: Thu 21 Aug 2025 00:29:44 +0000 ROA not before: Thu 21 Aug 2025 00:24:44 +0000 ROA not after: Thu 20 Aug 2026 00:29:44 +0000 asID: 400866 IP address blocks: 23.95.177.0/24 maxlen: 24 104.168.31.0/24 maxlen: 24 107.172.149.0/24 maxlen: 24 198.46.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:76:26:ec:e6:e4:a4:42:3b:da:37:87:32:bd:7e:c1:e7:b6:d7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 21 00:24:44 2025 GMT Not After : Aug 20 00:29:44 2026 GMT Subject: CN=65CB5E85B06268C21A55D940F160F47164BA2BBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:27:1c:98:4b:60:e1:a0:51:63:ac:bf:73: d7:af:c4:55:03:b4:97:4a:d7:e4:94:a7:a7:b0:9f: e3:93:36:3a:10:0f:41:97:63:a8:6b:ff:b5:71:7e: 42:3f:b2:5a:c1:7c:20:a4:d6:92:57:e9:cd:aa:7f: 6a:f6:05:b8:65:cf:6e:a9:47:28:ca:d2:9d:e7:04: cc:37:47:56:f8:fa:89:43:bc:9d:e9:c3:e7:dc:c3: c0:e6:68:62:b6:07:18:05:21:10:1a:b0:93:1c:5e: eb:31:44:41:de:86:20:20:e6:67:a2:93:86:ff:b5: 3f:da:a1:13:eb:04:d8:a7:fb:a1:62:c2:0c:ab:2e: 3f:60:37:0d:d2:07:f9:93:a1:b6:f9:0b:b2:fa:09: a8:5e:3b:71:75:29:35:27:0e:b3:cf:cb:1f:1e:85: 71:92:4d:92:c3:0d:a0:b9:da:d8:f7:fc:62:a8:eb: 63:24:47:15:6f:0f:64:db:0d:02:e6:2e:a7:b6:de: c6:34:d4:92:d3:88:20:14:3b:2a:21:f7:d3:42:bc: 91:d3:bc:5f:ee:67:cd:04:0c:19:72:fa:61:ba:ef: 56:85:82:b3:12:2f:a4:3e:42:df:5b:9e:6f:3a:ef: 75:a2:f6:d3:48:70:10:31:a0:65:ff:9a:ad:69:58: 31:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CB:5E:85:B0:62:68:C2:1A:55:D9:40:F1:60:F4:71:64:BA:2B:BC X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.177.0/24 104.168.31.0/24 107.172.149.0/24 198.46.247.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:48:9a:83:88:85:da:79:89:a4:cc:8a:64:11:a8:52:48:d5: 13:f8:84:ed:c3:30:8e:e3:af:00:85:42:f9:49:c2:7b:8a:32: 48:74:b4:50:b7:9e:45:cb:5e:04:5f:f3:0e:11:d0:5d:3e:0e: cd:8b:64:55:80:f3:32:12:a7:02:6a:62:01:f9:1f:de:fe:5f: 62:bb:6e:76:df:43:b1:35:ca:0f:b4:f5:3e:e9:92:28:06:4e: 5a:cc:36:53:6f:94:bb:a0:c2:65:3a:72:c3:2b:df:37:8b:59: 6f:02:ee:8a:af:8d:f2:15:df:37:14:a5:9a:ae:76:d2:14:07: 7f:62:40:20:9e:5b:0c:94:be:ba:a3:43:3f:b3:cf:42:9d:b8: 01:03:ca:14:2b:c7:92:46:fa:c5:ae:1b:41:df:86:c3:a7:da: 26:1a:3d:f1:21:22:79:01:a6:9e:a0:8a:2a:7f:b8:49:8f:50: a3:0e:eb:9c:30:9b:60:7e:82:ab:81:ee:fb:d6:80:bc:4f:07: ad:e5:e5:17:95:01:eb:81:60:b2:41:31:e4:d4:b2:c8:ac:26: d5:13:bf:f6:e6:d6:7a:7b:00:d3:34:c7:89:52:04:fd:99:2a: 57:4b:8e:ad:bc:42:1c:ae:47:f4:e8:30:b3:5f:30:65:af:c9: 3e:42:19:62 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUaHYm7ObkpEI72jeHMr1+wee219swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODIxMDAyNDQ0WhcNMjYwODIwMDAyOTQ0 WjAzMTEwLwYDVQQDEyg2NUNCNUU4NUIwNjI2OEMyMUE1NUQ5NDBGMTYwRjQ3MTY0 QkEyQkJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppsnHJhLYOGg UWOsv3PXr8RVA7SXStfklKensJ/jkzY6EA9Bl2Ooa/+1cX5CP7JawXwgpNaSV+nN qn9q9gW4Zc9uqUcoytKd5wTMN0dW+PqJQ7yd6cPn3MPA5mhitgcYBSEQGrCTHF7r MURB3oYgIOZnopOG/7U/2qET6wTYp/uhYsIMqy4/YDcN0gf5k6G2+Quy+gmoXjtx dSk1Jw6zz8sfHoVxkk2Sww2gudrY9/xiqOtjJEcVbw9k2w0C5i6ntt7GNNSS04gg FDsqIffTQryR07xf7mfNBAwZcvphuu9WhYKzEi+kPkLfW55vOu91ovbTSHAQMaBl /5qtaVgx1wIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFGXLXoWwYmjCGlXZQPFg9HFk uiu8MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMDg2Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEABdfsQMEAGioHwMEAGuslQMEAMYu 9zANBgkqhkiG9w0BAQsFAAOCAQEAXkiag4iF2nmJpMyKZBGoUkjVE/iE7cMwjuOv AIVC+UnCe4oySHS0ULeeRcteBF/zDhHQXT4OzYtkVYDzMhKnAmpiAfkf3v5fYrtu dt9DsTXKD7T1PumSKAZOWsw2U2+Uu6DCZTpywyvfN4tZbwLuiq+N8hXfNxSlmq52 0hQHf2JAIJ5bDJS+uqNDP7PPQp24AQPKFCvHkkb6xa4bQd+Gw6faJho98SEieQGm nqCKKn+4SY9Qow7rnDCbYH6Cq4Hu+9aAvE8HreXlF5UB64FgskEx5NSyyKwm1RO/ 9ubWensA0zTHiVIE/ZkqV0uOrbxCHK5H9Ogws18wZa/JPkIZYg== -----END CERTIFICATE-----Generated at Sat Aug 23 17:04:23 2025 by rpki-client