$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa File: AS399861.roa (raw, json) Hash identifier: QNRxEc6insN4FTW2YJG2kIRyn3Mp6CmU6p2r27a1EU0= Subject key identifier: 9A:96:34:C9:0B:67:A4:0D:6D:AA:56:32:96:28:F8:C1:9A:5D:70:55 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 20DCA1EAB970131270060E8450C3942F7E5953DB Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa Signing time: Tue 21 Oct 2025 09:03:00 +0000 ROA not before: Tue 21 Oct 2025 08:58:00 +0000 ROA not after: Tue 20 Oct 2026 09:03:00 +0000 asID: 399861 IP address blocks: 23.95.83.0/24 maxlen: 24 107.173.8.0/24 maxlen: 24 192.227.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 05:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:dc:a1:ea:b9:70:13:12:70:06:0e:84:50:c3:94:2f:7e:59:53:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 21 08:58:00 2025 GMT Not After : Oct 20 09:03:00 2026 GMT Subject: CN=9A9634C90B67A40D6DAA56329628F8C19A5D7055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e7:01:af:af:44:ed:cc:d0:c0:8f:e7:93:f0: 41:37:de:2a:78:e6:01:2f:90:9e:b7:9f:ac:0a:e0: d5:e7:de:31:9b:1a:d4:64:f1:16:a9:03:91:e3:65: 71:bc:81:2c:f7:ff:f5:14:eb:b8:42:cb:93:26:ea: 62:a2:58:1d:4b:45:7e:20:e4:f0:0e:8b:19:67:0e: f7:f7:08:e6:c2:75:6a:c1:f9:0d:9c:1d:df:77:86: 5f:eb:a2:8a:f3:92:ed:61:b0:5d:8c:a0:61:62:61: f0:f1:7c:b8:09:e8:f4:37:c8:3b:df:54:80:02:e2: 72:4e:00:c7:d2:1d:b1:e2:25:52:a5:42:86:17:8c: b7:71:b2:35:02:a0:01:1a:2a:44:de:78:11:bc:cb: 4a:b5:51:90:ac:6a:29:cb:7e:04:b2:1c:c0:26:52: 58:90:16:05:8f:96:5d:65:b0:00:a7:e2:fd:12:27: 45:eb:4f:1b:71:31:bd:5b:2b:d8:b5:f5:90:ba:30: f0:c9:b1:7a:f3:53:75:aa:3e:07:ef:11:8d:3a:f9: 1e:68:06:b3:90:68:0b:76:0b:86:1b:00:4c:26:1e: 27:8e:fe:87:76:54:5e:f5:cc:4a:98:9d:2a:42:0c: a0:1b:94:3f:e9:c1:50:a4:cc:2d:c6:9d:c5:da:87: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:96:34:C9:0B:67:A4:0D:6D:AA:56:32:96:28:F8:C1:9A:5D:70:55 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399861.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.83.0/24 107.173.8.0/24 192.227.201.0/24 Signature Algorithm: sha256WithRSAEncryption 35:07:95:53:b4:bb:1f:3b:aa:aa:57:6e:94:d0:13:dd:1b:b8: d8:b1:31:cf:b0:02:cc:f6:59:e6:38:68:12:65:41:1f:45:5c: 5c:6d:90:4e:d1:46:c5:8d:0a:35:10:82:c7:83:a7:38:83:db: 26:38:ba:b1:2a:50:0f:cc:c4:92:25:e7:08:8f:d5:24:a8:46: 96:6d:03:b1:f6:08:5f:46:37:08:0b:6e:45:60:10:d5:87:a2: 6e:65:28:a0:a7:ec:8a:ac:1b:8c:45:e6:d5:90:fd:05:02:a7: a6:24:1b:df:61:30:29:e0:6a:d1:9a:77:7a:ff:7f:72:87:9c: 11:cb:ce:dd:be:bb:9c:cc:bb:5c:6c:a5:a6:fc:53:75:7f:19: 66:9a:7a:4e:c0:fc:04:54:3c:f6:e4:d2:1a:5e:0e:44:ed:ae: fc:63:86:7b:c0:b7:7a:5d:a1:82:44:63:4c:fc:5f:ec:ee:27: 41:36:18:19:28:22:59:8c:c3:57:35:c3:c8:58:57:3f:2a:af: 88:95:2e:41:5b:d9:60:f5:33:ba:f4:4a:5f:9d:1c:eb:cd:b9: 9c:a8:71:3c:21:80:a6:92:16:b6:9e:3e:b7:bb:60:dd:df:5c: 39:88:11:dc:bc:01:95:46:f9:dd:e6:f0:9f:c8:a2:50:c0:2e: 1a:8d:34:52 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUINyh6rlwExJwBg6EUMOUL35ZU9swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDIxMDg1ODAwWhcNMjYxMDIwMDkwMzAw WjAzMTEwLwYDVQQDEyg5QTk2MzRDOTBCNjdBNDBENkRBQTU2MzI5NjI4RjhDMTlB NUQ3MDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ecBr69E7czQ wI/nk/BBN94qeOYBL5Cet5+sCuDV594xmxrUZPEWqQOR42VxvIEs9//1FOu4QsuT JupiolgdS0V+IOTwDosZZw739wjmwnVqwfkNnB3fd4Zf66KK85LtYbBdjKBhYmHw 8Xy4Cej0N8g731SAAuJyTgDH0h2x4iVSpUKGF4y3cbI1AqABGipE3ngRvMtKtVGQ rGopy34EshzAJlJYkBYFj5ZdZbAAp+L9EidF608bcTG9WyvYtfWQujDwybF681N1 qj4H7xGNOvkeaAazkGgLdguGGwBMJh4njv6HdlRe9cxKmJ0qQgygG5Q/6cFQpMwt xp3F2ocXDwIDAQABo4ICizCCAocwHQYDVR0OBBYEFJqWNMkLZ6QNbapWMpYo+MGa XXBVMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzM5OTg2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEABdfUwMEAGutCAMEAMDjyTANBgkq hkiG9w0BAQsFAAOCAQEANQeVU7S7HzuqqldulNAT3Ru42LExz7ACzPZZ5jhoEmVB H0VcXG2QTtFGxY0KNRCCx4OnOIPbJji6sSpQD8zEkiXnCI/VJKhGlm0DsfYIX0Y3 CAtuRWAQ1YeibmUooKfsiqwbjEXm1ZD9BQKnpiQb32EwKeBq0Zp3ev9/coecEcvO 3b67nMy7XGylpvxTdX8ZZpp6TsD8BFQ89uTSGl4ORO2u/GOGe8C3el2hgkRjTPxf 7O4nQTYYGSgiWYzDVzXDyFhXPyqviJUuQVvZYPUzuvRKX50c6825nKhxPCGAppIW tp4+t7tg3d9cOYgR3LwBlUb53ebwn8iiUMAuGo00Ug== -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:03 2025 by rpki-client