$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa File: AS3223.roa (raw, json) Hash identifier: 0hrO1GLVh6UCgVPdm9sMYjyKX4LRU1zxi1W3lXL8v8Y= Subject key identifier: D1:9A:ED:87:CB:11:C7:88:CA:C2:30:29:7E:8F:09:0A:17:0A:78:79 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 4D4FEF247A4E3A9A5608F726E0A290A710B02B75 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa Signing time: Mon 02 Mar 2026 13:11:40 +0000 ROA not before: Mon 02 Mar 2026 13:06:40 +0000 ROA not after: Mon 01 Mar 2027 13:11:40 +0000 asID: 3223 IP address blocks: 64.50.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 18:59:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4f:ef:24:7a:4e:3a:9a:56:08:f7:26:e0:a2:90:a7:10:b0:2b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 2 13:06:40 2026 GMT Not After : Mar 1 13:11:40 2027 GMT Subject: CN=D19AED87CB11C788CAC230297E8F090A170A7879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f7:1e:73:db:93:af:8d:fb:e1:e6:9a:55:ba: 57:6c:56:48:ec:f3:18:fc:70:25:9c:77:fe:c5:e8: 35:30:21:fc:d2:a8:46:e7:53:17:6d:d8:50:00:cc: 49:5e:16:c8:9b:6d:49:64:62:84:3a:d6:7e:45:11: 47:2a:0d:b7:7a:bf:43:98:44:ef:81:2b:25:7f:e6: 47:86:8d:7b:2d:df:c7:e4:19:e3:90:7b:eb:e5:62: 0b:e7:91:f3:e3:36:b1:14:97:65:1f:67:be:0e:ba: 06:af:25:23:a8:6e:10:4f:5b:89:bc:eb:9c:82:08: 08:30:d2:35:5b:fa:c6:62:25:e4:2c:88:0d:6a:b6: db:f2:25:21:c3:39:09:53:77:e1:d1:cd:62:56:a1: 11:41:05:9d:d6:06:3e:52:4b:fd:be:1d:1d:df:d1: f2:89:7f:5e:a1:37:c3:d4:d9:bd:73:f6:fc:18:35: 57:82:a4:c6:ec:02:52:af:27:a9:08:42:8d:7c:3f: c8:dc:20:e7:97:c6:c7:0d:d5:40:3f:40:18:7d:fc: 18:42:8b:78:bf:2e:45:5a:bd:a2:d0:04:9a:51:4e: ec:20:4a:bb:58:fa:55:0c:30:65:e4:05:9c:d7:75: 5b:2e:31:69:f2:5e:7d:c8:b3:95:94:f2:96:11:a4: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9A:ED:87:CB:11:C7:88:CA:C2:30:29:7E:8F:09:0A:17:0A:78:79 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.185.0/24 Signature Algorithm: sha256WithRSAEncryption 40:92:48:18:0a:a8:8d:d3:ca:09:c5:bf:2d:d9:d6:15:4e:61: cf:f6:4f:d4:04:5d:49:4e:91:ad:44:01:de:e6:06:57:9c:8b: 37:2e:8a:c5:37:03:f3:e6:a1:d7:48:b0:10:3f:40:5e:8c:4e: a1:e9:2d:cb:25:54:e3:12:79:a8:c2:79:10:c3:db:41:80:8d: 99:60:5a:a1:7e:63:02:b4:cf:8b:b4:77:13:7e:99:e0:a3:76: 25:b6:e1:43:db:16:d3:ba:45:3c:96:50:fb:ae:75:d6:6f:08: 23:40:83:6e:e2:d7:2b:67:76:fe:18:f7:9b:f9:4f:f4:74:37: ec:60:19:94:04:ae:c5:7a:b2:d4:37:0c:3a:73:b9:d2:08:21: fb:06:a1:0c:53:aa:32:5d:6e:54:f5:a5:ff:97:95:ab:ca:17: 5f:3f:a0:ef:75:5c:1f:d0:c0:69:55:93:fd:2d:e1:26:b6:63: 4f:03:40:18:75:07:60:59:ae:5f:14:f9:00:9d:56:7f:80:f3: 57:51:a7:86:1b:e0:65:5a:7d:af:b6:fc:78:f4:6c:97:8b:60: a6:90:44:9d:0a:42:b3:b1:36:4e:f3:ae:6d:e7:3f:a8:af:98: 93:00:87:ef:fc:0b:4c:8c:0a:3c:3e:22:8d:0e:3f:8b:1f:8a: d9:4e:d4:cc -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUTU/vJHpOOppWCPcm4KKQpxCwK3UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwMzAyMTMwNjQwWhcNMjcwMzAxMTMxMTQw WjAzMTEwLwYDVQQDEyhEMTlBRUQ4N0NCMTFDNzg4Q0FDMjMwMjk3RThGMDkwQTE3 MEE3ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/cec9uTr437 4eaaVbpXbFZI7PMY/HAlnHf+xeg1MCH80qhG51MXbdhQAMxJXhbIm21JZGKEOtZ+ RRFHKg23er9DmETvgSslf+ZHho17Ld/H5BnjkHvr5WIL55Hz4zaxFJdlH2e+DroG ryUjqG4QT1uJvOucgggIMNI1W/rGYiXkLIgNarbb8iUhwzkJU3fh0c1iVqERQQWd 1gY+Ukv9vh0d39HyiX9eoTfD1Nm9c/b8GDVXgqTG7AJSryepCEKNfD/I3CDnl8bH DdVAP0AYffwYQot4vy5FWr2i0ASaUU7sIEq7WPpVDDBl5AWc13VbLjFp8l59yLOV lPKWEaT58wIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFNGa7YfLEceIysIwKX6PCQoX Cnh5MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzMyMjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMrkwDQYJKoZIhvcNAQELBQADggEB AECSSBgKqI3TygnFvy3Z1hVOYc/2T9QEXUlOka1EAd7mBlecizcuisU3A/PmoddI sBA/QF6MTqHpLcslVOMSeajCeRDD20GAjZlgWqF+YwK0z4u0dxN+meCjdiW24UPb FtO6RTyWUPuuddZvCCNAg27i1ytndv4Y95v5T/R0N+xgGZQErsV6stQ3DDpzudII IfsGoQxTqjJdblT1pf+XlavKF18/oO91XB/QwGlVk/0t4Sa2Y08DQBh1B2BZrl8U +QCdVn+A81dRp4Yb4GVafa+2/Hj0bJeLYKaQRJ0KQrOxNk7zrm3nP6ivmJMAh+/8 C0yMCjw+Io0OP4sfitlO1Mw= -----END CERTIFICATE-----Generated at Tue Mar 3 01:10:56 2026 by rpki-client