$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa File: AS214174.roa (raw, json) Hash identifier: Dj8KakSmLSCj8lT+ni7aVFdtnhv60yNmAxnxkcF4Cxo= Subject key identifier: A8:45:DC:D6:9D:DD:29:EB:A8:4A:CD:69:B2:1D:39:27:ED:CB:CE:8E Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 6FD8FB87F16F4E17E0AFDF516FD9196D32DB7592 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa Signing time: Tue 24 Jun 2025 13:26:02 +0000 ROA not before: Tue 24 Jun 2025 13:21:02 +0000 ROA not after: Tue 23 Jun 2026 13:26:02 +0000 asID: 214174 IP address blocks: 157.254.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 20:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:d8:fb:87:f1:6f:4e:17:e0:af:df:51:6f:d9:19:6d:32:db:75:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 24 13:21:02 2025 GMT Not After : Jun 23 13:26:02 2026 GMT Subject: CN=A845DCD69DDD29EBA84ACD69B21D3927EDCBCE8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:6b:05:67:c3:c5:76:00:dc:a2:d0:9c:5d: 2a:48:dc:0c:07:28:3b:aa:a4:78:8f:31:69:73:69: 83:f0:a6:d3:0f:26:70:29:56:01:a3:76:f6:ed:4f: e0:b5:81:e1:10:f3:c7:6a:64:47:ad:25:40:c9:6f: ec:52:32:8f:3d:15:c8:e4:b5:1b:53:3b:5d:f4:5f: 0e:56:90:37:d1:5b:08:23:13:2d:eb:04:2c:73:6f: cc:92:d5:98:73:32:c3:53:41:d6:dd:dd:21:61:83: a6:cd:56:2f:60:d5:fb:a7:9d:04:e0:90:f5:53:3e: 97:43:03:b9:69:dc:7e:90:17:63:c1:89:a6:82:0e: 7f:32:03:46:aa:3c:6b:01:c2:a3:56:21:8e:fc:48: a9:4d:76:cc:a8:7e:5f:08:a0:4a:d2:2b:74:e9:8c: 1e:56:0c:71:20:ba:9a:ef:bd:ff:0a:de:86:4a:e3: 13:44:b7:04:86:6a:21:87:ca:ab:8f:b4:79:98:f3: 74:f6:41:4b:97:be:d6:90:8a:83:f0:e4:c1:fc:4f: 6c:84:90:af:fe:b1:a9:78:c2:c6:af:bc:01:9f:7e: 10:eb:59:7b:fc:c3:d2:60:be:ec:bf:7a:57:86:57: 0a:b9:fb:2f:20:9a:dc:96:58:36:64:03:07:c2:51: 50:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:45:DC:D6:9D:DD:29:EB:A8:4A:CD:69:B2:1D:39:27:ED:CB:CE:8E X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.189.0/24 Signature Algorithm: sha256WithRSAEncryption 59:c0:87:3d:58:b6:35:42:3f:7c:09:e9:3c:0f:4c:e9:d9:e9: dc:37:91:ce:a3:c0:5c:91:8b:66:6e:12:ed:86:79:18:0c:30: 85:d0:e1:b5:26:6c:0b:7e:0f:62:32:f8:20:e4:b4:9a:70:ff: 86:65:2a:df:b1:5a:02:31:6c:be:4c:9a:b2:af:a7:5f:dd:26: e5:8c:d3:63:35:47:dc:dd:25:b3:91:d7:6a:18:30:b4:a1:b7: 2b:56:79:db:95:64:68:26:e7:10:5d:6e:ce:8e:75:f0:01:35: 81:de:be:7e:7b:2c:cd:39:27:da:28:d2:9f:11:62:ab:86:d4: 3d:5d:61:58:ef:34:c3:0c:0f:7c:09:3d:e7:b1:23:51:1f:ed: 6e:4a:5c:b2:3c:93:93:f7:b1:6a:42:dc:69:93:18:a4:d9:d4: 06:dc:b3:da:7e:74:4f:2e:ea:b2:ec:c1:17:34:88:19:29:20: 16:c0:48:45:51:d0:9c:01:c4:1b:11:80:b8:27:a1:02:db:72: 00:89:74:e0:79:40:0a:82:86:3d:7a:47:ff:04:49:36:22:fc: f8:63:d0:65:40:83:6b:8e:08:f8:23:7c:0a:13:6f:e0:7d:8d: d3:01:94:36:14:df:eb:db:d9:3e:9d:56:79:c1:6b:44:51:a2: 8b:77:3c:85 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUb9j7h/FvThfgr99Rb9kZbTLbdZIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjI0MTMyMTAyWhcNMjYwNjIzMTMyNjAy WjAzMTEwLwYDVQQDEyhBODQ1RENENjlEREQyOUVCQTg0QUNENjlCMjFEMzkyN0VE Q0JDRThFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdZrBWfDxXYA 3KLQnF0qSNwMByg7qqR4jzFpc2mD8KbTDyZwKVYBo3b27U/gtYHhEPPHamRHrSVA yW/sUjKPPRXI5LUbUztd9F8OVpA30VsIIxMt6wQsc2/MktWYczLDU0HW3d0hYYOm zVYvYNX7p50E4JD1Uz6XQwO5adx+kBdjwYmmgg5/MgNGqjxrAcKjViGO/EipTXbM qH5fCKBK0it06YweVgxxILqa773/Ct6GSuMTRLcEhmohh8qrj7R5mPN09kFLl77W kIqD8OTB/E9shJCv/rGpeMLGr7wBn34Q61l7/MPSYL7sv3pXhlcKufsvIJrcllg2 ZAMHwlFQNwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKhF3Nad3SnrqErNabIdOSft y86OMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNDE3NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+vTANBgkqhkiG9w0BAQsFAAOC AQEAWcCHPVi2NUI/fAnpPA9M6dnp3DeRzqPAXJGLZm4S7YZ5GAwwhdDhtSZsC34P YjL4IOS0mnD/hmUq37FaAjFsvkyasq+nX90m5YzTYzVH3N0ls5HXahgwtKG3K1Z5 25VkaCbnEF1uzo518AE1gd6+fnsszTkn2ijSnxFiq4bUPV1hWO80wwwPfAk957Ej UR/tbkpcsjyTk/exakLcaZMYpNnUBtyz2n50Ty7qsuzBFzSIGSkgFsBIRVHQnAHE GxGAuCehAttyAIl04HlACoKGPXpH/wRJNiL8+GPQZUCDa44I+CN8ChNv4H2N0wGU NhTf69vZPp1WecFrRFGii3c8hQ== -----END CERTIFICATE-----Generated at Sun Jun 29 06:08:28 2025 by rpki-client