$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa File: AS996.roa (raw, json) Hash identifier: 0pQ9rmWt2ijSbvmLFg9sNrf/lQc3Zvqa1Ivoi7NHzKE= Subject key identifier: 4F:43:EA:84:66:D4:42:03:3E:FD:74:C0:A7:3A:BA:07:92:FF:12:09 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 64508B9B27976F823F450E371C8DD22E6B5E98 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa Signing time: Thu 03 Apr 2025 16:45:32 +0000 ROA not before: Thu 03 Apr 2025 16:40:32 +0000 ROA not after: Thu 02 Apr 2026 16:45:32 +0000 asID: 996 IP address blocks: 89.35.93.0/24 maxlen: 24 89.35.94.0/24 maxlen: 24 89.35.95.0/24 maxlen: 24 162.213.3.0/24 maxlen: 24 192.228.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 05:38:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:50:8b:9b:27:97:6f:82:3f:45:0e:37:1c:8d:d2:2e:6b:5e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 3 16:40:32 2025 GMT Not After : Apr 2 16:45:32 2026 GMT Subject: CN=4F43EA8466D442033EFD74C0A73ABA0792FF1209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:a6:72:e8:a6:17:c1:54:97:1f:b8:a4:06: f6:0a:cf:33:60:6d:2c:69:5c:16:be:7b:4b:d3:52: 4c:17:1b:24:61:37:0b:36:04:46:ff:4c:0d:c0:fa: 43:a5:25:00:dd:3b:5d:2a:17:65:9f:c5:44:a2:5c: 21:16:07:9b:97:02:66:d7:ec:09:6d:3c:32:fd:d3: 87:f6:97:f4:2a:26:3f:14:02:5e:65:b6:82:54:f0: c6:e8:49:f9:35:4e:66:6a:e9:a6:07:dc:c6:dd:35: 04:80:ba:21:31:89:9a:99:51:db:17:df:d5:5a:ef: 6f:af:13:9a:96:6b:c8:20:07:58:0f:c5:3e:76:eb: d0:d6:25:e6:66:46:20:f7:99:00:1b:51:d3:93:5c: 42:92:9c:d9:ec:9c:c3:44:8d:fa:c9:30:f2:b0:7c: 77:0b:3b:74:a6:0b:ed:4e:ee:5e:d7:7d:c9:97:fc: 28:5b:9a:07:45:fe:f1:d9:b8:06:54:70:3b:9f:94: b2:fa:ec:25:fa:e5:31:49:5d:b3:25:e2:f4:f5:28: cc:1d:83:96:45:06:88:e0:72:a4:26:ad:6d:0a:a5: 0f:b7:13:a8:65:17:23:79:5f:1b:51:c9:f6:97:ce: ee:e3:44:51:db:dc:24:b5:ad:6c:0d:55:23:3c:a5: 29:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:EA:84:66:D4:42:03:3E:FD:74:C0:A7:3A:BA:07:92:FF:12:09 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.35.93.0-89.35.95.255 162.213.3.0/24 192.228.122.0/24 Signature Algorithm: sha256WithRSAEncryption 32:e9:c6:4c:94:45:5f:a9:c3:0c:f1:d4:b6:99:d1:0b:9a:cc: ae:a3:0f:0d:63:a8:43:56:65:4b:c7:e8:66:2c:77:50:58:16: 26:8d:7b:55:44:cf:ce:74:8a:c7:f3:c1:46:89:41:68:03:c3: d2:7d:0c:de:af:bf:64:18:7c:f3:77:70:53:56:3c:cd:3f:30: 87:d1:00:88:c9:0e:a0:7d:d5:f6:66:22:f6:2f:e5:87:5e:d7: 6c:c9:4e:09:b7:e5:c2:ec:26:87:5e:e6:b2:84:6f:de:eb:a0: 9e:40:92:6a:3c:ca:b0:78:56:cf:f0:1a:4b:e5:76:04:a5:be: 