$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa File: AS197890.roa (raw, json) Hash identifier: uOU+fT0Zv4zTKOOHqWhtNflu1kqtVNRITlYeNUnDhvs= Subject key identifier: D6:91:47:CD:93:40:7A:09:55:D0:7B:ED:BA:E0:F8:77:3C:B2:4C:C9 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 58B21497B3067FAE0B1770A78E46397214F518BC Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa Signing time: Mon 05 May 2025 18:28:32 +0000 ROA not before: Mon 05 May 2025 18:23:32 +0000 ROA not after: Mon 04 May 2026 18:28:32 +0000 asID: 197890 IP address blocks: 140.99.196.0/23 maxlen: 24 140.99.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 14:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:b2:14:97:b3:06:7f:ae:0b:17:70:a7:8e:46:39:72:14:f5:18:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: May 5 18:23:32 2025 GMT Not After : May 4 18:28:32 2026 GMT Subject: CN=D69147CD93407A0955D07BEDBAE0F8773CB24CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:b8:ca:3f:56:82:44:67:8d:ba:cb:6b:8f: 2b:a8:ab:7b:38:5b:f1:16:b9:43:a5:bc:61:29:b4: f5:f8:3c:ee:f7:9f:76:83:ac:3d:2e:83:bf:36:1a: da:61:86:cf:46:e4:55:ce:e0:1f:c0:f8:ea:5b:69: 49:8b:4d:1e:2a:34:f4:3b:2c:c0:61:e4:26:de:98: 4a:89:60:65:aa:08:37:2c:f9:c4:4b:37:ba:89:8b: 1e:26:8b:54:66:fb:cb:b9:d8:4b:45:4f:ad:c9:fe: cc:fb:28:fd:0a:0a:86:98:f4:0a:35:e0:37:d9:6c: 36:24:02:6a:d9:42:36:88:6e:65:dc:88:e9:2d:7c: 49:75:04:0b:3a:05:f6:9b:20:40:c1:22:cc:52:cd: cb:9d:66:0e:12:98:c1:cb:37:cd:a3:2b:f1:2a:ae: e8:74:5f:03:22:75:43:7b:a9:e9:19:fa:64:30:00: da:a1:e1:7c:5f:71:e2:15:75:19:d1:e5:5c:ec:c9: 2e:ad:9a:d5:ef:71:86:34:e5:dd:41:4a:b6:e6:45: e4:4a:bc:e8:f0:3c:10:1f:dd:7e:87:05:7b:98:82: fc:af:b7:63:66:a9:45:20:24:38:92:3d:4e:cf:e7: 03:6f:17:1d:bf:68:4d:6d:fa:06:ef:64:71:0c:e9: e2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:91:47:CD:93:40:7A:09:55:D0:7B:ED:BA:E0:F8:77:3C:B2:4C:C9 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS197890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.196.0/23 140.99.202.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:30:f1:5d:34:d5:48:3e:e0:f9:65:89:1d:ca:b6:81:75:05: fe:cd:0c:b0:a0:c0:46:f3:b5:76:c1:65:ab:9a:ff:4b:c0:0e: 22:fc:5a:34:6a:c2:9a:33:a5:55:c7:5f:5e:69:e8:f9:28:d5: 9e:90:63:c5:28:04:79:45:77:75:84:ab:6e:c9:ca:3e:68:39: 46:a6:91:23:cd:3a:1a:58:65:2d:80:d2:6c:1b:ec:f3:85:9d: 9a:ec:97:12:5d:a4:00:26:99:5a:cd:d9:33:90:a7:a8:52:4d: 0d:dd:dd:92:18:02:a9:b1:1a:c2:15:7e:ca:de:87:a9:3c:d8: c4:7f:89:f2:a3:44:34:34:c8:ea:6c:48:2c:23:92:b4:3e:4c: 1b:a7:78:19:b6:53:95:23:7c:71:96:08:ea:11:42:3e:ec:2b: 83:57:a2:3f:0c:89:85:94:7d:8e:45:c9:2e:36:5e:e4:e6:45: b3:ed:6f:87:2c:77:a1:36:8a:06:34:f5:4d:dc:b0:c1:ea:02: 11:b4:d6:92:02:ec:3c:67:77:c7:a0:87:1c:21:9f:28:c5:1b: cd:51:83:4e:89:49:56:74:49:3e:30:bf:dd:8b:b6:c9:92:d2: e3:16:ac:02:55:e7:df:b7:3c:4f:af:5e:30:68:7d:0a:5d:00: 76:0e:dc:9e -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUWLIUl7MGf64LF3CnjkY5chT1GLwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNTA1MTgyMzMyWhcNMjYwNTA0MTgyODMy WjAzMTEwLwYDVQQDEyhENjkxNDdDRDkzNDA3QTA5NTVEMDdCRURCQUUwRjg3NzND QjI0Q0M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoW4yj9WgkRn jbrLa48rqKt7OFvxFrlDpbxhKbT1+Dzu9592g6w9LoO/NhraYYbPRuRVzuAfwPjq W2lJi00eKjT0OyzAYeQm3phKiWBlqgg3LPnESze6iYseJotUZvvLudhLRU+tyf7M +yj9CgqGmPQKNeA32Ww2JAJq2UI2iG5l3IjpLXxJdQQLOgX2myBAwSLMUs3LnWYO EpjByzfNoyvxKq7odF8DInVDe6npGfpkMADaoeF8X3HiFXUZ0eVc7MkurZrV73GG NOXdQUq25kXkSrzo8DwQH91+hwV7mIL8r7djZqlFICQ4kj1Oz+cDbxcdv2hNbfoG 72RxDOnivQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFNaRR82TQHoJVdB77brg+Hc8 skzJMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzE5Nzg5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAYxjxAMEAYxjyjANBgkqhkiG9w0B AQsFAAOCAQEAjTDxXTTVSD7g+WWJHcq2gXUF/s0MsKDARvO1dsFlq5r/S8AOIvxa NGrCmjOlVcdfXmno+SjVnpBjxSgEeUV3dYSrbsnKPmg5RqaRI806GlhlLYDSbBvs 84WdmuyXEl2kACaZWs3ZM5CnqFJNDd3dkhgCqbEawhV+yt6HqTzYxH+J8qNENDTI 6mxILCOStD5MG6d4GbZTlSN8cZYI6hFCPuwrg1eiPwyJhZR9jkXJLjZe5OZFs+1v hyx3oTaKBjT1TdywweoCEbTWkgLsPGd3x6CHHCGfKMUbzVGDTolJVnRJPjC/3Yu2 yZLS4xasAlXn37c8T69eMGh9Cl0Adg7cng== -----END CERTIFICATE-----Generated at Wed Nov 5 06:07:16 2025 by rpki-client