$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa File: AS215672.roa (raw, json) Hash identifier: n+xyVIuJ3NUfsLjZwbXTSskBg9aC8FGsNN38A7aghco= Subject key identifier: B5:A5:06:5C:24:A9:5A:97:F3:58:17:F3:88:CD:E5:DD:85:09:57:60 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 752CED4C972E214B8A1112AF755F92B53E068C22 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa Signing time: Fri 17 Apr 2026 00:03:26 +0000 ROA not before: Thu 16 Apr 2026 23:58:26 +0000 ROA not after: Fri 16 Apr 2027 00:03:26 +0000 asID: 215672 IP address blocks: 74.50.4.0/24 maxlen: 24 162.213.0.0/24 maxlen: 24 209.200.228.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 16:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2c:ed:4c:97:2e:21:4b:8a:11:12:af:75:5f:92:b5:3e:06:8c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 16 23:58:26 2026 GMT Not After : Apr 16 00:03:26 2027 GMT Subject: CN=B5A5065C24A95A97F35817F388CDE5DD85095760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:af:5b:3a:b8:61:b3:b5:66:5f:83:bf:b0: 07:cf:00:cf:8d:55:62:af:e3:e1:a1:56:e3:bb:97: 6f:46:88:c3:d2:0a:f8:22:2d:93:7a:21:ff:54:aa: ba:cf:cf:ad:d4:93:bd:ea:d8:9e:33:df:83:ff:96: ea:db:b0:50:76:0b:7d:ee:9d:38:74:3b:02:a9:04: 79:fa:28:72:5b:5a:35:d1:65:57:bf:26:31:bd:44: 08:d3:c6:1f:37:4e:ff:4d:b6:1a:52:8a:5a:7b:57: aa:e4:39:bb:9d:51:d3:6f:9c:7d:d2:9e:7f:83:74: 7c:41:de:ab:35:ce:0b:37:d4:bf:f5:ad:39:74:79: fd:66:19:f9:5e:fb:0c:d9:fb:b1:cf:d8:1d:a7:79: a5:c3:70:17:aa:57:d0:8a:eb:fd:dc:e0:39:3d:0b: be:86:34:92:65:5c:76:37:d4:b5:1b:e0:26:09:2b: 59:06:37:a2:74:5c:3c:75:ac:de:7b:24:00:d3:73: 8a:92:c1:e1:c9:7c:07:7c:e5:93:79:93:ee:21:89: cf:d0:22:1d:85:37:01:6d:5f:c1:40:15:2e:89:a6: 6f:33:7e:c2:03:ec:36:80:ee:1c:af:f2:c5:10:0a: 86:8a:ed:53:3b:b8:e2:19:8e:e3:df:29:dc:0d:97: 60:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:A5:06:5C:24:A9:5A:97:F3:58:17:F3:88:CD:E5:DD:85:09:57:60 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 74.50.4.0/24 162.213.0.0/24 209.200.228.0/23 Signature Algorithm: sha256WithRSAEncryption 54:6d:18:9f:b3:6e:bf:83:6d:c3:66:19:c1:c9:eb:51:86:ef: e6:73:d3:2b:90:f7:51:fb:15:ef:aa:e4:dd:72:35:f4:1f:8e: cc:29:36:fa:fd:cd:8e:a0:53:a4:0e:fe:71:07:10:db:40:50: fb:1e:31:6e:8b:66:2a:00:68:c5:ee:05:7a:71:49:d3:b3:74: 64:9d:97:2a:a5:1b:65:e4:c9:79:4a:f8:35:03:01:66:6c:0d: 22:d1:8d:e1:f9:55:f3:43:8c:f4:26:46:b1:03:f0:4c:f8:f8: e9:5f:04:5b:0c:71:0a:5d:f4:53:e4:6e:98:a9:3f:0e:73:26: a7:5e:30:cc:d6:6d:b0:67:b4:e3:1f:0b:19:c5:1e:80:07:83: 5d:51:4c:79:d2:7f:40:91:ad:02:33:4a:6c:77:b1:29:fc:b6: 3f:b3:44:43:93:f3:e7:3a:b0:63:17:e2:cd:a5:39:70:dc:24: 89:8a:98:12:25:63:a8:a8:22:8b:06:ae:24:92:02:32:88:a1: 04:25:dc:43:ee:e4:a1:98:3c:42:7d:93:b0:ab:8b:c0:74:71: bd:88:24:24:17:ee:27:fd:f2:35:fe:79:d9:92:d2:6b:1d:7d: fa:d1:a3:2c:2e:3a:0d:d9:48:bb:ca:c5:16:cf:8f:6b:4e:7c: f2:5a:67:84 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUdSztTJcuIUuKERKvdV+StT4GjCIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwNDE2MjM1ODI2WhcNMjcwNDE2MDAwMzI2 WjAzMTEwLwYDVQQDEyhCNUE1MDY1QzI0QTk1QTk3RjM1ODE3RjM4OENERTVERDg1 MDk1NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIivWzq4YbO1 Zl+Dv7AHzwDPjVVir+PhoVbju5dvRojD0gr4Ii2TeiH/VKq6z8+t1JO96tieM9+D /5bq27BQdgt97p04dDsCqQR5+ihyW1o10WVXvyYxvUQI08YfN07/TbYaUopae1eq 5Dm7nVHTb5x90p5/g3R8Qd6rNc4LN9S/9a05dHn9Zhn5XvsM2fuxz9gdp3mlw3AX qlfQiuv93OA5PQu+hjSSZVx2N9S1G+AmCStZBjeidFw8dazeeyQA03OKksHhyXwH fOWTeZPuIYnP0CIdhTcBbV/BQBUuiaZvM37CA+w2gO4cr/LFEAqGiu1TO7jiGY7j 3yncDZdgmwIDAQABo4ICizCCAocwHQYDVR0OBBYEFLWlBlwkqVqX81gX84jN5d2F CVdgMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNTY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAEoyBAMEAKLVAAMEAdHI5DANBgkq hkiG9w0BAQsFAAOCAQEAVG0Yn7Nuv4Ntw2YZwcnrUYbv5nPTK5D3UfsV76rk3XI1 9B+OzCk2+v3NjqBTpA7+cQcQ20BQ+x4xbotmKgBoxe4FenFJ07N0ZJ2XKqUbZeTJ eUr4NQMBZmwNItGN4flV80OM9CZGsQPwTPj46V8EWwxxCl30U+RumKk/DnMmp14w zNZtsGe04x8LGcUegAeDXVFMedJ/QJGtAjNKbHexKfy2P7NEQ5Pz5zqwYxfizaU5 cNwkiYqYEiVjqKgiiwauJJICMoihBCXcQ+7koZg8Qn2TsKuLwHRxvYgkJBfuJ/3y Nf552ZLSax19+tGjLC46DdlIu8rFFs+Pa0588lpnhA== -----END CERTIFICATE-----Generated at Sun Apr 19 08:24:19 2026 by rpki-client