$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: pjF6C9gcvr3nY98NVj042deaHHJ/TuR431L0etmE7is= Subject key identifier: D8:02:62:B4:C2:1C:D0:FE:3A:6C:4C:7B:EC:F9:82:E0:B9:6C:A8:EA Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 67862A2562A1BB3C67534FC282ECB5D091E0505C Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa Signing time: Thu 12 Jun 2025 14:29:28 +0000 ROA not before: Thu 12 Jun 2025 14:24:28 +0000 ROA not after: Thu 11 Jun 2026 14:29:28 +0000 asID: 396356 IP address blocks: 140.99.164.0/24 maxlen: 24 140.99.216.0/24 maxlen: 24 140.99.217.0/24 maxlen: 24 140.99.218.0/24 maxlen: 24 140.99.219.0/24 maxlen: 24 140.99.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 18:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:86:2a:25:62:a1:bb:3c:67:53:4f:c2:82:ec:b5:d0:91:e0:50:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Jun 12 14:24:28 2025 GMT Not After : Jun 11 14:29:28 2026 GMT Subject: CN=D80262B4C21CD0FE3A6C4C7BECF982E0B96CA8EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:35:5a:e3:95:37:bb:96:9d:92:36:3e:da: 0b:78:91:23:cf:07:e6:50:ff:05:24:3c:1b:4e:8f: 2e:c0:d0:67:40:d5:1c:7b:71:c7:84:61:23:cb:94: ba:64:a0:7a:0b:c4:a0:39:9e:b1:c1:af:18:fe:96: 9c:ac:cb:03:ca:12:1d:bd:fc:06:e8:2c:3b:73:e2: e4:bc:0e:2e:1d:ed:89:ad:fe:53:13:b4:ff:ca:05: 78:20:3f:00:89:d7:de:64:2f:db:e9:95:d9:cd:eb: 27:63:72:05:b0:14:55:e0:a9:78:14:d9:7a:fa:ba: 85:65:58:bd:bd:a8:5d:43:9b:c6:e4:b5:32:9b:d1: 6a:32:a4:b8:6d:f1:ce:8e:12:60:83:68:6a:ed:93: 0f:a5:95:a7:62:01:d9:51:08:d8:8b:64:1d:a0:37: 51:ff:74:d4:93:01:75:61:74:db:64:86:c6:47:be: 77:44:ac:ed:8c:7b:54:75:6f:35:d3:98:15:83:3e: 22:07:8d:9c:f4:72:19:b2:7b:7b:b4:84:73:be:df: b8:7b:32:4b:46:67:7f:c7:08:65:10:0a:06:d0:fc: 54:fa:64:a6:dc:e3:69:54:51:2c:1a:89:de:e5:be: de:eb:bb:5e:93:97:32:0b:4a:f3:50:13:16:db:24: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:02:62:B4:C2:1C:D0:FE:3A:6C:4C:7B:EC:F9:82:E0:B9:6C:A8:EA X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.164.0/24 140.99.216.0/22 140.99.222.0/24 Signature Algorithm: sha256WithRSAEncryption af:e3:b2:60:10:57:94:46:a8:30:97:d9:64:6b:95:61:cb:57: 69:26:51:d0:fa:b8:2e:71:6e:0b:ff:dc:c9:9c:24:13:9f:71: 63:76:20:78:b8:56:10:29:ad:a3:12:88:aa:17:f3:11:98:be: 9d:d6:a8:20:3b:61:7b:5d:57:d2:a0:65:ee:7c:43:e2:f8:29: 58:94:10:1c:35:e4:fe:8d:50:4c:0c:7a:bd:7b:bf:76:4f:35: 9c:a6:63:df:46:2f:37:11:22:06:1a:ff:9e:f8:2a:72:d6:29: 40:36:33:06:a6:07:4a:39:91:ba:62:75:dc:10:ad:eb:02:d0: 18:42:91:8d:c7:e2:d1:e6:48:9a:1d:9a:e9:56:b5:77:25:ab: e8:57:15:d8:1e:8a:2f:12:28:de:1a:97:de:28:a3:1d:d5:f8: a5:c4:f3:6c:10:1f:cf:43:c2:43:3c:1e:86:d9:d3:b1:ac:98: cb:c5:dd:f5:73:d1:91:c8:f8:c9:ee:df:93:eb:a8:30:bf:28: 5f:81:8f:8e:1d:1d:e0:6a:30:5c:75:77:b7:32:81:4b:2f:5d: cf:80:9c:a6:59:13:e0:5b:56:5e:36:86:bb:ae:05:1e:f5:8c: eb:04:f5:de:e3:53:38:5f:72:5c:88:d1:e7:62:12:48:d3:9a: 3a:f5:38:a2 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUZ4YqJWKhuzxnU0/Cguy10JHgUFwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwNjEyMTQyNDI4WhcNMjYwNjExMTQyOTI4 WjAzMTEwLwYDVQQDEyhEODAyNjJCNEMyMUNEMEZFM0E2QzRDN0JFQ0Y5ODJFMEI5 NkNBOEVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksk1WuOVN7uW nZI2PtoLeJEjzwfmUP8FJDwbTo8uwNBnQNUce3HHhGEjy5S6ZKB6C8SgOZ6xwa8Y /pacrMsDyhIdvfwG6Cw7c+LkvA4uHe2Jrf5TE7T/ygV4ID8AidfeZC/b6ZXZzesn Y3IFsBRV4Kl4FNl6+rqFZVi9vahdQ5vG5LUym9FqMqS4bfHOjhJgg2hq7ZMPpZWn YgHZUQjYi2QdoDdR/3TUkwF1YXTbZIbGR753RKztjHtUdW8105gVgz4iB42c9HIZ snt7tIRzvt+4ezJLRmd/xwhlEAoG0PxU+mSm3ONpVFEsGone5b7e67tek5cyC0rz UBMW2ySg2wIDAQABo4ICizCCAocwHQYDVR0OBBYEFNgCYrTCHND+OmxMe+z5guC5 bKjqMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAIxjpAMEAoxj2AMEAIxj3jANBgkq hkiG9w0BAQsFAAOCAQEAr+OyYBBXlEaoMJfZZGuVYctXaSZR0Pq4LnFuC//cyZwk E59xY3YgeLhWECmtoxKIqhfzEZi+ndaoIDthe11X0qBl7nxD4vgpWJQQHDXk/o1Q TAx6vXu/dk81nKZj30YvNxEiBhr/nvgqctYpQDYzBqYHSjmRumJ13BCt6wLQGEKR jcfi0eZImh2a6Va1dyWr6FcV2B6KLxIo3hqX3iijHdX4pcTzbBAfz0PCQzwehtnT sayYy8Xd9XPRkcj4ye7fk+uoML8oX4GPjh0d4GowXHV3tzKBSy9dz4CcplkT4FtW XjaGu64FHvWM6wT13uNTOF9yXIjR52ISSNOaOvU4og== -----END CERTIFICATE-----Generated at Mon Jun 16 06:16:03 2025 by rpki-client