$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25956.roa File: AS25956.roa (raw, json) Hash identifier: VkOUzURgNB1VdpQ+okZyESUtOrhG/txbgzsqHEKyj9c= Subject key identifier: BB:54:8D:73:26:46:37:B3:00:CF:EC:39:F9:90:6B:B8:BD:AE:B2:A7 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 3BB6DD29880A10DAC15E139D2636E8A0D866D343 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25956.roa Signing time: Wed 02 Apr 2025 18:26:37 +0000 ROA not before: Wed 02 Apr 2025 18:21:37 +0000 ROA not after: Wed 01 Apr 2026 18:26:37 +0000 asID: 25956 IP address blocks: 209.200.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 10:21:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b6:dd:29:88:0a:10:da:c1:5e:13:9d:26:36:e8:a0:d8:66:d3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Apr 2 18:21:37 2025 GMT Not After : Apr 1 18:26:37 2026 GMT Subject: CN=BB548D73264637B300CFEC39F9906BB8BDAEB2A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3d:ba:11:29:93:8f:29:f5:c6:ba:6f:5c:33: 07:ce:7f:b7:3f:8c:09:a6:82:16:cd:cb:a6:e5:92: de:56:17:a5:77:51:da:c1:3c:1b:46:92:bc:af:90: 6f:5a:9e:05:12:9e:9a:cd:f6:20:f2:f0:a5:bf:24: 87:55:f5:26:b2:5e:c1:e7:1f:e6:90:73:bf:85:cd: 21:2f:17:89:9e:09:a7:63:83:34:99:35:3b:bb:37: ba:91:07:2b:75:f0:2c:9e:9f:e2:91:9f:8b:d9:b8: 1d:5d:a0:7f:2b:a3:0b:97:7e:a0:17:f5:25:7f:cb: af:be:09:df:41:8d:bd:82:d1:74:bf:1e:bd:29:49: 82:22:88:f2:ad:a8:8d:d6:f6:fb:69:b2:db:07:16: 91:5a:36:78:22:5f:5f:e9:e3:df:1d:2a:67:c2:28: ac:1e:3c:b4:34:63:26:c4:5e:75:54:7e:b9:1e:3d: 28:48:72:46:ca:8c:58:54:0a:85:b5:91:f0:c3:46: 37:a4:bd:ef:d2:e5:31:75:df:ba:d1:75:85:92:90: 8f:cd:f4:ce:5d:2f:5e:ab:66:f3:3b:68:44:c3:be: 6c:eb:33:c4:a3:24:03:69:7f:e7:59:fe:3b:44:51: af:d9:3e:a9:ea:47:2b:75:a6:84:74:a0:df:75:5c: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:54:8D:73:26:46:37:B3:00:CF:EC:39:F9:90:6B:B8:BD:AE:B2:A7 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS25956.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.200.232.0/24 Signature Algorithm: sha256WithRSAEncryption 96:27:bb:32:76:02:50:3e:3b:bd:ab:38:89:31:9d:9c:31:05: ed:4c:55:56:8b:0f:e6:ec:1a:b4:42:dc:0d:53:ce:b1:b5:a7: 90:a6:d1:43:7e:ca:17:e4:75:3a:56:bf:31:61:62:d7:40:cd: 0f:2c:f9:a6:cc:bf:5a:7a:ef:3b:26:b4:fb:32:e2:16:2b:a6: f7:92:2e:b6:9e:bf:6e:df:be:0a:6c:94:d1:7e:d8:1d:d1:d6: 2e:11:29:a5:51:b5:8b:fd:9d:9c:68:97:ea:20:8d:25:ea:b4: d5:95:8f:a9:aa:c9:f2:da:c2:00:4b:49:13:5d:a2:cb:84:23: 59:ec:22:73:88:a4:e3:ba:5d:80:39:4c:e5:83:86:32:06:35: 36:36:cb:29:e5:33:8a:20:ec:4e:96:1f:f3:3e:da:98:13:42: ef:8b:c8:71:46:c6:7b:bd:b8:9a:87:71:7e:fd:5c:70:0b:c5: eb:16:69:92:69:02:08:32:82:44:0a:2b:d9:5f:8f:71:f1:68: da:22:93:33:3e:b2:72:33:4d:4c:4e:e8:da:71:2d:2c:00:e8: 49:d4:0c:ce:91:04:be:75:a4:f1:6b:ea:22:cc:e8:53:c3:7e: 43:00:5c:9c:b0:0f:2b:06:1f:b9:5f:8f:a7:03:2b:65:e8:d6: 04:6a:9e:79 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUO7bdKYgKENrBXhOdJjbooNhm00MwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNDAyMTgyMTM3WhcNMjYwNDAxMTgyNjM3 WjAzMTEwLwYDVQQDEyhCQjU0OEQ3MzI2NDYzN0IzMDBDRkVDMzlGOTkwNkJCOEJE QUVCMkE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4z26ESmTjyn1 xrpvXDMHzn+3P4wJpoIWzcum5ZLeVheld1HawTwbRpK8r5BvWp4FEp6azfYg8vCl vySHVfUmsl7B5x/mkHO/hc0hLxeJngmnY4M0mTU7uze6kQcrdfAsnp/ikZ+L2bgd XaB/K6MLl36gF/Ulf8uvvgnfQY29gtF0vx69KUmCIojyraiN1vb7abLbBxaRWjZ4 Il9f6ePfHSpnwiisHjy0NGMmxF51VH65Hj0oSHJGyoxYVAqFtZHww0Y3pL3v0uUx dd+60XWFkpCPzfTOXS9eq2bzO2hEw75s6zPEoyQDaX/nWf47RFGv2T6p6kcrdaaE dKDfdVycAQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLtUjXMmRjezAM/sOfmQa7i9 rrKnMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzI1OTU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cjoMA0GCSqGSIb3DQEBCwUAA4IB AQCWJ7sydgJQPju9qziJMZ2cMQXtTFVWiw/m7Bq0QtwNU86xtaeQptFDfsoX5HU6 Vr8xYWLXQM0PLPmmzL9aeu87JrT7MuIWK6b3ki62nr9u374KbJTRftgd0dYuESml UbWL/Z2caJfqII0l6rTVlY+pqsny2sIAS0kTXaLLhCNZ7CJziKTjul2AOUzlg4Yy BjU2Nssp5TOKIOxOlh/zPtqYE0Lvi8hxRsZ7vbiah3F+/VxwC8XrFmmSaQIIMoJE CivZX49x8WjaIpMzPrJyM01MTujacS0sAOhJ1AzOkQS+daTxa+oizOhTw35DAFyc sA8rBh+5X4+nAytl6NYEap55 -----END CERTIFICATE-----Generated at Sun Apr 27 02:54:55 2025 by rpki-client