$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa File: AS212609.roa (raw, json) Hash identifier: vfOLGZtDkNw/T8nrSkIhrexcccvw8hndgCuLHSwDw+o= Subject key identifier: 3F:43:D9:D3:EF:C9:FB:50:30:61:88:CD:96:25:33:2F:A4:25:85:2D Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1024611DD10C0061A435CFF80BC9FAF223DD542C Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa Signing time: Tue 22 Apr 2025 12:59:19 +0000 ROA not before: Tue 22 Apr 2025 12:54:19 +0000 ROA not after: Tue 21 Apr 2026 12:59:19 +0000 asID: 212609 IP address blocks: 23.95.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 11:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:24:61:1d:d1:0c:00:61:a4:35:cf:f8:0b:c9:fa:f2:23:dd:54:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 22 12:54:19 2025 GMT Not After : Apr 21 12:59:19 2026 GMT Subject: CN=3F43D9D3EFC9FB50306188CD9625332FA425852D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3f:ac:b4:32:9a:48:ec:65:0a:8c:2d:28:a8: 07:3a:84:34:55:2a:c8:92:2a:f2:38:86:be:de:43: 83:86:44:f7:82:9c:ba:db:42:ba:70:13:11:4f:37: 9f:97:5a:2b:6d:98:cc:79:5c:35:db:8d:b1:a8:19: f4:23:04:5f:4c:2f:d7:fe:d3:95:4d:91:ff:ca:32: a0:0d:6b:28:ec:ee:a1:0f:5f:ad:6e:fc:54:f1:ba: da:e4:54:d1:56:8c:82:b1:f1:84:75:d3:30:10:53: 7a:30:fe:bf:34:3c:84:33:0b:0f:61:f8:dc:23:d0: f1:b8:79:75:a0:80:12:e9:c7:9e:c5:84:6e:3e:fc: 17:f7:36:0d:e0:e7:49:b4:2e:4d:64:22:92:a2:81: e7:3e:fe:e5:d8:58:25:01:e9:04:63:d9:f2:52:8f: e5:2b:d2:ef:4c:81:c0:79:73:94:b8:b9:1e:d8:3e: cd:45:03:d0:63:43:34:d8:ca:2e:11:fa:17:68:ce: 70:dc:0c:56:5f:d2:7e:57:39:43:06:61:41:37:cb: 5b:fe:6c:f2:9a:a5:2e:82:ad:ef:a5:f6:dc:c2:ea: e1:3f:39:fd:ff:15:be:eb:15:00:fc:62:06:9e:d1: 85:b0:f0:38:22:60:b4:8c:c6:82:4c:f1:30:2f:3f: d8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:43:D9:D3:EF:C9:FB:50:30:61:88:CD:96:25:33:2F:A4:25:85:2D X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS212609.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.131.0/24 Signature Algorithm: sha256WithRSAEncryption 34:6d:4c:72:8d:a8:19:0d:2b:dc:6a:9f:dd:07:75:1a:ae:72: a7:dd:96:fc:a8:1e:35:a8:cb:f9:4f:c5:5a:ca:8f:6a:95:86: b5:2e:11:d4:f2:34:cf:4d:a7:bb:67:73:fe:13:b0:cc:2b:e5: 6b:f2:1e:d7:67:e4:d0:ed:10:37:ea:e7:53:9c:7c:1f:d1:f4: 0e:a4:5c:57:cc:68:98:e4:27:02:37:db:d5:b0:eb:dc:49:0b: 8e:42:80:c9:7a:f6:a2:8d:20:6d:8c:05:5e:36:14:9b:7a:10: 69:32:da:d9:72:23:67:e3:e3:8d:85:88:09:79:23:c0:27:52: 23:55:ad:28:58:22:db:bb:d0:a5:b1:b9:eb:d7:13:6e:99:b2: 70:18:62:7a:4b:30:f3:9b:ae:ab:b4:3a:26:fc:60:61:7f:1e: 6f:b7:7a:5b:8d:da:e0:83:29:a5:19:3c:a6:f1:71:ee:07:14: f6:fe:f0:43:ed:23:df:04:e5:6f:14:ff:a7:8c:bb:f4:7a:5d: 59:28:17:d8:98:e7:f8:2e:cb:ec:d4:85:77:e4:c8:db:11:e5: c2:82:50:af:5b:f2:ac:79:7e:a0:9f:fa:6d:15:8d:4a:15:84: 95:01:85:7c:a5:55:67:5f:94:41:de:3a:ee:c8:47:8f:91:df: fd:e8:ce:df -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUECRhHdEMAGGkNc/4C8n68iPdVCwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDIyMTI1NDE5WhcNMjYwNDIxMTI1OTE5 WjAzMTEwLwYDVQQDEygzRjQzRDlEM0VGQzlGQjUwMzA2MTg4Q0Q5NjI1MzMyRkE0 MjU4NTJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT+stDKaSOxl CowtKKgHOoQ0VSrIkiryOIa+3kODhkT3gpy620K6cBMRTzefl1orbZjMeVw1242x qBn0IwRfTC/X/tOVTZH/yjKgDWso7O6hD1+tbvxU8bra5FTRVoyCsfGEddMwEFN6 MP6/NDyEMwsPYfjcI9DxuHl1oIAS6ceexYRuPvwX9zYN4OdJtC5NZCKSooHnPv7l 2FglAekEY9nyUo/lK9LvTIHAeXOUuLke2D7NRQPQY0M02MouEfoXaM5w3AxWX9J+ VzlDBmFBN8tb/mzymqUugq3vpfbcwurhPzn9/xW+6xUA/GIGntGFsPA4ImC0jMaC TPEwLz/YkQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFD9D2dPvyftQMGGIzZYlMy+k JYUtMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxMjYwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdfgzANBgkqhkiG9w0BAQsFAAOC AQEANG1Mco2oGQ0r3Gqf3Qd1Gq5yp92W/KgeNajL+U/FWsqPapWGtS4R1PI0z02n u2dz/hOwzCvla/Ie12fk0O0QN+rnU5x8H9H0DqRcV8xomOQnAjfb1bDr3EkLjkKA yXr2oo0gbYwFXjYUm3oQaTLa2XIjZ+PjjYWICXkjwCdSI1WtKFgi27vQpbG569cT bpmycBhieksw85uuq7Q6JvxgYX8eb7d6W43a4IMppRk8pvFx7gcU9v7wQ+0j3wTl bxT/p4y79HpdWSgX2Jjn+C7L7NSFd+TI2xHlwoJQr1vyrHl+oJ/6bRWNShWElQGF fKVVZ1+UQd467shHj5Hf/ejO3w== -----END CERTIFICATE-----Generated at Mon Apr 28 12:41:04 2025 by rpki-client