$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa File: AS214943.roa (raw, json) Hash identifier: MpICdGnABrnVYDbxSFy4by13f18Sk9AjZaEUPpArVYs= Subject key identifier: 2F:96:1B:09:06:E0:46:BA:18:BC:25:3D:9D:D1:59:0D:13:71:9D:00 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 6FEE6651471B40BCABDF68A39621F3F0A7C5E4E1 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa Signing time: Wed 06 Aug 2025 19:58:10 +0000 ROA not before: Wed 06 Aug 2025 19:53:10 +0000 ROA not after: Wed 05 Aug 2026 19:58:10 +0000 asID: 214943 IP address blocks: 23.94.58.0/24 maxlen: 24 66.63.187.0/24 maxlen: 24 96.47.225.0/24 maxlen: 24 104.168.80.0/24 maxlen: 24 107.150.0.0/24 maxlen: 24 107.174.46.0/24 maxlen: 24 155.94.155.0/24 maxlen: 24 155.94.185.0/24 maxlen: 24 167.160.161.0/24 maxlen: 24 198.23.161.0/24 maxlen: 24 204.152.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 Aug 2025 13:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ee:66:51:47:1b:40:bc:ab:df:68:a3:96:21:f3:f0:a7:c5:e4:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 6 19:53:10 2025 GMT Not After : Aug 5 19:58:10 2026 GMT Subject: CN=2F961B0906E046BA18BC253D9DD1590D13719D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fa:57:a4:1e:11:e2:a5:9c:b5:47:6a:21:0f: 9f:92:8d:a9:0d:47:2d:5f:3b:fe:ef:08:53:74:83: f3:dc:73:cf:a6:6d:e0:e5:ca:08:d8:e8:66:3b:09: 65:58:35:0c:dd:1f:f1:2c:48:a9:64:a7:75:3e:2a: f6:80:34:8d:1d:c3:09:79:7a:c5:c2:57:2d:fb:ee: ab:68:28:7a:ae:d4:de:cc:11:37:62:36:53:ce:37: 16:d3:9b:e9:7e:ff:71:0e:89:a5:53:6a:46:77:9c: 28:c8:cd:ae:63:e0:c0:8a:d1:9e:91:16:a7:72:52: 4b:fe:6a:d8:bb:be:1b:95:0f:14:89:fa:47:f5:c9: 5c:2c:cd:48:e8:43:2f:53:d9:53:b0:43:14:6d:62: fb:9c:f3:44:fe:02:28:34:72:6b:7d:26:34:78:dd: b8:b5:e5:6e:35:36:8a:e6:2e:c3:01:d3:07:54:20: 84:1b:18:a3:24:eb:32:20:24:de:de:72:0c:d4:ab: 0d:7f:3d:98:d0:6e:de:bc:93:21:16:93:cc:9b:9a: fc:52:8a:1c:44:b0:b8:cc:4b:6b:da:39:63:ea:ca: 3f:31:e9:e9:df:74:63:57:8f:a3:90:0b:bb:4a:ff: e4:3c:85:bc:07:c5:d2:9d:45:b0:0b:11:57:ad:d9: c6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:96:1B:09:06:E0:46:BA:18:BC:25:3D:9D:D1:59:0D:13:71:9D:00 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214943.