$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219447.roa File: AS219447.roa (raw, json) Hash identifier: AaX+12IM85mk5L8inXFMEgljhEkKX71hBHotydJuZTE= Subject key identifier: 71:8B:86:EB:E6:5B:74:FF:3E:55:70:06:EE:93:AC:A3:8C:5A:D4:AE Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 0F41155B515400118A961D0A6F6A8171C0730E9D Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219447.roa Signing time: Thu 10 Sep 2026 08:52:53 +0000 ROA not before: Thu 10 Sep 2026 08:47:53 +0000 ROA not after: Thu 09 Sep 2027 08:52:53 +0000 asID: 219447 IP address blocks: 40.223.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 09:57:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:41:15:5b:51:54:00:11:8a:96:1d:0a:6f:6a:81:71:c0:73:0e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Sep 10 08:47:53 2026 GMT Not After : Sep 9 08:52:53 2027 GMT Subject: CN=718B86EBE65B74FF3E557006EE93ACA38C5AD4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:84:3c:4b:19:f3:53:1b:fe:18:39:55:65: 47:e7:1c:b6:3d:ba:f1:89:2f:10:4c:a0:21:fb:64: 10:9a:4b:24:a0:c9:f1:a4:d3:15:c6:e2:e3:09:96: 0a:38:13:1c:8d:78:9d:76:59:54:2b:f1:7c:72:23: 4c:4b:3e:61:f2:18:51:20:b5:23:70:a9:61:6c:20: 22:bf:e0:7f:91:b7:b8:90:17:53:ab:ed:13:89:e7: 5e:69:9f:5b:c9:d3:72:48:73:54:d2:c4:9d:4a:53: b7:f2:3b:c5:03:c5:8d:90:cf:e2:c6:5a:90:d3:97: ac:fc:e7:c4:f9:60:52:82:67:e6:c6:84:ad:ca:54: de:c9:a1:62:5b:4e:cf:ae:f8:98:15:ab:04:5a:87: af:8e:59:aa:3b:8c:d6:58:e1:2d:78:3c:2b:f4:bf: 3a:e9:40:cc:e5:7d:ca:39:de:91:fb:ca:bc:3b:d3: f5:6b:1c:c4:fd:1a:43:80:13:5d:31:ce:27:c3:e4: fe:2e:97:df:9a:50:44:91:6b:40:3a:5a:39:a5:84: 26:83:19:e4:ad:08:74:bb:e3:5b:95:27:c2:37:dd: 50:79:95:d6:47:dd:34:0b:57:62:58:ed:77:fa:69: db:0a:f8:37:c9:04:d6:a1:79:8d:b4:29:57:ad:be: 24:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8B:86:EB:E6:5B:74:FF:3E:55:70:06:EE:93:AC:A3:8C:5A:D4:AE X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS219447.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.223.20.0/24 Signature Algorithm: sha256WithRSAEncryption 40:20:0d:fb:dc:82:a2:ce:ba:54:67:0a:18:e8:29:b8:49:46: 66:7f:3d:5a:cb:28:32:65:45:94:ed:9b:b0:5a:9c:a3:fc:7c: 0e:c2:27:67:3b:84:3e:4e:70:5d:37:ee:8a:35:12:87:19:6f: a1:75:ab:83:86:8a:df:45:c8:1c:e6:c8:98:79:78:56:b9:3c: a2:a7:53:ea:fd:98:8d:d5:6f:6d:a9:54:f5:8c:a2:13:30:3c: d7:ff:54:c3:c1:c9:a3:b3:59:76:b5:2d:ee:60:05:df:ac:56: 9e:b2:a2:85:c1:fc:47:42:08:1f:b9:3b:bb:6c:3c:0c:69:7f: c2:29:41:7d:28:d5:aa:a9:0f:98:de:b8:f5:0d:d4:36:ce:f8: 12:23:64:7f:7a:8c:f4:e1:cb:a6:70:4d:ec:a0:dd:68:f9:28: 18:26:09:05:c4:c7:52:1e:2e:2c:79:49:ca:81:34:1c:fc:52: 32:73:c8:42:cc:04:ca:1d:a5:d2:61:ce:28:b2:d0:50:29:ba: ee:9e:14:c8:c1:fa:a3:21:2b:25:6e:df:bb:86:1f:05:10:4e: e3:10:eb:f5:f0:a3:ae:76:b0:ff:dd:0c:34:a9:7d:43:a5:7a: 9b:29:d8:23:d9:8c:7e:cd:b2:22:bb:90:94:f3:a9:70:85:a6: 53:9a:d7:19 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUD0EVW1FUABGKlh0Kb2qBccBzDp0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjYwOTEwMDg0NzUzWhcNMjcwOTA5MDg1MjUz WjAzMTEwLwYDVQQDEyg3MThCODZFQkU2NUI3NEZGM0U1NTcwMDZFRTkzQUNBMzhD NUFENEFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCeEPEsZ81Mb /hg5VWVH5xy2PbrxiS8QTKAh+2QQmkskoMnxpNMVxuLjCZYKOBMcjXiddllUK/F8 ciNMSz5h8hhRILUjcKlhbCAiv+B/kbe4kBdTq+0TiedeaZ9bydNySHNU0sSdSlO3 8jvFA8WNkM/ixlqQ05es/OfE+WBSgmfmxoStylTeyaFiW07PrviYFasEWoevjlmq O4zWWOEteDwr9L866UDM5X3KOd6R+8q8O9P1axzE/RpDgBNdMc4nw+T+LpffmlBE kWtAOlo5pYQmgxnkrQh0u+NblSfCN91QeZXWR900C1diWO13+mnbCvg3yQTWoXmN tClXrb4kAQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHGLhuvmW3T/PlVwBu6TrKOM WtSuMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxOTQ0Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACjfFDANBgkqhkiG9w0BAQsFAAOC AQEAQCAN+9yCos66VGcKGOgpuElGZn89WssoMmVFlO2bsFqco/x8DsInZzuEPk5w XTfuijUShxlvoXWrg4aK30XIHObImHl4Vrk8oqdT6v2YjdVvbalU9YyiEzA81/9U w8HJo7NZdrUt7mAF36xWnrKihcH8R0IIH7k7u2w8DGl/wilBfSjVqqkPmN649Q3U Ns74EiNkf3qM9OHLpnBN7KDdaPkoGCYJBcTHUh4uLHlJyoE0HPxSMnPIQswEyh2l 0mHOKLLQUCm67p4UyMH6oyErJW7fu4YfBRBO4xDr9fCjrnaw/90MNKl9Q6V6mynY I9mMfs2yIruQlPOpcIWmU5rXGQ== -----END CERTIFICATE-----Generated at Mon Sep 21 01:01:05 2026 by rpki-client