$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135391.roa File: AS135391.roa (raw, json) Hash identifier: SeGwdIYxnvYvDuFu/JR+zR8kxSCndR4GJRY8x3w3rtw= Subject key identifier: 52:E3:41:EB:23:16:B0:ED:8D:D1:E4:82:3C:F7:8D:F3:AA:71:C1:19 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 12C0433C1646C06BE1E6389D987D390C8B154DF8 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135391.roa Signing time: Wed 18 Jun 2025 00:00:04 +0000 ROA not before: Tue 17 Jun 2025 23:55:04 +0000 ROA not after: Wed 17 Jun 2026 00:00:04 +0000 asID: 135391 IP address blocks: 23.95.98.0/24 maxlen: 24 107.172.36.0/24 maxlen: 24 198.23.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 05:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:c0:43:3c:16:46:c0:6b:e1:e6:38:9d:98:7d:39:0c:8b:15:4d:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 17 23:55:04 2025 GMT Not After : Jun 17 00:00:04 2026 GMT Subject: CN=52E341EB2316B0ED8DD1E4823CF78DF3AA71C119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:85:ba:b7:47:83:39:3c:47:dd:b6:a3:d7: f2:97:aa:50:d6:59:65:62:6b:1b:ea:66:73:0a:48: 76:a1:10:f4:83:12:50:b8:d0:4b:de:4d:2f:54:c3: f5:54:39:e0:23:74:3a:76:4a:be:b3:59:21:14:56: eb:ae:8e:96:74:b1:71:78:cb:45:29:67:12:72:c9: 65:68:d8:fc:25:b7:5b:bd:3c:14:5e:3b:c9:7f:d2: 2c:ea:36:b6:85:63:6c:39:d6:29:15:cb:50:50:3a: 20:4d:36:29:4d:f6:05:61:c6:4f:ed:1f:f7:62:95: fa:84:ed:48:a7:25:26:74:84:0d:79:10:ad:e1:fc: 2c:5a:d5:32:62:a7:e8:88:a9:f1:bd:22:47:36:23: f1:d3:03:f3:36:7c:a7:5e:e1:ce:cb:60:3d:01:08: bb:4b:fb:92:15:8e:9a:e8:16:4e:98:38:42:24:cf: 63:03:f7:5b:e7:17:a0:50:a8:8a:81:43:e3:ad:80: da:bc:00:4a:5c:1a:94:ba:f2:2d:d9:c8:9e:90:ec: 23:e8:77:a3:43:15:c5:0b:c1:4e:df:da:3b:ce:59: 0f:e0:17:c0:7d:57:20:f3:05:39:5d:ae:26:79:14: 21:35:e6:90:93:2b:69:da:0e:26:87:e1:61:15:d8: 70:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:E3:41:EB:23:16:B0:ED:8D:D1:E4:82:3C:F7:8D:F3:AA:71:C1:19 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS135391.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.98.0/24 107.172.36.0/24 198.23.218.0/24 Signature Algorithm: sha256WithRSAEncryption c9:45:66:e5:a1:7e:2a:0b:f1:6c:e3:8b:85:4f:2b:72:55:8d: d2:da:04:37:c9:83:06:90:7b:13:1c:e5:51:26:0c:cc:d5:a8: aa:a1:bd:71:26:22:8f:a9:ea:f1:ad:22:fd:4b:eb:13:89:ff: a1:c9:0d:06:e3:8c:55:f2:49:39:fe:0d:35:d0:e5:1f:33:87: 6a:bb:94:4f:89:20:95:f4:89:34:96:25:be:d7:4d:40:fa:9f: 9c:d3:b5:6d:82:e8:15:ed:48:88:8c:07:a5:0a:e8:ea:59:00: 03:ae:93:5a:76:17:13:ec:52:e4:0f:81:30:37:08:0c:ed:25: 3c:e7:6c:9b:7a:0d:e0:74:5d:12:dd:bb:72:ef:7c:af:da:89: 77:17:56:00:24:96:40:85:12:10:bf:c8:6b:7e:46:49:fb:2a: 41:aa:54:04:7b:3a:2f:d6:3c:3e:dc:54:8d:00:a7:da:d9:09: ee:0d:14:a7:bc:22:66:ee:81:62:cd:8c:fd:5c:f0:d3:87:22: 5f:34:f7:f4:5e:dc:85:48:e1:5c:a5:5c:46:b3:6f:1f:6c:c6: e3:ae:2f:7d:c5:c6:bd:00:1b:6a:00:78:26:f7:84:e7:78:f6: c5:a8:fc:88:eb:6b:77:e4:a3:f1:2a:23:7c:cf:10:88:9a:79: 75:df:1e:41 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUEsBDPBZGwGvh5jidmH05DIsVTfgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjE3MjM1NTA0WhcNMjYwNjE3MDAwMDA0 WjAzMTEwLwYDVQQDEyg1MkUzNDFFQjIzMTZCMEVEOEREMUU0ODIzQ0Y3OERGM0FB NzFDMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMGFurdHgzk8 R922o9fyl6pQ1lllYmsb6mZzCkh2oRD0gxJQuNBL3k0vVMP1VDngI3Q6dkq+s1kh FFbrro6WdLFxeMtFKWcScsllaNj8JbdbvTwUXjvJf9Is6ja2hWNsOdYpFctQUDog TTYpTfYFYcZP7R/3YpX6hO1IpyUmdIQNeRCt4fwsWtUyYqfoiKnxvSJHNiPx0wPz NnynXuHOy2A9AQi7S/uSFY6a6BZOmDhCJM9jA/db5xegUKiKgUPjrYDavABKXBqU uvIt2ciekOwj6HejQxXFC8FO39o7zlkP4BfAfVcg8wU5Xa4meRQhNeaQkytp2g4m h+FhFdhw2QIDAQABo4ICizCCAocwHQYDVR0OBBYEFFLjQesjFrDtjdHkgjz3jfOq ccEZMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzEzNTM5MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEABdfYgMEAGusJAMEAMYX2jANBgkq hkiG9w0BAQsFAAOCAQEAyUVm5aF+KgvxbOOLhU8rclWN0toEN8mDBpB7ExzlUSYM zNWoqqG9cSYij6nq8a0i/UvrE4n/ockNBuOMVfJJOf4NNdDlHzOHaruUT4kglfSJ NJYlvtdNQPqfnNO1bYLoFe1IiIwHpQro6lkAA66TWnYXE+xS5A+BMDcIDO0lPOds m3oN4HRdEt27cu98r9qJdxdWACSWQIUSEL/Ia35GSfsqQapUBHs6L9Y8PtxUjQCn 2tkJ7g0Up7wiZu6BYs2M/Vzw04ciXzT39F7chUjhXKVcRrNvH2zG464vfcXGvQAb agB4JveE53j2xaj8iOtrd+Sj8SojfM8QiJp5dd8eQQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:13 2025 by rpki-client