$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212384.roa File: AS212384.roa (raw, json) Hash identifier: QfKjoN35w6Y1GJRSOnNWZFTIrl41FlYHyLUDbVs8UNo= Subject key identifier: 39:85:9F:72:CE:04:11:BA:0A:80:49:11:BC:FC:F4:68:E4:01:AC:6C Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 273C871E62177ED767880160FB04AEF3DCA9028D Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212384.roa Signing time: Thu 03 Jul 2025 09:29:44 +0000 ROA not before: Thu 03 Jul 2025 09:24:44 +0000 ROA not after: Thu 02 Jul 2026 09:29:44 +0000 asID: 212384 IP address blocks: 157.254.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 15:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3c:87:1e:62:17:7e:d7:67:88:01:60:fb:04:ae:f3:dc:a9:02:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jul 3 09:24:44 2025 GMT Not After : Jul 2 09:29:44 2026 GMT Subject: CN=39859F72CE0411BA0A804911BCFCF468E401AC6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:7e:01:62:6a:bf:cb:ef:ca:d7:11:89:b1: cb:64:6e:01:24:08:c1:dd:be:ee:2d:df:93:80:4d: e9:86:19:ea:0e:57:fc:a6:1e:9f:ac:50:8f:2f:f8: 1d:0f:10:3b:37:3d:ac:79:f2:d6:28:99:6e:55:78: 9f:41:a4:5d:b8:ab:9b:a7:6e:54:63:a1:45:65:5d: 1d:9b:89:7c:f9:29:6e:a3:e2:83:fb:71:05:9c:d1: dc:f9:c2:ce:9b:e0:80:73:90:e5:9c:cd:8e:42:34: 61:6b:99:25:e6:58:89:a2:64:33:0d:4f:6c:13:ce: ea:e5:ea:dc:4f:4a:5c:4c:81:b7:f5:cc:c9:54:a6: dd:29:3d:78:28:bc:9d:e4:9a:c2:1a:13:02:82:4e: 3a:69:a6:14:30:ef:3f:a4:33:b5:94:5e:11:ff:5b: 37:f9:41:f3:c1:b5:2e:fa:f4:bf:92:72:97:d9:8c: 90:2c:96:d0:30:a3:62:e3:6a:fd:07:11:21:a8:fb: fd:de:f5:fd:5c:2c:d2:20:ef:6d:e1:97:1f:15:ef: f9:50:7a:2e:5a:4a:81:7d:75:7d:51:16:7e:b6:2f: 15:4b:a2:a5:60:3d:45:ac:0a:20:29:25:0b:74:52: 36:79:9c:9e:0a:60:39:11:fb:b0:ef:c2:80:cf:c8: ad:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:85:9F:72:CE:04:11:BA:0A:80:49:11:BC:FC:F4:68:E4:01:AC:6C X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS212384.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.220.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c3:84:66:d2:87:34:60:a0:ea:2a:57:c6:48:b5:c5:25:dc: 8b:d1:33:66:35:31:2b:7e:56:50:d9:b5:bd:da:25:af:13:dc: 8a:c8:6e:68:f1:85:55:f0:24:02:58:68:ae:43:31:0a:37:dd: af:53:1f:30:1f:c6:e9:58:b3:de:8f:3f:ba:63:53:b3:84:30: ac:17:f9:65:05:41:a1:e3:54:4e:d4:6b:c5:6e:11:06:98:6f: dc:49:cd:da:b5:e8:82:5e:6b:45:1f:97:7b:1d:de:6c:44:a7: d3:a0:f7:bf:05:2b:cc:0a:ab:dd:1b:67:5f:4b:96:3e:dd:d5: 4e:18:e2:b7:6f:85:e7:e0:01:30:11:45:b4:23:04:ac:3c:6e: dd:a3:69:29:4f:67:cf:c1:0b:64:57:73:88:d9:15:7d:9a:87: ac:37:4b:f1:e3:8e:3c:71:82:99:4f:78:3b:68:d4:9e:d8:3b: 4e:ef:7f:66:6b:34:7b:ff:57:b0:20:ec:5c:59:56:34:da:37: f6:4e:1d:ea:f9:34:1e:bd:f2:4e:6c:48:61:00:d1:0f:e9:b9: 7a:e7:61:e6:01:50:eb:36:c2:50:ab:02:b7:3c:c7:08:cc:85: ad:7f:6f:eb:70:20:5d:11:6f:5d:ae:f5:ce:af:bf:54:9e:49: b7:b2:64:ab -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUJzyHHmIXftdniAFg+wSu89ypAo0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNzAzMDkyNDQ0WhcNMjYwNzAyMDkyOTQ0 WjAzMTEwLwYDVQQDEygzOTg1OUY3MkNFMDQxMUJBMEE4MDQ5MTFCQ0ZDRjQ2OEU0 MDFBQzZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyt+AWJqv8vv ytcRibHLZG4BJAjB3b7uLd+TgE3phhnqDlf8ph6frFCPL/gdDxA7Nz2sefLWKJlu VXifQaRduKubp25UY6FFZV0dm4l8+Sluo+KD+3EFnNHc+cLOm+CAc5DlnM2OQjRh a5kl5liJomQzDU9sE87q5ercT0pcTIG39czJVKbdKT14KLyd5JrCGhMCgk46aaYU MO8/pDO1lF4R/1s3+UHzwbUu+vS/knKX2YyQLJbQMKNi42r9BxEhqPv93vX9XCzS IO9t4ZcfFe/5UHouWkqBfXV9URZ+ti8VS6KlYD1FrAogKSULdFI2eZyeCmA5Efuw 78KAz8itaQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDmFn3LOBBG6CoBJEbz89Gjk AaxsMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxMjM4NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+3DANBgkqhkiG9w0BAQsFAAOC AQEAlsOEZtKHNGCg6ipXxki1xSXci9EzZjUxK35WUNm1vdolrxPcishuaPGFVfAk AlhorkMxCjfdr1MfMB/G6Viz3o8/umNTs4QwrBf5ZQVBoeNUTtRrxW4RBphv3EnN 2rXogl5rRR+Xex3ebESn06D3vwUrzAqr3RtnX0uWPt3VThjit2+F5+ABMBFFtCME rDxu3aNpKU9nz8ELZFdziNkVfZqHrDdL8eOOPHGCmU94O2jUntg7Tu9/Zms0e/9X sCDsXFlWNNo39k4d6vk0Hr3yTmxIYQDRD+m5eudh5gFQ6zbCUKsCtzzHCMyFrX9v 63AgXRFvXa71zq+/VJ5Jt7Jkqw== -----END CERTIFICATE-----Generated at Tue Aug 5 21:36:06 2025 by rpki-client