$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: l8gLP+VZ8VWToW1k2WZQKtnRyv8P5szYqjDWDyFMfrw= Subject key identifier: 31:5C:97:2D:5A:82:E1:BD:14:2F:D2:F1:61:D1:9F:A0:32:94:38:37 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4F94B48EA016E03EFDE25A80542CAB5B3C557BDE Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa Signing time: Mon 30 Mar 2026 10:41:22 +0000 ROA not before: Mon 30 Mar 2026 10:36:22 +0000 ROA not after: Mon 29 Mar 2027 10:41:22 +0000 asID: 212238 IP address blocks: 64.50.189.0/24 maxlen: 24 172.245.102.0/24 maxlen: 24 192.228.124.0/23 maxlen: 23 209.200.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 03:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:94:b4:8e:a0:16:e0:3e:fd:e2:5a:80:54:2c:ab:5b:3c:55:7b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 30 10:36:22 2026 GMT Not After : Mar 29 10:41:22 2027 GMT Subject: CN=315C972D5A82E1BD142FD2F161D19FA032943837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:dd:00:46:34:d5:be:42:36:3c:c3:bf:f6: 39:01:09:c0:28:86:e6:19:7a:0a:24:a7:a2:eb:ae: 92:fa:0c:d8:8d:7a:15:e9:4d:b7:b7:3c:32:6e:df: 0d:1f:0d:cb:73:9a:ed:9d:07:9b:7b:16:8b:80:6c: 00:84:67:94:ff:a6:7c:6d:07:93:00:bd:b1:28:49: ac:b8:b7:36:d9:ca:aa:ba:87:2b:c7:2e:af:25:4a: ce:07:9f:f3:cc:1e:e2:46:a3:e4:13:1a:f8:6d:7f: 06:aa:a8:e7:cc:d6:d5:79:e7:aa:ef:8d:d4:87:1d: e8:91:50:55:2d:01:e6:cf:ff:5a:9a:d3:20:d8:1b: 5b:87:72:fe:d5:21:7f:09:5e:1d:50:1d:36:2c:c9: 82:95:a6:34:59:91:1c:58:e0:22:82:d6:df:26:31: e0:d7:42:61:33:03:3e:c6:3a:fa:6d:5a:8c:58:d1: 13:a7:9c:77:7f:60:d1:e1:76:f4:30:48:93:f5:49: bb:37:e2:0f:c5:46:af:f4:d2:b5:eb:5f:f9:31:9a: 15:54:f1:f9:44:04:60:d0:ce:7d:13:d2:dc:e5:72: 75:06:de:d5:e7:33:17:0d:e6:21:1e:c6:c1:fb:02: 1c:2b:93:c8:f3:79:6b:48:20:2b:7a:fc:f0:c0:28: 5b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5C:97:2D:5A:82:E1:BD:14:2F:D2:F1:61:D1:9F:A0:32:94:38:37 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.189.0/24 172.245.102.0/24 192.228.124.0/23 209.200.252.0/24 Signature Algorithm: sha256WithRSAEncryption 39:6f:e7:be:95:4a:f9:68:b2:39:2b:99:37:95:9f:99:10:d9: 46:a3:7c:56:81:28:f4:9e:ef:c0:ca:c8:e4:22:6c:79:c7:00: f7:9c:c0:d7:d5:60:a9:38:23:05:dc:45:60:49:a0:2e:f2:68: 0a:74:f3:36:32:3d:ce:95:f5:a6:5d:11:c6:41:40:66:23:80: 1a:1b:9e:ba:ad:f0:8c:07:c5:6d:96:60:c1:89:21:f2:cc:1b: 41:ae:d8:97:dc:43:d3:e2:a0:0e:51:b0:1b:6a:7b:11:91:10: 73:aa:09:94:87:6f:e6:96:40:e7:55:eb:78:c4:d5:3a:ea:10: f3:2a:f3:b9:bd:eb:55:db:25:63:2d:04:16:46:a6:6e:09:de: 13:c2:8a:ca:9a:9e:76:32:8e:4a:27:ef:80:ab:d6:3d:03:1d: 08:20:37:5e:ac:84:69:68:8d:3f:e2:4d:71:91:18:b2:c1:a5: c5:aa:97:96:0d:92:62:c3:b0:ba:67:2c:1d:78:d9:b3:ad:a5: a6:48:06:04:8e:75:66:8c:86:f2:5d:11:6a:52:28:b2:f1:2b: 9e:8a:68:84:2a:dc:4a:fe:79:39:60:08:65:26:d5:5f:92:f5: 21:02:f8:af:58:e0:a7:4a:20:be:57:3e:2e:63:eb:b3:05:c0: 3e:f6:a9:62 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUT5S0jqAW4D794lqAVCyrWzxVe94wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzMwMTAzNjIyWhcNMjcwMzI5MTA0MTIy WjAzMTEwLwYDVQQDEygzMTVDOTcyRDVBODJFMUJEMTQyRkQyRjE2MUQxOUZBMDMy OTQzODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3zdAEY01b5C NjzDv/Y5AQnAKIbmGXoKJKei666S+gzYjXoV6U23tzwybt8NHw3Lc5rtnQebexaL gGwAhGeU/6Z8bQeTAL2xKEmsuLc22cqquocrxy6vJUrOB5/zzB7iRqPkExr4bX8G qqjnzNbVeeeq743Uhx3okVBVLQHmz/9amtMg2Btbh3L+1SF/CV4dUB02LMmClaY0 WZEcWOAigtbfJjHg10JhMwM+xjr6bVqMWNETp5x3f2DR4Xb0MEiT9Um7N+IPxUav 9NK161/5MZoVVPH5RARg0M59E9Lc5XJ1Bt7V5zMXDeYhHsbB+wIcK5PI83lrSCAr evzwwChbUQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFDFcly1aguG9FC/S8WHRn6Ay lDg3MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAEAyvQMEAKz1ZgMEAcDkfAMEANHI /DANBgkqhkiG9w0BAQsFAAOCAQEAOW/nvpVK+WiyOSuZN5WfmRDZRqN8VoEo9J7v wMrI5CJseccA95zA19VgqTgjBdxFYEmgLvJoCnTzNjI9zpX1pl0RxkFAZiOAGhue uq3wjAfFbZZgwYkh8swbQa7Yl9xD0+KgDlGwG2p7EZEQc6oJlIdv5pZA51XreMTV OuoQ8yrzub3rVdslYy0EFkambgneE8KKypqedjKOSifvgKvWPQMdCCA3XqyEaWiN P+JNcZEYssGlxaqXlg2SYsOwumcsHXjZs62lpkgGBI51ZoyG8l0RalIosvErnopo hCrcSv55OWAIZSbVX5L1IQL4r1jgp0ogvlc+LmPrswXAPvapYg== -----END CERTIFICATE-----Generated at Fri Apr 17 05:39:09 2026 by rpki-client