$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198949.roa File: AS198949.roa (raw, json) Hash identifier: K7krAl5qG5ZWz8Ng5AA/2CHX7PZ+xGNwKG6/x+/155Y= Subject key identifier: 6D:2E:54:D9:AC:56:55:64:B3:62:DD:A5:35:57:E0:C5:7B:A6:A5:96 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 395F2A2EABFC49C639C0A294DFF57F4F8E8F5E85 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198949.roa Signing time: Wed 23 Apr 2025 03:25:44 +0000 ROA not before: Wed 23 Apr 2025 03:20:44 +0000 ROA not after: Wed 22 Apr 2026 03:25:44 +0000 asID: 198949 IP address blocks: 209.200.244.0/23 maxlen: 23 209.200.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 16:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5f:2a:2e:ab:fc:49:c6:39:c0:a2:94:df:f5:7f:4f:8e:8f:5e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 23 03:20:44 2025 GMT Not After : Apr 22 03:25:44 2026 GMT Subject: CN=6D2E54D9AC565564B362DDA53557E0C57BA6A596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:3f:bd:5a:38:3f:80:aa:49:68:de:a9:55: bc:18:c9:c5:92:f7:bd:8c:40:f2:53:5e:ae:28:39: 1b:85:90:3a:86:1e:1f:9d:54:2a:20:85:c0:ac:0e: 82:91:06:a7:0b:db:c4:cb:97:ef:a3:2c:b8:85:7b: 1d:ce:da:67:c3:31:0b:d9:a3:34:73:92:9e:ff:48: b2:65:33:f9:29:e5:e7:e6:97:22:de:a9:d3:8f:67: d7:75:e5:b7:af:83:ac:10:60:7f:4d:58:90:6b:b1: de:fe:21:33:62:18:f7:d0:1c:e3:8d:0a:9b:11:6f: 0c:84:5f:4b:26:5b:73:2e:57:ff:cb:03:41:fd:37: 58:a7:6b:1d:b8:8c:f2:bb:a1:f1:43:7c:28:fa:a1: ac:29:9a:ec:24:5f:fa:f5:c8:f3:65:43:ea:ca:cd: 5d:07:48:a5:36:0a:44:b8:ca:d7:19:07:7a:cf:f2: ec:3b:4b:8d:69:ee:f2:2d:bd:a2:15:36:76:9a:60: ff:ab:15:5c:71:4d:b2:6e:f2:f2:3e:2f:0a:41:73: 45:1e:c3:64:c7:9c:6c:06:df:b2:f3:f1:f5:26:f2: 4a:9a:84:cd:2a:39:62:4c:16:07:96:2d:68:10:91: e4:b0:fe:89:c5:a4:3a:40:4d:52:9d:cd:a9:d4:02: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:2E:54:D9:AC:56:55:64:B3:62:DD:A5:35:57:E0:C5:7B:A6:A5:96 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS198949.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.244.0/23 209.200.255.0/24 Signature Algorithm: sha256WithRSAEncryption 54:58:cd:25:35:f2:95:00:de:67:39:f3:9e:00:f7:d8:ee:66: f5:3f:78:65:1e:d6:68:55:4f:d8:e4:de:f6:49:88:aa:75:45: 3f:a9:8a:2c:3d:ff:1b:1f:b1:a0:c6:d5:99:70:e9:ee:14:2a: a2:89:8c:d0:b8:11:26:32:f3:3a:57:9d:f5:69:fd:c7:78:ed: 59:66:21:71:78:c0:13:60:a0:cd:02:47:cb:81:d3:6e:4c:4e: 9d:a8:31:50:e3:c9:36:d9:9c:8a:bc:c2:ad:e4:bc:87:8f:0f: 3f:07:eb:e9:c6:52:81:be:f6:1b:87:dc:3e:4e:31:1b:ee:71: d4:09:ea:8f:cf:d5:ef:06:92:52:29:92:5d:d3:4d:7e:a1:4e: 68:ec:3f:d6:cf:fa:b9:12:bf:9f:8a:cf:a6:ec:14:58:dd:71: 65:b9:f3:1a:de:35:c7:93:12:4b:64:cf:74:79:6c:ec:6d:12: 51:ef:bf:d2:69:b7:01:e7:98:98:db:13:de:4b:c6:76:79:2a: b6:7f:90:7a:37:bd:0a:12:08:d6:ae:29:62:5f:32:82:61:48: d0:c2:5c:fa:7c:f8:19:f6:d4:8d:50:42:b3:d4:8c:b0:06:7c: 4e:22:dd:76:12:be:b4:c3:eb:85:5c:46:40:f3:4a:64:3b:5e: c5:81:f3:7c -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUOV8qLqv8ScY5wKKU3/V/T46PXoUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDIzMDMyMDQ0WhcNMjYwNDIyMDMyNTQ0 WjAzMTEwLwYDVQQDEyg2RDJFNTREOUFDNTY1NTY0QjM2MkREQTUzNTU3RTBDNTdC QTZBNTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOU/vVo4P4Cq SWjeqVW8GMnFkve9jEDyU16uKDkbhZA6hh4fnVQqIIXArA6CkQanC9vEy5fvoyy4 hXsdztpnwzEL2aM0c5Ke/0iyZTP5KeXn5pci3qnTj2fXdeW3r4OsEGB/TViQa7He /iEzYhj30BzjjQqbEW8MhF9LJltzLlf/ywNB/TdYp2sduIzyu6HxQ3wo+qGsKZrs JF/69cjzZUPqys1dB0ilNgpEuMrXGQd6z/LsO0uNae7yLb2iFTZ2mmD/qxVccU2y bvLyPi8KQXNFHsNkx5xsBt+y8/H1JvJKmoTNKjliTBYHli1oEJHksP6JxaQ6QE1S nc2p1AJ3WQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFG0uVNmsVlVks2LdpTVX4MV7 pqWWMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE5ODk0OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAdHI9AMEANHI/zANBgkqhkiG9w0B AQsFAAOCAQEAVFjNJTXylQDeZznzngD32O5m9T94ZR7WaFVP2OTe9kmIqnVFP6mK LD3/Gx+xoMbVmXDp7hQqoomM0LgRJjLzOled9Wn9x3jtWWYhcXjAE2CgzQJHy4HT bkxOnagxUOPJNtmcirzCreS8h48PPwfr6cZSgb72G4fcPk4xG+5x1Anqj8/V7waS UimSXdNNfqFOaOw/1s/6uRK/n4rPpuwUWN1xZbnzGt41x5MSS2TPdHls7G0SUe+/ 0mm3AeeYmNsT3kvGdnkqtn+Qeje9ChII1q4pYl8ygmFI0MJc+nz4GfbUjVBCs9SM sAZ8TiLddhK+tMPrhVxGQPNKZDtexYHzfA== -----END CERTIFICATE-----Generated at Mon Apr 28 00:27:46 2025 by rpki-client