$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: MUQDzsGPEBpAbvP24bDiRnEN2t/HRYOQO6H4oab/JZM= Subject key identifier: 48:BA:1B:EA:E3:D4:99:32:81:0D:AC:2C:C5:EF:34:D8:75:81:B4:3F Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 08C866E0EA0E0804F201377B31DCDA5BAB5A373E Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa Signing time: Wed 13 Aug 2025 05:13:32 +0000 ROA not before: Wed 13 Aug 2025 05:08:32 +0000 ROA not after: Wed 12 Aug 2026 05:13:32 +0000 asID: 401838 IP address blocks: 67.210.102.0/24 maxlen: 24 89.35.93.0/24 maxlen: 24 89.35.94.0/24 maxlen: 24 89.35.95.0/24 maxlen: 24 162.213.3.0/24 maxlen: 24 192.228.112.0/24 maxlen: 24 192.228.113.0/24 maxlen: 24 192.228.117.0/24 maxlen: 24 192.228.122.0/24 maxlen: 24 192.228.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:c8:66:e0:ea:0e:08:04:f2:01:37:7b:31:dc:da:5b:ab:5a:37:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 13 05:08:32 2025 GMT Not After : Aug 12 05:13:32 2026 GMT Subject: CN=48BA1BEAE3D49932810DAC2CC5EF34D87581B43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:de:68:a5:85:73:5a:cd:eb:d9:73:d4:c4:80: 63:f3:ff:20:53:2e:a3:8e:96:4b:cc:2d:ab:c2:3b: 21:7e:7d:0c:56:a4:88:99:08:75:da:c4:c0:dc:5e: ba:76:81:ae:39:0d:9b:c4:78:ff:d9:92:d0:e5:44: e3:51:47:32:43:17:3c:c4:09:60:df:f0:6c:23:71: f8:12:a7:7a:b2:dd:eb:35:b6:bd:da:9b:b3:4e:a7: 2f:e5:61:81:2f:24:9a:97:a8:68:fd:f7:a6:88:82: 8e:d6:68:40:ad:ed:49:0a:f4:82:f2:b2:2a:8a:9b: 8a:3e:69:75:c4:3f:11:86:86:fb:dc:44:09:2a:f0: 22:f8:dd:81:7d:3f:7e:3a:c8:2a:3c:70:4d:13:94: dc:1d:c9:d8:c3:b8:60:6d:30:3a:99:e9:e0:bd:e7: ab:85:e6:07:02:5e:f4:00:e3:06:93:12:c3:9c:84: 91:7c:b4:04:7e:87:57:08:e1:86:68:7e:85:c0:8f: 3c:f7:bf:1b:06:af:1c:a5:c4:7c:1c:59:75:9f:b8: 30:e5:cd:fa:b2:60:82:bc:f5:5f:8f:66:25:12:ab: 32:87:cd:6f:c6:4b:c2:7f:82:a1:31:21:a0:3a:69: f8:dc:3d:5b:68:57:3f:d7:fd:f9:f7:02:5a:ba:b7: ed:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BA:1B:EA:E3:D4:99:32:81:0D:AC:2C:C5:EF:34:D8:75:81:B4:3F X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.102.0/24 89.35.93.0-89.35.95.255 162.213.3.0/24 192.228.112.0/23 192.228.117.0/24 192.228.122.0/24 192.228.126.0/23 Signature Algorithm: sha256WithRSAEncryption c7:26:7b:80:6f:6f:a3:b0:5c:ab:8b:ee:ee:f8:f0:57:37:d6: e6:a6:25:31:cd:e9:8f:52:19:7f:5d:bb:a5:68:ad:2c:86:49: 00:85:a6:18:15:52:6c:d6:86:98:99:ab:6b:a0:0a:d4:d6:f7: ff:d2:19:1c:c1:ff:77:77:54:3f:f8:9a:d9:82:aa:a3:26:51: 0e:60:e3:8d:84:c3:29:6a:19:47:17:b0:9f:29:18:9e:d4:8c: 2b:24:53:57:6f:28:68:7b:39:74:00:0e:35:41:04:59:8f:e2: 6d:7b:67:1b:20:51:a1:e2:af:40:12:59:4a:a0:c3:1c:b0:d8: 81:2b:38:92:55:f2:b1:7e:e6:73:64:67:c9:23:db:1d:fd:76: 9f:f1:ca:c8:98:b6:04:cd:56:21:91:90:f0:ed:50:6e:c2:e0: 9c:c6:c3:c6:77:65:c9:60:0a:97:35:74:48:7b:0d:f0:9c:4d: 89:62:55:82:ac:95:62:69:1a:7c:e8:32:4c:2e:24:dd:c8:f1: c2:06:a2:c4:da:8e:71:fc:cd:7b:35:59:a5:0d:04:69:d7:4f: 11:c8:1f:c9:40:c9:e1:f2:7d:4f:0b:f7:7a:bc:a1:e2:bf:cb: bb:3b:af:26:df:f4:10:5b:0a:85:32:14:a1:80:7d:8c:23:4d: f9:e9:86:45 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUCMhm4OoOCATyATd7MdzaW6taNz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODEzMDUwODMyWhcNMjYwODEyMDUxMzMy WjAzMTEwLwYDVQQDEyg0OEJBMUJFQUUzRDQ5OTMyODEwREFDMkNDNUVGMzREODc1 ODFCNDNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA095opYVzWs3r 2XPUxIBj8/8gUy6jjpZLzC2rwjshfn0MVqSImQh12sTA3F66doGuOQ2bxHj/2ZLQ 5UTjUUcyQxc8xAlg3/BsI3H4Eqd6st3rNba92puzTqcv5WGBLySal6ho/femiIKO 1mhAre1JCvSC8rIqipuKPml1xD8Rhob73EQJKvAi+N2BfT9+OsgqPHBNE5TcHcnY w7hgbTA6mengveerheYHAl70AOMGkxLDnISRfLQEfodXCOGGaH6FwI88978bBq8c pcR8HFl1n7gw5c36smCCvPVfj2YlEqsyh81vxkvCf4KhMSGgOmn43D1baFc/1/35 9wJaurft4wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEi6G+rj1JkygQ2sLMXvNNh1 gbQ/MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMTgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBL BggrBgEFBQcBBwEB/wQ8MDowOAQCAAEwMgMEAEPSZjAMAwQAWSNdAwQFWSNAAwQA otUDAwQBwORwAwQAwOR1AwQAwOR6AwQBwOR+MA0GCSqGSIb3DQEBCwUAA4IBAQDH JnuAb2+jsFyri+7u+PBXN9bmpiUxzemPUhl/XbulaK0shkkAhaYYFVJs1oaYmatr oArU1vf/0hkcwf93d1Q/+JrZgqqjJlEOYOONhMMpahlHF7CfKRie1IwrJFNXbyho ezl0AA41QQRZj+Jte2cbIFGh4q9AEllKoMMcsNiBKziSVfKxfuZzZGfJI9sd/Xaf 8crImLYEzVYhkZDw7VBuwuCcxsPGd2XJYAqXNXRIew3wnE2JYlWCrJViaRp86DJM LiTdyPHCBqLE2o5x/M17NVmlDQRp108RyB/JQMnh8n1PC/d6vKHiv8u7O68m3/QQ WwqFMhShgH2MI0356YZF -----END CERTIFICATE-----Generated at Sat Aug 23 18:45:26 2025 by rpki-client