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.58.0/24 66.63.187.0/24 96.47.225.0/24 104.168.80.0/24 107.150.0.0/24 107.174.46.0/24 155.94.155.0/24 155.94.185.0/24 167.160.161.0/24 198.23.161.0/24 204.152.199.0/24 Signature Algorithm: sha256WithRSAEncryption 95:bd:9d:ea:da:e4:e3:5d:ed:13:73:94:5b:b0:47:40:b2:a6: 41:e1:73:07:b6:60:48:3f:b0:12:e6:a4:b0:35:9b:dc:f4:a6: 96:f7:95:c0:51:a4:5c:56:85:8f:67:7e:c3:73:97:70:11:87: d6:22:f9:c1:fc:ce:dc:e9:70:a0:3b:e2:fb:9a:ee:ff:ba:e4: 05:a2:57:cb:64:fa:ed:0e:df:bb:04:fe:2e:ac:c2:c1:1d:82: 5e:fa:1a:4e:57:8f:e7:69:29:1c:8f:83:d3:55:87:e3:7f:38: c2:1f:7b:f0:e8:c6:12:9b:25:fe:b0:7d:cb:ca:f8:20:1f:1c: 4a:60:1e:07:96:ca:b7:2d:26:b3:e8:8e:ea:8b:3f:c6:22:22: 82:a6:8a:67:b7:20:36:de:ce:78:37:11:06:e8:98:14:e9:b5: 74:63:44:dd:13:30:f7:f8:7b:66:73:db:77:13:ca:7f:50:72: e8:a3:b6:e8:eb:32:18:9a:f3:ed:07:81:8f:4f:79:2c:b2:1c: 4e:f5:c3:76:64:8f:6d:bd:54:86:ab:ed:6e:3d:aa:7d:2f:96: a4:f5:b8:b3:56:fe:52:49:95:3d:cb:42:40:cc:df:ec:0e:4f: af:12:c3:98:6b:c8:e9:51:21:91:30:9d:42:75:ae:a7:77:62: 55:38:a2:3f -----BEGIN CERTIFICATE----- MIIFuzCCBKOgAwIBAgIUb+5mUUcbQLyr32ijliHz8KfF5OEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODA2MTk1MzEwWhcNMjYwODA1MTk1ODEw WjAzMTEwLwYDVQQDEygyRjk2MUIwOTA2RTA0NkJBMThCQzI1M0Q5REQxNTkwRDEz NzE5RDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfpXpB4R4qWc tUdqIQ+fko2pDUctXzv+7whTdIPz3HPPpm3g5coI2OhmOwllWDUM3R/xLEipZKd1 Pir2gDSNHcMJeXrFwlct++6raCh6rtTezBE3YjZTzjcW05vpfv9xDomlU2pGd5wo yM2uY+DAitGekRanclJL/mrYu74blQ8UifpH9clcLM1I6EMvU9lTsEMUbWL7nPNE /gIoNHJrfSY0eN24teVuNTaK5i7DAdMHVCCEGxijJOsyICTe3nIM1KsNfz2Y0G7e vJMhFpPMm5r8UoocRLC4zEtr2jlj6so/Menp33RjV4+jkAu7Sv/kPIW8B8XSnUWw CxFXrdnGIQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFC+WGwkG4Ea6GLwlPZ3RWQ0T cZ0AMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNDk0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb BggrBgEFBQcBBwEB/wRMMEowSAQCAAEwQgMEABdeOgMEAEI/uwMEAGAv4QMEAGio UAMEAGuWAAMEAGuuLgMEAJtemwMEAJteuQMEAKegoQMEAMYXoQMEAMyYxzANBgkq hkiG9w0BAQsFAAOCAQEAlb2d6trk413tE3OUW7BHQLKmQeFzB7ZgSD+wEuaksDWb 3PSmlveVwFGkXFaFj2d+w3OXcBGH1iL5wfzO3OlwoDvi+5ru/7rkBaJXy2T67Q7f uwT+LqzCwR2CXvoaTleP52kpHI+D01WH4384wh978OjGEpsl/rB9y8r4IB8cSmAe B5bKty0ms+iO6os/xiIigqaKZ7cgNt7OeDcRBuiYFOm1dGNE3RMw9/h7ZnPbdxPK f1By6KO26OsyGJrz7QeBj095LLIcTvXDdmSPbb1Uhqvtbj2qfS+WpPW4s1b+UkmV PctCQMzf7A5PrxLDmGvI6VEhkTCdQnWup3diVTiiPw== -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:53 2025 by rpki-client