$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa File: AS218955.roa (raw, json) Hash identifier: aJj0U1PFpcJq/8TdGUFeu7PqxPsc8iO/G2YjAW0m1E8= Subject key identifier: CD:28:5B:3C:95:DC:08:F8:0A:33:E8:A5:55:43:EE:80:A1:85:24:E0 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 4D41190C5EE8899C3537997187613A3E190085D7 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa Signing time: Thu 03 Sep 2026 13:08:46 +0000 ROA not before: Thu 03 Sep 2026 13:03:46 +0000 ROA not after: Thu 02 Sep 2027 13:08:46 +0000 asID: 218955 IP address blocks: 40.223.80.0/24 maxlen: 24 40.223.81.0/24 maxlen: 24 40.223.83.0/24 maxlen: 24 40.223.86.0/24 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:41:19:0c:5e:e8:89:9c:35:37:99:71:87:61:3a:3e:19:00:85:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 3 13:03:46 2026 GMT Not After : Sep 2 13:08:46 2027 GMT Subject: CN=CD285B3C95DC08F80A33E8A55543EE80A18524E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:92:e3:19:84:47:9a:98:98:21:2b:e3:c6:de: 80:63:49:57:67:ba:47:5a:0b:8e:a4:ce:e2:f4:3e: 3c:c8:91:fd:38:cf:7e:92:5b:d3:ed:40:ac:1e:e3: 04:f1:50:e4:11:e0:06:80:57:9b:f4:9f:29:3b:96: 71:85:63:79:f3:72:a3:0a:97:e1:51:77:c3:76:ef: c1:d5:e5:a5:f2:e4:ca:80:96:4e:87:ac:d1:0e:ba: ec:2f:f1:9f:be:68:ee:8e:8c:bd:b7:1d:c2:e7:b0: a6:c3:30:d2:89:bb:e7:b8:6c:8d:c3:4f:b9:17:4f: 7b:d9:fd:2d:a3:f2:4c:0c:00:c7:48:a3:0e:16:35: 69:a7:61:67:69:a9:15:24:f8:fe:3b:c7:98:cc:48: 29:89:24:f3:4d:d2:6f:5a:97:19:58:2f:9d:d2:61: e1:6c:36:9b:7b:70:dd:a2:9f:36:3c:40:14:4d:42: 3a:d4:55:23:82:cf:40:94:9e:24:c2:ed:cf:d3:46: e8:92:96:4e:4c:7b:ad:ae:0d:08:a8:08:b3:c2:49: e5:5b:fb:90:db:04:f9:94:a8:1d:94:dc:23:93:2f: 03:69:af:65:36:ab:b7:61:d4:fe:60:54:c8:e8:97: 30:8e:50:50:ef:e0:41:91:2b:c1:44:87:a1:85:8f: d4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:28:5B:3C:95:DC:08:F8:0A:33:E8:A5:55:43:EE:80:A1:85:24:E0 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS218955.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.80.0/23 40.223.83.0/24 40.223.86.0/24 40.223.122.0/24 40.223.188.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f8:bb:25:0d:6b:ee:34:46:3e:21:f6:23:57:b9:c3:c5:2c: 2c:ab:d5:8a:48:b9:44:5f:ed:d1:cc:41:e6:4d:a2:54:6f:0a: ec:ed:0e:7d:66:5d:a0:e7:b8:49:08:01:fa:47:67:71:ca:70: e3:42:5d:41:98:73:d1:e6:e6:ec:7f:ba:26:e8:1d:b0:c9:95: 56:25:24:97:4d:3a:1a:ea:69:54:28:f0:6e:62:66:5a:26:b9: 20:99:a2:80:9a:ae:da:f7:62:fd:c6:f7:be:9b:db:63:f3:b0: 17:d2:04:99:6a:5f:8b:4e:ad:b7:34:31:cc:aa:e7:82:13:18: b3:5c:7b:13:e7:73:8a:d7:d2:1f:b9:2e:a2:2b:5e:7f:55:6d: a4:cf:f7:66:fc:5a:1f:43:c1:1a:28:fd:19:95:0f:53:41:45: 73:2f:75:be:ba:f8:bf:65:3b:64:b7:d9:8e:40:34:69:98:1d: e0:c8:7f:46:2f:3a:ce:bb:36:04:43:ff:f3:8d:57:f7:90:0c: c2:bf:4e:97:29:50:1b:21:90:d8:2b:93:bd:2d:bf:be:ff:9c: 38:67:a1:1d:a0:83:fd:af:47:a1:a8:ff:dc:34:03:65:33:71: 9a:32:95:cd:ac:8b:b5:22:70:5e:17:3a:f6:95:34:a6:72:0f: 80:81:9f:67 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUTUEZDF7oiZw1N5lxh2E6PhkAhdcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTAzMTMwMzQ2WhcNMjcwOTAyMTMwODQ2 WjAzMTEwLwYDVQQDEyhDRDI4NUIzQzk1REMwOEY4MEEzM0U4QTU1NTQzRUU4MEEx ODUyNEUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopLjGYRHmpiY ISvjxt6AY0lXZ7pHWguOpM7i9D48yJH9OM9+klvT7UCsHuME8VDkEeAGgFeb9J8p O5ZxhWN583KjCpfhUXfDdu/B1eWl8uTKgJZOh6zRDrrsL/Gfvmjujoy9tx3C57Cm wzDSibvnuGyNw0+5F0972f0to/JMDADHSKMOFjVpp2FnaakVJPj+O8eYzEgpiSTz TdJvWpcZWC+d0mHhbDabe3Ddop82PEAUTUI61FUjgs9AlJ4kwu3P00bokpZOTHut rg0IqAizwknlW/uQ2wT5lKgdlNwjky8Daa9lNqu3YdT+YFTI6JcwjlBQ7+BBkSvB RIehhY/UBwIDAQABo4IClzCCApMwHQYDVR0OBBYEFM0oWzyV3Aj4CjPopVVD7oCh hSTgMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxODk1NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEASjfUAMEACjfUwMEACjfVgMEACjf egMEACjfvDANBgkqhkiG9w0BAQsFAAOCAQEAZfi7JQ1r7jRGPiH2I1e5w8UsLKvV iki5RF/t0cxB5k2iVG8K7O0OfWZdoOe4SQgB+kdnccpw40JdQZhz0ebm7H+6Jugd sMmVViUkl006GuppVCjwbmJmWia5IJmigJqu2vdi/cb3vpvbY/OwF9IEmWpfi06t tzQxzKrnghMYs1x7E+dzitfSH7kuoitef1VtpM/3ZvxaH0PBGij9GZUPU0FFcy91 vrr4v2U7ZLfZjkA0aZgd4Mh/Ri86zrs2BEP/841X95AMwr9OlylQGyGQ2CuTvS2/ vv+cOGehHaCD/a9Hoaj/3DQDZTNxmjKVzayLtSJwXhc69pU0pnIPgIGfZw== -----END CERTIFICATE-----Generated at Mon Sep 21 01:00:45 2026 by rpki-client