$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: sAdMqlpVQXjta8W6TQUNvy2Z2AYWgnpiPGoyHYDR3fM= Subject key identifier: B9:4C:C8:30:8F:6C:46:18:9D:5B:15:37:A6:B7:E5:CF:C2:51:F9:E5 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 3FAEFE734D2EF3D716871D72A9E361CBCF1005BF Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212238.roa Signing time: Sat 15 Mar 2025 00:01:58 +0000 ROA not before: Fri 14 Mar 2025 23:56:58 +0000 ROA not after: Sat 14 Mar 2026 00:01:58 +0000 asID: 212238 IP address blocks: 140.99.62.0/24 maxlen: 24 140.99.68.0/24 maxlen: 24 140.99.78.0/24 maxlen: 24 140.99.80.0/24 maxlen: 24 140.99.82.0/24 maxlen: 24 140.99.89.0/24 maxlen: 24 140.99.90.0/24 maxlen: 24 140.99.93.0/24 maxlen: 24 140.99.100.0/24 maxlen: 24 140.99.105.0/24 maxlen: 24 140.99.106.0/24 maxlen: 24 140.99.107.0/24 maxlen: 24 140.99.108.0/24 maxlen: 24 140.99.109.0/24 maxlen: 24 140.99.110.0/24 maxlen: 24 140.99.111.0/24 maxlen: 24 140.99.113.0/24 maxlen: 24 140.99.121.0/24 maxlen: 24 140.99.125.0/24 maxlen: 24 140.99.130.0/24 maxlen: 24 140.99.136.0/24 maxlen: 24 140.99.137.0/24 maxlen: 24 140.99.138.0/24 maxlen: 24 140.99.139.0/24 maxlen: 24 140.99.150.0/24 maxlen: 24 140.99.152.0/24 maxlen: 24 140.99.153.0/24 maxlen: 24 140.99.154.0/24 maxlen: 24 140.99.155.0/24 maxlen: 24 140.99.156.0/24 maxlen: 24 140.99.157.0/24 maxlen: 24 140.99.158.0/24 maxlen: 24 140.99.159.0/24 maxlen: 24 140.99.160.0/24 maxlen: 24 140.99.161.0/24 maxlen: 24 140.99.162.0/24 maxlen: 24 140.99.163.0/24 maxlen: 24 140.99.165.0/24 maxlen: 24 140.99.166.0/24 maxlen: 24 140.99.167.0/24 maxlen: 24 140.99.168.0/24 maxlen: 24 140.99.169.0/24 maxlen: 24 140.99.170.0/24 maxlen: 24 140.99.171.0/24 maxlen: 24 140.99.180.0/24 maxlen: 24 140.99.181.0/24 maxlen: 24 140.99.182.0/24 maxlen: 24 140.99.183.0/24 maxlen: 24 140.99.213.0/24 maxlen: 24 140.99.228.0/24 maxlen: 24 140.99.229.0/24 maxlen: 24 140.99.230.0/24 maxlen: 24 140.99.231.0/24 maxlen: 24 140.99.238.0/24 maxlen: 24 140.99.239.0/24 maxlen: 24 140.99.240.0/24 maxlen: 24 140.99.242.0/24 maxlen: 24 140.99.246.0/24 maxlen: 24 140.99.247.0/24 maxlen: 24 140.99.249.0/24 maxlen: 24 140.99.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 08:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ae:fe:73:4d:2e:f3:d7:16:87:1d:72:a9:e3:61:cb:cf:10:05:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Mar 14 23:56:58 2025 GMT Not After : Mar 14 00:01:58 2026 GMT Subject: CN=B94CC8308F6C46189D5B1537A6B7E5CFC251F9E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1e:d5:a5:a6:0b:57:81:c8:55:20:93:5d:dc: 63:f2:97:e1:59:0b:0b:2c:de:68:de:04:68:64:e5: 1a:46:b1:35:79:b4:18:dd:3b:a6:55:f6:8f:d9:58: 1c:3a:e1:d1:6f:45:5b:0d:d8:e6:d5:53:83:44:44: c1:b8:6d:49:98:7c:1c:2c:7f:17:f4:b7:dd:e1:f7: 84:68:31:e5:e0:bd:ed:a5:6e:59:77:00:39:25:18: 01:e3:b8:7e:be:25:52:0c:8b:f0:f6:be:55:cf:3f: 93:a2:84:b3:d8:aa:83:af:e8:a2:99:7c:50:35:ee: 1a:41:08:51:aa:b5:bf:e4:8a:64:28:9c:5e:45:7a: c8:15:9b:7b:7c:63:0c:61:bc:d0:6f:3b:8a:70:66: 97:20:db:33:73:87:66:14:c3:0f:d4:2e:89:96:cc: cb:f3:3e:fb:02:e4:56:64:c4:8b:bf:76:c8:9c:9b: 2a:77:7a:56:bb:d2:5b:07:d9:a2:ce:34:20:76:b4: