$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: slTCq1dRyoeR66mhojwSehO5JLBHiz0FcCM3zTfA1i8= Subject key identifier: 16:2E:80:2D:26:56:11:A5:83:C5:08:5D:D3:51:F2:F1:BB:A4:69:3B Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 0B5ADD89385F95E7AFCE2FC5E02BEC7576B269A2 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa Signing time: Tue 20 May 2025 00:01:55 +0000 ROA not before: Mon 19 May 2025 23:56:55 +0000 ROA not after: Tue 19 May 2026 00:01:55 +0000 asID: 212238 IP address blocks: 64.50.188.0/22 maxlen: 22 172.245.102.0/24 maxlen: 24 192.228.124.0/23 maxlen: 23 209.200.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Jun 2025 19:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:5a:dd:89:38:5f:95:e7:af:ce:2f:c5:e0:2b:ec:75:76:b2:69:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 19 23:56:55 2025 GMT Not After : May 19 00:01:55 2026 GMT Subject: CN=162E802D265611A583C5085DD351F2F1BBA4693B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:30:f1:6c:45:ee:b2:4a:ed:ec:9a:c0:41:37: ac:df:b4:34:89:a5:a1:c8:28:49:ed:59:80:48:2e: 25:71:c7:94:95:06:dc:78:f1:2a:86:ee:40:cf:25: 06:0c:c7:bc:6d:1d:f9:91:ea:39:97:93:1d:9a:92: 7d:8d:53:e7:39:80:9d:04:cb:1a:1f:d2:1b:3d:18: 8d:33:f6:4c:00:75:9c:74:13:f8:1a:66:ee:d8:3a: 71:5c:b4:22:a5:ae:21:b2:5d:f9:b6:22:d3:dd:47: 7e:8d:87:6a:00:22:e6:97:8e:68:80:b9:17:ee:19: b1:73:55:0f:eb:da:a8:67:ac:b7:e1:14:fc:4b:dc: 55:2a:65:79:58:e4:bf:98:6b:60:4f:b6:8a:ec:95: 04:eb:e4:55:ca:f4:85:33:fc:2d:05:c9:aa:fe:c0: e4:45:ac:ac:30:22:e7:17:bb:7a:ba:1b:65:6b:99: 89:7f:8d:c4:54:90:74:50:a3:f8:49:f5:0d:38:8f: 76:5f:6a:29:f5:ff:c6:1d:0d:b6:2f:84:a6:c1:64: 31:8d:45:16:a7:b8:cf:e7:0b:92:b0:a8:05:51:0c: bd:68:c6:74:d9:a6:47:57:c7:91:37:7b:e2:d4:66: 91:9a:1b:a0:bd:ac:1d:de:bc:ae:34:79:e8:22:97: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2E:80:2D:26:56:11:A5:83:C5:08:5D:D3:51:F2:F1:BB:A4:69:3B X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.188.0/22 172.245.102.0/24 192.228.124.0/23 209.200.252.0/24 Signature Algorithm: sha256WithRSAEncryption 31:8e:19:a7:39:63:ba:22:51:a3:6a:05:0d:9e:24:1c:48:2f: e1:f2:a6:e2:e8:fa:f8:ca:d4:e5:e6:85:4d:24:4f:ec:7f:2e: 74:b9:7c:b9:6b:91:07:42:24:0d:27:a2:40:40:cc:7c:2d:e2: cb:eb:d3:07:34:50:9b:37:ca:0e:8c:2b:fa:61:55:4b:08:18: 53:eb:c4:d9:0b:d8:d5:5f:44:f4:12:1c:d5:45:0d:a2:b0:ff: f0:92:b3:61:2d:8c:cd:46:59:43:49:12:80:9d:71:63:e7:1d: a8:e9:a4:13:37:d0:03:46:e0:c9:c0:ae:56:e4:8b:82:78:ac: 15:7e:cf:f5:0c:32:60:29:7e:60:69:e1:28:c9:4b:7b:8c:df: 43:8f:cb:81:b5:e8:2a:e2:18:98:00:f4:0c:0f:5f:69:49:b3: de:06:bb:2d:14:8f:c0:cd:54:9b:16:6a:4f:36:8d:3a:69:fb: 14:51:26:3d:f7:ec:f2:f9:ad:9b:de:48:b6:58:02:d9:b2:8f: 40:e3:db:28:e7:fc:8f:2b:cc:cc:9b:ef:df:7d:b0:0b:5e:a0: d3:11:84:be:c8:0e:3a:57:76:93:fd:5f:dc:d9:84:11:87:7b: ab:b3:4d:37:1b:a1:d2:da:ab:f9:b6:f7:63:a9:b5:3f:b0:1c: be:2b:18:1e -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUC1rdiThfleevzi/F4CvsdXayaaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTE5MjM1NjU1WhcNMjYwNTE5MDAwMTU1 WjAzMTEwLwYDVQQDEygxNjJFODAyRDI2NTYxMUE1ODNDNTA4NUREMzUxRjJGMUJC QTQ2OTNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzDxbEXuskrt 7JrAQTes37Q0iaWhyChJ7VmASC4lcceUlQbcePEqhu5AzyUGDMe8bR35keo5l5Md mpJ9jVPnOYCdBMsaH9IbPRiNM/ZMAHWcdBP4Gmbu2DpxXLQipa4hsl35tiLT3Ud+ jYdqACLml45ogLkX7hmxc1UP69qoZ6y34RT8S9xVKmV5WOS/mGtgT7aK7JUE6+RV yvSFM/wtBcmq/sDkRaysMCLnF7t6uhtla5mJf43EVJB0UKP4SfUNOI92X2op9f/G HQ22L4SmwWQxjUUWp7jP5wuSsKgFUQy9aMZ02aZHV8eRN3vi1GaRmhugvawd3ryu NHnoIpe9RwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFBYugC0mVhGlg8UIXdNR8vG7 pGk7MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAkAyvAMEAKz1ZgMEAcDkfAMEANHI /DANBgkqhkiG9w0BAQsFAAOCAQEAMY4ZpzljuiJRo2oFDZ4kHEgv4fKm4uj6+MrU 5eaFTSRP7H8udLl8uWuRB0IkDSeiQEDMfC3iy+vTBzRQmzfKDowr+mFVSwgYU+vE 2QvY1V9E9BIc1UUNorD/8JKzYS2MzUZZQ0kSgJ1xY+cdqOmkEzfQA0bgycCuVuSL gnisFX7P9QwyYCl+YGnhKMlLe4zfQ4/LgbXoKuIYmAD0DA9faUmz3ga7LRSPwM1U mxZqTzaNOmn7FFEmPffs8vmtm95ItlgC2bKPQOPbKOf8jyvMzJvv332wC16g0xGE vsgOOld2k/1f3NmEEYd7q7NNNxuh0tqr+bb3Y6m1P7AcvisYHg== -----END CERTIFICATE-----Generated at Sat Jun 14 04:14:42 2025 by rpki-client