$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: R7EE2jEbobOU0MjOUjATPcp5bXAO4NU6aQuMaHGOQPs= Subject key identifier: 09:CD:F7:DF:E3:3D:18:5C:15:4F:FB:24:CA:75:94:FE:68:62:C6:81 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 19E1C6F2BC31E1D625BA25E00BB238289F2CFEDD Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa Signing time: Sun 20 Apr 2025 02:53:33 +0000 ROA not before: Sun 20 Apr 2025 02:48:33 +0000 ROA not after: Sun 19 Apr 2026 02:53:33 +0000 asID: 212238 IP address blocks: 64.50.176.0/22 maxlen: 22 64.50.188.0/22 maxlen: 22 67.210.96.0/22 maxlen: 22 172.245.102.0/24 maxlen: 24 192.228.124.0/23 maxlen: 23 209.200.252.0/24 maxlen: 24 216.227.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 10:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:e1:c6:f2:bc:31:e1:d6:25:ba:25:e0:0b:b2:38:28:9f:2c:fe:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 20 02:48:33 2025 GMT Not After : Apr 19 02:53:33 2026 GMT Subject: CN=09CDF7DFE33D185C154FFB24CA7594FE6862C681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:24:11:c2:01:e8:3e:ba:54:17:3a:86:e6:ec: 9a:0c:56:b1:4d:92:57:29:24:4b:54:ef:3c:25:13: 2e:7f:49:15:1b:c1:a1:a2:9f:99:3d:84:4a:02:24: 89:a4:41:44:ac:b4:2d:5b:1a:d7:48:38:0d:7c:9d: 8e:a4:21:05:90:d4:02:a8:0d:6c:28:d5:7e:92:8f: d2:2f:ac:25:ba:7d:93:f9:72:11:c4:14:1c:29:0c: 95:24:06:a3:10:ba:72:9f:33:43:20:9a:a6:5f:9d: ef:16:fd:58:0e:c4:52:18:47:07:50:ef:f5:60:88: 88:78:3d:a5:cc:1f:21:c4:26:d8:b5:b7:fa:95:66: f1:e4:e3:80:ba:06:ea:17:c0:e8:bc:08:fc:7d:ff: 71:a9:06:ba:97:bb:17:9b:be:a2:fb:40:85:d2:dd: f4:75:7b:a4:1b:f2:92:f5:c5:d8:d5:cb:a0:73:d0: c8:b0:de:b7:38:5f:be:a5:76:fe:cb:ef:43:bd:d6: f8:b6:16:5a:9d:a2:67:47:7d:8c:dc:84:5e:29:97: 7d:5b:d8:a1:79:51:65:8d:fe:06:64:16:1d:a7:95: 6a:de:fe:f5:02:84:75:8f:61:63:17:e8:9f:50:fa: aa:31:24:4c:ba:55:7f:db:fa:6c:ae:78:2c:f5:2c: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:F7:DF:E3:3D:18:5C:15:4F:FB:24:CA:75:94:FE:68:62:C6:81 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.176.0/22 64.50.188.0/22 67.210.96.0/22 172.245.102.0/24 192.228.124.0/23 209.200.252.0/24 216.227.208.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:8f:ce:3e:b5:fb:f9:a8:68:05:3e:b9:2b:a1:36:f6:2c:45: 52:a5:a3:d1:fd:52:54:a6:c6:2c:e8:d7:97:c2:c2:76:0f:39: c6:a3:ba:da:73:47:5d:a1:28:f7:d9:ff:83:2f:46:85:fe:93: 33:e5:29:ba:a6:13:ab:ad:29:bc:8e:8c:57:b1:81:d6:49:86: 32:da:22:a2:49:da:fb:69:03:ca:df:86:6e:60:af:0d:d5:ac: 27:00:f8:4d:a2:81:ef:76:14:84:e6:17:5e:4d:4a:f3:cb:73: 67:67:31:d0:38:34:e2:f5:d6:4e:58:f4:ce:bd:24:b9:5c:8e: 58:09:45:a1:6b:e4:05:93:74:8e:9a:13:20:d9:36:db:c1:27: c1:75:ea:56:a1:9f:76:47:1d:3f:d8:cc:1d:d7:eb:b7:f3:d8: 7a:2c:74:72:b6:8a:02:4e:0d:1e:c5:c9:9a:d4:f6:f1:1f:01: a1:61:22:be:2a:48:ae:1b:09:cc:1c:52:40:ec:8a:97:c0:dc: 26:d1:df:72:c9:a6:75:7a:1f:97:33:d9:16:ab:b7:bf:08:02: f7:63:d1:24:21:4c:17:98:93:c2:56:20:3d:78:59:8e:25:11: 6c:e7:59:5a:e6:6a:d8:c8:ba:2c:d5:bf:bf:cc:87:44:09:f3: 84:c3:e4:10 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIUGeHG8rwx4dYluiXgC7I4KJ8s/t0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDIwMDI0ODMzWhcNMjYwNDE5MDI1MzMz WjAzMTEwLwYDVQQDEygwOUNERjdERkUzM0QxODVDMTU0RkZCMjRDQTc1OTRGRTY4 NjJDNjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iQRwgHoPrpU FzqG5uyaDFaxTZJXKSRLVO88JRMuf0kVG8Ghop+ZPYRKAiSJpEFErLQtWxrXSDgN fJ2OpCEFkNQCqA1sKNV+ko/SL6wlun2T+XIRxBQcKQyVJAajELpynzNDIJqmX53v Fv1YDsRSGEcHUO/1YIiIeD2lzB8hxCbYtbf6lWbx5OOAugbqF8DovAj8ff9xqQa6 l7sXm76i+0CF0t30dXukG/KS9cXY1cugc9DIsN63OF++pXb+y+9Dvdb4thZanaJn R32M3IReKZd9W9iheVFljf4GZBYdp5Vq3v71AoR1j2FjF+ifUPqqMSRMulV/2/ps rngs9SxpCwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFAnN99/jPRhcFU/7JMp1lP5o YsaBMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAkAysAMEAkAyvAMEAkPSYAMEAKz1 ZgMEAcDkfAMEANHI/AMEAtjj0DANBgkqhkiG9w0BAQsFAAOCAQEAb4/OPrX7+aho BT65K6E29ixFUqWj0f1SVKbGLOjXl8LCdg85xqO62nNHXaEo99n/gy9Ghf6TM+Up uqYTq60pvI6MV7GB1kmGMtoiokna+2kDyt+GbmCvDdWsJwD4TaKB73YUhOYXXk1K 88tzZ2cx0Dg04vXWTlj0zr0kuVyOWAlFoWvkBZN0jpoTINk228EnwXXqVqGfdkcd P9jMHdfrt/PYeix0craKAk4NHsXJmtT28R8BoWEivipIrhsJzBxSQOyKl8DcJtHf csmmdXoflzPZFqu3vwgC92PRJCFMF5iTwlYgPXhZjiURbOdZWuZq2Mi6LNW/v8yH RAnzhMPkEA== -----END CERTIFICATE-----Generated at Sat Apr 26 16:02:55 2025 by rpki-client