$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219047.roa File: AS219047.roa (raw, json) Hash identifier: OTwQqVnkQAD1woIYG/mZTbt1UfSoX/9tpF1BQUOiaCw= Subject key identifier: 5C:BB:17:13:0D:2E:86:BE:9E:27:9A:C2:56:EB:51:F0:D2:F4:7E:68 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 62B420838EEB2F8684DB02329AA9944F9B907684 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219047.roa Signing time: Thu 10 Sep 2026 08:52:53 +0000 ROA not before: Thu 10 Sep 2026 08:47:53 +0000 ROA not after: Thu 09 Sep 2027 08:52:53 +0000 asID: 219047 IP address blocks: 40.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b4:20:83:8e:eb:2f:86:84:db:02:32:9a:a9:94:4f:9b:90:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 10 08:47:53 2026 GMT Not After : Sep 9 08:52:53 2027 GMT Subject: CN=5CBB17130D2E86BE9E279AC256EB51F0D2F47E68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:63:66:b8:71:b6:26:13:50:45:03:75:f5: eb:5e:fa:94:2e:51:c7:1b:e3:cf:be:19:75:26:c2: 85:0e:42:35:8c:98:e3:45:94:14:6b:6b:d9:1d:89: dc:ca:67:dd:28:67:54:a4:96:0e:31:86:5d:99:e8: 3f:e8:e5:f7:b3:c4:b7:42:f3:7d:c4:fa:a7:2f:82: e4:eb:af:6f:4a:ab:de:ab:0c:76:2f:62:03:bc:1b: 4d:b0:bd:c1:7e:e7:b5:25:4c:38:e5:1c:01:7b:90: 94:a6:e5:69:a4:a0:2f:49:64:b4:35:ca:96:0d:c7: aa:3d:72:9c:1e:ab:34:eb:04:99:69:10:b3:48:c0: 18:dc:69:17:ba:95:f8:a6:02:be:0d:e6:8c:53:3b: cd:23:d7:0f:75:22:d4:39:af:13:f9:fc:18:8e:af: b9:84:a8:ea:df:be:2c:7b:3b:82:ac:f1:2a:ec:0e: d9:25:a1:82:3a:9a:bb:0b:00:97:0f:a2:12:ee:2d: 93:2c:d2:e9:54:f8:6a:91:3c:e7:81:d5:f0:c6:dd: 19:93:b1:2d:a1:e3:f1:95:bc:f8:b4:9a:91:96:67: f5:0c:31:cd:53:be:67:bd:67:f0:2d:25:09:00:b5: d1:f0:04:3e:18:6d:16:96:48:ab:ab:11:2a:8f:40: 43:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BB:17:13:0D:2E:86:BE:9E:27:9A:C2:56:EB:51:F0:D2:F4:7E:68 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219047.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.20.0/24 Signature Algorithm: sha256WithRSAEncryption b5:3c:f8:ac:4a:a3:74:a0:ff:25:4a:83:6f:60:a0:42:d4:a5: 0e:51:65:a7:0c:17:4e:78:b9:82:b6:cf:55:dc:45:6e:16:9b: a8:36:53:1a:d3:78:aa:22:62:b8:5c:2c:29:92:a0:5f:78:f4: 81:27:d8:8c:ff:ef:0c:31:1e:6c:8e:90:4e:37:07:c2:e0:87: 51:23:b6:95:74:a9:01:0a:5c:ff:c7:05:e6:df:c7:43:1f:10: d0:73:2d:d5:7d:63:4d:a1:a6:24:33:c2:56:a8:8a:2c:5c:01: 23:17:0a:c7:60:02:bc:f4:c6:85:45:e6:85:10:66:52:0b:b3: 6b:9c:42:49:cf:64:29:67:77:38:3f:01:9c:8e:ec:8e:f4:a5: 16:03:80:33:45:59:6f:aa:c6:9c:09:36:5a:59:b7:79:dc:9b: 31:3e:69:2f:22:7a:da:77:7c:b4:f9:23:ec:c8:eb:45:c1:2b: bd:26:70:9c:9a:b3:c2:3c:78:43:d8:4a:ad:f3:66:3c:dd:f5: 36:d9:7d:49:61:9f:79:39:f6:4f:50:1f:b9:7f:45:99:53:62: 24:08:e7:13:71:86:71:18:cd:f9:1a:cf:bd:ba:07:c6:a6:54: 23:58:43:f7:0b:bd:42:c5:d4:6a:7b:eb:ae:e8:fa:97:2e:96: 2e:2e:16:b5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUYrQgg47rL4aE2wIymqmUT5uQdoQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTEwMDg0NzUzWhcNMjcwOTA5MDg1MjUz WjAzMTEwLwYDVQQDEyg1Q0JCMTcxMzBEMkU4NkJFOUUyNzlBQzI1NkVCNTFGMEQy RjQ3RTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBpjZrhxtiYT UEUDdfXrXvqULlHHG+PPvhl1JsKFDkI1jJjjRZQUa2vZHYncymfdKGdUpJYOMYZd meg/6OX3s8S3QvN9xPqnL4Lk669vSqveqwx2L2IDvBtNsL3Bfue1JUw45RwBe5CU puVppKAvSWS0NcqWDceqPXKcHqs06wSZaRCzSMAY3GkXupX4pgK+DeaMUzvNI9cP dSLUOa8T+fwYjq+5hKjq374sezuCrPEq7A7ZJaGCOpq7CwCXD6IS7i2TLNLpVPhq kTzngdXwxt0Zk7EtoePxlbz4tJqRlmf1DDHNU75nvWfwLSUJALXR8AQ+GG0Wlkir qxEqj0BDGQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFy7FxMNLoa+nieawlbrUfDS 9H5oMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxOTA0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACjfFDANBgkqhkiG9w0BAQsFAAOC AQEAtTz4rEqjdKD/JUqDb2CgQtSlDlFlpwwXTni5grbPVdxFbhabqDZTGtN4qiJi uFwsKZKgX3j0gSfYjP/vDDEebI6QTjcHwuCHUSO2lXSpAQpc/8cF5t/HQx8Q0HMt 1X1jTaGmJDPCVqiKLFwBIxcKx2ACvPTGhUXmhRBmUguza5xCSc9kKWd3OD8BnI7s jvSlFgOAM0VZb6rGnAk2Wlm3edybMT5pLyJ62nd8tPkj7MjrRcErvSZwnJqzwjx4 Q9hKrfNmPN31Ntl9SWGfeTn2T1AfuX9FmVNiJAjnE3GGcRjN+RrPvboHxqZUI1hD 9wu9QsXUanvrruj6ly6WLi4WtQ== -----END CERTIFICATE-----Generated at Mon Sep 21 01:00:51 2026 by rpki-client