$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa File: AS209242.roa (raw, json) Hash identifier: ddXxozTcmYF3kGTJ/m6Qr1JaanJDH0s3seK0/CUS8Cw= Subject key identifier: 08:99:00:7E:1C:F0:25:97:79:95:F6:35:10:56:DF:29:88:DA:CC:CE Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 4BCCF674A696FFE9F7204172E62C3E6FDA341E9A Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa Signing time: Tue 30 Sep 2025 18:30:38 +0000 ROA not before: Tue 30 Sep 2025 18:25:38 +0000 ROA not after: Tue 29 Sep 2026 18:30:38 +0000 asID: 209242 IP address blocks: 140.99.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 14:13:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:cc:f6:74:a6:96:ff:e9:f7:20:41:72:e6:2c:3e:6f:da:34:1e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Sep 30 18:25:38 2025 GMT Not After : Sep 29 18:30:38 2026 GMT Subject: CN=0899007E1CF025977995F6351056DF2988DACCCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7e:60:ca:5b:f9:2d:ac:42:0d:39:2c:bc:b0: 1a:45:28:e8:03:55:b7:14:3d:4e:b4:24:f5:5c:8c: 71:89:17:6d:1f:35:cd:f4:d7:12:98:48:ac:ff:40: 36:85:87:59:4a:8f:a1:79:f6:26:bd:d4:90:2b:d8: d1:c6:d6:3c:b1:da:10:55:5d:94:7a:b8:c6:bb:ed: f2:b3:1f:d9:f8:a9:04:82:39:cd:24:9d:55:13:b2: 25:5d:02:a9:0b:ae:cd:08:dc:5f:c1:6d:9b:61:47: 95:e3:aa:fc:13:fa:a3:38:1a:5c:b2:11:ad:9a:84: 47:d3:31:04:ca:e7:15:fe:58:13:34:df:13:64:7c: 12:3a:b7:ac:76:da:08:5c:29:48:03:e7:4d:15:cd: d6:7c:84:93:7d:e4:ff:89:d3:1e:bf:eb:fa:1f:bb: e2:f8:6e:8f:5f:42:53:01:91:e9:f3:68:39:61:8f: 97:75:3e:fd:13:4f:a1:5a:8f:66:9f:2f:28:88:da: a6:7d:32:8a:a0:6e:19:4a:77:77:62:65:96:62:69: 78:25:67:71:81:72:3b:f0:8c:11:31:19:6a:64:e2: ba:72:35:a6:59:db:10:ab:c1:2b:10:d3:5b:d6:f2: cb:22:44:ef:de:d4:70:cd:bb:1d:37:f0:5f:9d:eb: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:99:00:7E:1C:F0:25:97:79:95:F6:35:10:56:DF:29:88:DA:CC:CE X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS209242.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.233.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:cd:f2:dd:37:da:8e:5e:17:f8:10:47:b5:d5:e7:fe:8c:fa: 00:42:5d:c1:d1:a8:c5:56:e9:49:8d:d0:1e:c3:cf:7e:fd:8b: bd:fa:d2:35:df:12:64:ca:db:7d:8b:c6:11:d0:0b:02:fb:42: 25:40:bb:ff:83:34:88:bf:98:21:4c:a8:27:de:77:ea:7a:86: 29:3b:91:a1:f0:15:88:6b:73:fd:a4:95:ee:a1:28:55:c2:00: b1:df:80:4e:e8:0e:61:9a:66:50:ad:36:6c:1e:2a:0d:0e:21: d6:6a:29:29:08:d0:66:fa:84:64:91:8b:64:43:1c:b3:56:de: bb:9c:eb:e3:db:81:82:24:bb:c8:ae:a7:ed:03:5a:3b:2c:f3: ba:de:8c:a2:21:f6:29:1a:34:b8:32:33:63:67:18:05:03:52: a7:b8:d4:5c:e9:d8:7d:73:33:16:c7:88:dd:6a:49:cf:9f:9c: d1:4f:ba:a3:34:14:c0:4f:aa:b1:1e:c6:f2:af:e4:b7:71:9a: ac:b9:d9:c0:d4:8c:00:a3:4d:41:e0:fd:5d:4c:a8:51:3e:df: 4e:5a:06:6f:c2:4f:be:21:8d:0e:b7:d0:e0:12:8d:b5:68:07: 9b:d5:5d:cc:c1:96:63:46:32:0d:5d:c9:2d:49:a9:2e:fa:8e: a3:71:b9:ad -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUS8z2dKaW/+n3IEFy5iw+b9o0HpowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwOTMwMTgyNTM4WhcNMjYwOTI5MTgzMDM4 WjAzMTEwLwYDVQQDEygwODk5MDA3RTFDRjAyNTk3Nzk5NUY2MzUxMDU2REYyOTg4 REFDQ0NFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX5gylv5LaxC DTksvLAaRSjoA1W3FD1OtCT1XIxxiRdtHzXN9NcSmEis/0A2hYdZSo+hefYmvdSQ K9jRxtY8sdoQVV2UerjGu+3ysx/Z+KkEgjnNJJ1VE7IlXQKpC67NCNxfwW2bYUeV 46r8E/qjOBpcshGtmoRH0zEEyucV/lgTNN8TZHwSOresdtoIXClIA+dNFc3WfIST feT/idMev+v6H7vi+G6PX0JTAZHp82g5YY+XdT79E0+hWo9mny8oiNqmfTKKoG4Z Snd3YmWWYml4JWdxgXI78IwRMRlqZOK6cjWmWdsQq8ErENNb1vLLIkTv3tRwzbsd N/BfnevkowIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAiZAH4c8CWXeZX2NRBW3ymI 2szOMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIwOTI0Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIxj6TANBgkqhkiG9w0BAQsFAAOC AQEAWs3y3Tfajl4X+BBHtdXn/oz6AEJdwdGoxVbpSY3QHsPPfv2LvfrSNd8SZMrb fYvGEdALAvtCJUC7/4M0iL+YIUyoJ9536nqGKTuRofAViGtz/aSV7qEoVcIAsd+A TugOYZpmUK02bB4qDQ4h1mopKQjQZvqEZJGLZEMcs1beu5zr49uBgiS7yK6n7QNa Oyzzut6MoiH2KRo0uDIzY2cYBQNSp7jUXOnYfXMzFseI3WpJz5+c0U+6ozQUwE+q sR7G8q/kt3GarLnZwNSMAKNNQeD9XUyoUT7fTloGb8JPviGNDrfQ4BKNtWgHm9Vd zMGWY0YyDV3JLUmpLvqOo3G5rQ== -----END CERTIFICATE-----Generated at Tue Nov 4 17:14:17 2025 by rpki-client