d0:59:c2:56:f0:a3:33:be:fc:d4:6e:fb:2b:2e:c9: bd:a6:65:38:79:a6:c8:ba:87:b7:76:5f:fb:93:53: c8:09:80:49:8e:6f:7c:51:87:35:fe:ae:c2:ac:18: b2:53:a7:53:93:47:e1:dc:0d:1f:8d:66:09:a5:d5: cc:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4C:C8:30:8F:6C:46:18:9D:5B:15:37:A6:B7:E5:CF:C2:51:F9:E5 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.62.0/24 140.99.68.0/24 140.99.78.0/24 140.99.80.0/24 140.99.82.0/24 140.99.89.0-140.99.90.255 140.99.93.0/24 140.99.100.0/24 140.99.105.0-140.99.111.255 140.99.113.0/24 140.99.121.0/24 140.99.125.0/24 140.99.130.0/24 140.99.136.0/22 140.99.150.0/24 140.99.152.0-140.99.163.255 140.99.165.0-140.99.171.255 140.99.180.0/22 140.99.213.0/24 140.99.228.0/22 140.99.238.0-140.99.240.255 140.99.242.0/24 140.99.246.0/23 140.99.249.0/24 140.99.251.0/24 Signature Algorithm: sha256WithRSAEncryption ae:e3:ac:1c:2c:e6:bf:d1:13:87:fc:f9:99:a5:a3:45:44:68: 75:29:11:6c:10:9f:a3:d7:6a:a2:96:75:0f:25:6d:ac:3d:3c: 30:28:bb:8e:37:84:47:13:62:6f:11:6b:c5:91:b9:66:9e:eb: de:d3:36:96:fe:b7:c0:2e:d3:ae:18:df:2b:30:a7:60:2a:94: 75:a6:53:86:50:2a:90:c1:fb:7a:7b:e1:be:ff:a6:3f:b5:ce: 87:47:85:17:68:f7:37:1d:02:78:8f:b8:df:e9:ae:ed:de:2d: b3:ef:97:c4:a2:33:6a:08:d6:58:13:b1:bf:2b:fc:5c:e1:a1: 1a:fa:c4:35:96:7d:5a:92:0e:34:a0:80:56:3e:6e:40:d7:9e: 94:24:af:5f:06:64:e7:fa:97:d2:8e:8e:47:9e:7f:8c:12:cb: 18:ec:9a:76:70:bf:7e:3e:b5:cc:ac:f7:2f:8b:54:79:f1:13: 17:05:a9:c2:a1:e5:62:d9:dd:8a:38:31:38:29:c0:64:76:f8: 6d:39:3d:f1:88:88:df:69:0e:3b:05:7c:8b:04:9b:de:c6:5b: 7a:5d:42:b8:c1:80:78:5b:c6:3f:d8:42:9e:d2:ad:49:42:68: 9b:b3:68:88:cb:36:5c:2f:56:2c:26:4c:17:e7:a5:eb:17:53: b5:cf:95:f9 -----BEGIN CERTIFICATE----- MIIGPDCCBSSgAwIBAgIUP67+c00u89cWhx1yqeNhy88QBb8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMzE0MjM1NjU4WhcNMjYwMzE0MDAwMTU4 WjAzMTEwLwYDVQQDEyhCOTRDQzgzMDhGNkM0NjE4OUQ1QjE1MzdBNkI3RTVDRkMy NTFGOUU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5h7VpaYLV4HI VSCTXdxj8pfhWQsLLN5o3gRoZOUaRrE1ebQY3TumVfaP2VgcOuHRb0VbDdjm1VOD RETBuG1JmHwcLH8X9Lfd4feEaDHl4L3tpW5ZdwA5JRgB47h+viVSDIvw9r5Vzz+T ooSz2KqDr+iimXxQNe4aQQhRqrW/5IpkKJxeRXrIFZt7fGMMYbzQbzuKcGaXINsz c4dmFMMP1C6JlszL8z77AuRWZMSLv3bInJsqd3pWu9JbB9mizjQgdrTQWcJW8KMz vvzUbvsrLsm9pmU4eabIuoe3dl/7k1PICYBJjm98UYc1/q7CrBiyU6dTk0fh3A0f jWYJpdXM1wIDAQABo4IDPDCCAzgwHQYDVR0OBBYEFLlMyDCPbEYYnVsVN6a35c/C UfnlMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB 2wYIKwYBBQUHAQcBAf8EgcswgcgwgcUEAgABMIG+AwQAjGM+AwQAjGNEAwQAjGNO AwQAjGNQAwQAjGNSMAwDBACMY1kDBACMY1oDBACMY10DBACMY2QwDAMEAIxjaQME BIxjYAMEAIxjcQMEAIxjeQMEAIxjfQMEAIxjggMEAoxjiAMEAIxjljAMAwQDjGOY AwQCjGOgMAwDBACMY6UDBAKMY6gDBAKMY7QDBACMY9UDBAKMY+QwDAMEAYxj7gME AIxj8AMEAIxj8gMEAYxj9gMEAIxj+QMEAIxj+zANBgkqhkiG9w0BAQsFAAOCAQEA ruOsHCzmv9ETh/z5maWjRURodSkRbBCfo9dqopZ1DyVtrD08MCi7jjeERxNibxFr xZG5Zp7r3tM2lv63wC7TrhjfKzCnYCqUdaZThlAqkMH7envhvv+mP7XOh0eFF2j3 Nx0CeI+43+mu7d4ts++XxKIzagjWWBOxvyv8XOGhGvrENZZ9WpIONKCAVj5uQNee lCSvXwZk5/qX0o6OR55/jBLLGOyadnC/fj61zKz3L4tUefETFwWpwqHlYtndijgx OCnAZHb4bTk98YiI32kOOwV8iwSb3sZbel1CuMGAeFvGP9hCntKtSUJom7NoiMs2 XC9WLCZMF+el6xdTtc+V+Q== -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:57 2025 by rpki-client