09:67:10:0a:f1:9a:e8:af:b1:d2:fa:96:54:50:13:b0:1e:36: dd:ec:ea:1d:2a:58:0f:e8:fb:2e:c8:a7:bb:46:54:da:14:df: b7:fe:b7:72:c5:c3:95:48:1d:52:ad:b5:49:49:91:88:2e:e9: eb:ff:87:fa:1d:2d:08:f6:73:bc:cf:b7:04:9d:79:87:62:90: 7d:7f:a9:c2:fb:a9:69:f8:4b:e2:7e:5e:5f:74:b7:d5:0e:0b: 1a:9d:09:12:77:79:01:02:85:98:c1:03:1d:05:d3:f4:bb:82: 5c:1b:ca:a9:76:c2:43:03:6d:d2:85:02:f7:8a:4d:f1:45:e1: cf:88:7d:56 -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgITZFCLmyeXb4I/RQ43HI3SLmtemDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI0NGRhNWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJi YTc5NDI1MzU3YmI1NmVlZDAeFw0yNTA0MDMxNjQwMzJaFw0yNjA0MDIxNjQ1MzJa MDMxMTAvBgNVBAMTKDRGNDNFQTg0NjZENDQyMDMzRUZENzRDMEE3M0FCQTA3OTJG RjEyMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJh6Zy6KYXwVSX H7ikBvYKzzNgbSxpXBa+e0vTUkwXGyRhNws2BEb/TA3A+kOlJQDdO10qF2WfxUSi XCEWB5uXAmbX7AltPDL904f2l/QqJj8UAl5ltoJU8MboSfk1TmZq6aYH3MbdNQSA uiExiZqZUdsX39Va72+vE5qWa8ggB1gPxT5269DWJeZmRiD3mQAbUdOTXEKSnNns nMNEjfrJMPKwfHcLO3SmC+1O7l7XfcmX/ChbmgdF/vHZuAZUcDuflLL67CX65TFJ XbMl4vT1KMwdg5ZFBojgcqQmrW0KpQ+3E6hlFyN5XxtRyfaXzu7jRFHb3CS1rWwN VSM8pSlpAgMBAAGjggKQMIICjDAdBgNVHQ4EFgQUT0PqhGbUQgM+/XTApzq6B5L/ EgkwHwYDVR0jBBgwFoAUW0DTc9ZxfHBMSDygZYz7UlfE6TwwDgYDVR0PAQH/BAQD AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0 L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0OTBkMzMvMS81 QjQwRDM3M0Q2NzE3QzcwNEM0ODNDQTA2NThDRkI1MjU3QzRFOTNDLmNybDCB8wYI KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i MDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1hODdjLTQzMzktYTJmMy02Mjk5YTNi MDJlMjkvMmJkMGZhYzYtMWE0Ni00MGI1LWJlNjYtOWUwZjdiNTRkZjc3LzQ0ZGE1 ZDEwMzI3N2M5MzdjNTNkY2UzMDViZDlkNzljMmJhNzk0MjUzNTdiYjU2ZWVkLmNl cjBtBggrBgEFBQcBCwRhMF8wXQYIKwYBBQUHMAuGUXJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjExM2VlYTQ5 MGQzMy8xL0FTOTk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDMGCCsG AQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABZI10DBAVZI0ADBACi1QMDBADA5How DQYJKoZIhvcNAQELBQADggEBADLpxkyURV+pwwzx1LaZ0QuazK6jDw1jqENWZUvH 6GYsd1BYFiaNe1VEz850isfzwUaJQWgDw9J9DN6vv2QYfPN3cFNWPM0/MIfRAIjJ DqB91fZmIvYv5Yde12zJTgm35cLsJode5rKEb97roJ5Akmo8yrB4Vs/wGkvldgSl vglnEArxmuivsdL6llRQE7AeNt3s6h0qWA/o+y7Ip7tGVNoU37f+t3LFw5VIHVKt tUlJkYgu6ev/h/odLQj2c7zPtwSdeYdikH1/qcL7qWn4S+J+Xl90t9UOCxqdCRJ3 eQEChZjBAx0F0/S7glwbyql2wkMDbdKFAveKTfFF4c+IfVY= -----END CERTIFICATE-----Generated at Tue May 6 12:10:31 2025 by rpki-client