$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219075.roa File: AS219075.roa (raw, json) Hash identifier: wM9xxgrAQVO2MZ7aG111eFWGPZjjNCo2Lu16GN3uMbo= Subject key identifier: 74:A9:22:3C:3B:4D:13:AC:DD:04:68:C9:FE:12:C6:B0:D6:D6:C6:34 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 7C7D4BC944B9454E804C7E7C90EBA96EA0E45599 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219075.roa Signing time: Sun 06 Sep 2026 17:21:28 +0000 ROA not before: Sun 06 Sep 2026 17:16:28 +0000 ROA not after: Sun 05 Sep 2027 17:21:28 +0000 asID: 219075 IP address blocks: 40.223.17.0/24 maxlen: 24 40.223.80.0/24 maxlen: 24 40.223.183.0/24 maxlen: 24 40.223.188.0/24 maxlen: 24 40.223.189.0/24 maxlen: 24 40.223.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:7d:4b:c9:44:b9:45:4e:80:4c:7e:7c:90:eb:a9:6e:a0:e4:55:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 6 17:16:28 2026 GMT Not After : Sep 5 17:21:28 2027 GMT Subject: CN=74A9223C3B4D13ACDD0468C9FE12C6B0D6D6C634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:62:8d:fd:e0:24:45:cd:4d:46:a9:25:a1:47: 17:19:ad:39:b5:ad:d5:50:bc:7a:8a:d5:fc:ba:2b: 0f:10:bc:53:2c:6c:fc:7f:3d:7c:68:0e:38:61:e0: b0:11:da:bb:d0:70:64:c0:33:4b:0e:5d:f6:36:02: 65:13:c1:b2:e0:a9:4d:8a:e4:8b:b9:a3:3f:a9:11: a3:52:2f:b2:ad:b4:0f:05:d3:f5:48:8c:db:71:f7: 6c:36:cc:53:a3:1c:42:34:b7:bd:0c:11:27:20:26: 93:f1:ee:d1:d9:c8:7a:62:44:99:4c:99:91:ce:97: 24:af:8b:c8:1f:9c:b1:68:10:6b:b1:ea:10:49:b1: 13:21:11:c1:08:94:4a:8f:6c:3c:62:e0:d5:30:bf: 6f:c5:96:3a:41:72:9e:6d:69:23:27:c0:72:c5:43: 9d:96:67:09:d0:c8:c8:26:a4:1b:ea:17:a5:e4:11: 57:77:c7:eb:0a:82:75:a8:73:b3:dd:4f:8b:cb:20: 18:a5:77:c3:28:a7:ee:33:48:d5:36:8a:39:12:bc: 34:c4:6b:88:3b:9f:1a:80:f0:f2:18:36:b5:69:d8: 72:04:fb:d7:c7:0e:a4:30:22:54:95:bc:17:69:52: 5c:52:24:f8:24:0c:80:a5:52:bf:ab:35:bf:c2:66: 8f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A9:22:3C:3B:4D:13:AC:DD:04:68:C9:FE:12:C6:B0:D6:D6:C6:34 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219075.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.17.0/24 40.223.80.0/24 40.223.183.0/24 40.223.188.0/23 40.223.191.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:0f:0c:8e:f4:00:87:b4:24:90:6b:b9:fb:31:23:63:38:c2: 2c:7f:a7:86:25:e8:dc:af:61:e9:99:6a:0f:6b:fb:e5:51:47: 3d:e8:a1:6f:98:b0:ca:44:29:e0:9c:2a:43:2c:ae:b4:24:f6: 30:8b:05:7c:d4:0f:ad:ef:31:0b:7f:8f:08:4a:25:0a:83:52: 8b:75:33:ab:0e:16:63:20:d6:63:c5:94:55:71:a0:2c:74:4d: 77:50:0a:18:a0:72:d2:36:47:48:3a:fd:8d:2b:37:81:d0:ee: d4:6c:41:b8:a1:7d:4d:ad:58:b5:77:d5:61:8f:51:6f:26:d1: e5:31:95:5e:61:33:2b:09:60:59:4b:1b:61:45:70:21:e9:74: 7f:b6:b9:bf:18:26:c1:10:e7:66:2a:02:23:42:9d:c4:3a:e0: 7f:6d:51:cf:69:5b:a5:64:8f:a6:4b:d9:25:29:0a:de:51:30: 9e:5c:56:ae:aa:d4:b3:e9:0d:ba:43:4c:20:7c:6f:f2:75:3f: ec:0e:5e:0c:41:5c:e6:1b:4a:aa:4b:00:60:db:1e:ea:c4:e3: ff:7e:af:23:5a:64:c7:06:75:83:ba:39:42:42:7d:ee:48:68: 22:a1:90:ec:02:4e:ca:41:cf:81:40:9a:44:1f:24:7c:83:17: 41:4d:05:ab -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUfH1LyUS5RU6ATH58kOupbqDkVZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTA2MTcxNjI4WhcNMjcwOTA1MTcyMTI4 WjAzMTEwLwYDVQQDEyg3NEE5MjIzQzNCNEQxM0FDREQwNDY4QzlGRTEyQzZCMEQ2 RDZDNjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWKN/eAkRc1N RqkloUcXGa05ta3VULx6itX8uisPELxTLGz8fz18aA44YeCwEdq70HBkwDNLDl32 NgJlE8Gy4KlNiuSLuaM/qRGjUi+yrbQPBdP1SIzbcfdsNsxToxxCNLe9DBEnICaT 8e7R2ch6YkSZTJmRzpckr4vIH5yxaBBrseoQSbETIRHBCJRKj2w8YuDVML9vxZY6 QXKebWkjJ8ByxUOdlmcJ0MjIJqQb6hel5BFXd8frCoJ1qHOz3U+LyyAYpXfDKKfu M0jVNoo5Erw0xGuIO58agPDyGDa1adhyBPvXxw6kMCJUlbwXaVJcUiT4JAyApVK/ qzW/wmaPCwIDAQABo4IClzCCApMwHQYDVR0OBBYEFHSpIjw7TROs3QRoyf4SxrDW 1sY0MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxOTA3NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEACjfEQMEACjfUAMEACjftwMEASjf vAMEACjfvzANBgkqhkiG9w0BAQsFAAOCAQEAfA8MjvQAh7QkkGu5+zEjYzjCLH+n hiXo3K9h6ZlqD2v75VFHPeihb5iwykQp4JwqQyyutCT2MIsFfNQPre8xC3+PCEol CoNSi3Uzqw4WYyDWY8WUVXGgLHRNd1AKGKBy0jZHSDr9jSs3gdDu1GxBuKF9Ta1Y tXfVYY9RbybR5TGVXmEzKwlgWUsbYUVwIel0f7a5vxgmwRDnZioCI0KdxDrgf21R z2lbpWSPpkvZJSkK3lEwnlxWrqrUs+kNukNMIHxv8nU/7A5eDEFc5htKqksAYNse 6sTj/36vI1pkxwZ1g7o5QkJ97khoIqGQ7AJOykHPgUCaRB8kfIMXQU0Fqw== -----END CERTIFICATE-----Generated at Mon Sep 21 01:00:42 2026 by rpki-client