$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa File: AS152672.roa (raw, json) Hash identifier: F4WcafSaXeR0o+Z4gk7P3nnG3N3nhrNYkDmp/wcL8aQ= Subject key identifier: F1:F3:FE:D3:20:3C:A0:75:F5:DC:6B:C1:AE:89:2A:4E:23:65:3E:30 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 7F8D29B9844CF99388D68EA1C21027DAE0881A36 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa Signing time: Mon 30 Jun 2025 17:10:53 +0000 ROA not before: Mon 30 Jun 2025 17:05:53 +0000 ROA not after: Mon 29 Jun 2026 17:10:53 +0000 asID: 152672 IP address blocks: 23.95.126.0/24 maxlen: 24 23.95.133.0/24 maxlen: 24 23.95.141.0/24 maxlen: 24 64.50.181.0/24 maxlen: 24 198.23.184.0/24 maxlen: 24 198.23.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 10:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:8d:29:b9:84:4c:f9:93:88:d6:8e:a1:c2:10:27:da:e0:88:1a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 30 17:05:53 2025 GMT Not After : Jun 29 17:10:53 2026 GMT Subject: CN=F1F3FED3203CA075F5DC6BC1AE892A4E23653E30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:9e:39:c5:4f:a6:be:87:b4:04:b0:45:91: 11:d7:21:1b:e7:bc:fc:01:84:5b:87:e3:ed:1f:78: 9d:3e:88:fc:a4:a7:c5:36:26:9f:ac:d3:a6:c7:ac: d8:2e:64:d9:e9:0d:7a:f6:19:fe:3e:21:c9:21:27: 42:16:a0:4d:ee:0c:a6:05:4f:30:d9:07:97:5f:15: 1a:34:ea:ef:65:2f:34:33:75:a8:be:a4:4a:5b:8c: 4e:9b:97:3a:20:19:69:37:b4:f8:c9:b2:f1:07:21: e5:2c:6e:fe:c2:9d:fb:e0:f5:68:23:d3:b3:e3:29: c3:65:e2:82:45:96:72:d5:37:a6:ad:a1:33:c0:45: af:8f:a3:48:70:c2:b5:d9:b6:97:c1:5f:b6:56:86: 9e:8e:ab:1c:d5:92:17:78:aa:99:9e:5e:ae:73:3f: 40:4a:08:da:66:5a:83:3b:44:36:cb:2b:f5:9d:21: 1c:0f:eb:09:ca:18:85:4b:85:a1:21:e1:f4:d9:b8: cc:90:95:63:b7:07:d5:df:5f:85:f2:a5:46:a3:5c: fa:86:85:e1:7a:e3:5c:7b:98:b2:25:f6:3e:80:68: 6e:f9:8e:4f:0c:21:a0:29:81:d3:3c:05:b8:21:00: 43:d4:d5:06:2a:0d:48:b0:d7:10:72:d5:2d:0b:34: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F3:FE:D3:20:3C:A0:75:F5:DC:6B:C1:AE:89:2A:4E:23:65:3E:30 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.126.0/24 23.95.133.0/24 23.95.141.0/24 64.50.181.0/24 198.23.184.0/24 198.23.195.0/24 Signature Algorithm: sha256WithRSAEncryption 80:d3:53:aa:8a:b1:ec:cd:49:d9:88:31:b1:c9:3a:f1:13:3a: f8:fc:49:6b:32:3b:87:e3:fe:13:94:76:a2:5b:83:78:a7:2f: a4:9e:ab:a8:a9:93:33:dc:90:2a:27:6e:04:4b:c4:99:0d:22: de:39:e8:8e:dc:b8:28:65:b2:dc:64:50:d7:c0:3e:60:a0:7d: 95:a1:1e:5a:bc:aa:0a:94:a1:b0:02:26:d2:0c:a1:42:3b:a1: 4c:e9:10:b5:52:e5:8b:62:7c:06:6c:76:9d:fc:c9:3c:5c:c9: b9:30:01:d4:7c:01:fd:67:ef:00:1d:d4:1a:9a:9e:73:ca:13: cd:5a:54:a1:53:73:10:f6:cc:c2:06:97:b2:49:87:4d:6f:b3: 61:93:86:cc:98:01:43:5b:80:5a:ad:47:5b:73:9f:88:af:47: 1b:42:e8:cd:7a:fb:2c:28:4b:84:dc:8c:97:60:44:27:56:02: 9e:a5:46:40:ff:ee:e9:6f:fa:19:0c:f9:9c:91:7a:b3:81:f5: 79:d7:5c:f2:a6:83:34:20:fb:ec:52:1f:2d:5f:55:da:f5:29: 47:fe:e6:c8:c5:ff:20:51:64:f2:3e:ff:59:d4:d5:8c:cf:eb: c2:c6:f6:f2:e9:58:6d:f0:96:e0:49:72:7c:94:ac:eb:d0:75: bc:ed:49:19 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUf40puYRM+ZOI1o6hwhAn2uCIGjYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNjMwMTcwNTUzWhcNMjYwNjI5MTcxMDUz WjAzMTEwLwYDVQQDEyhGMUYzRkVEMzIwM0NBMDc1RjVEQzZCQzFBRTg5MkE0RTIz NjUzRTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlyeOcVPpr6H tASwRZER1yEb57z8AYRbh+PtH3idPoj8pKfFNiafrNOmx6zYLmTZ6Q169hn+PiHJ ISdCFqBN7gymBU8w2QeXXxUaNOrvZS80M3WovqRKW4xOm5c6IBlpN7T4ybLxByHl LG7+wp374PVoI9Oz4ynDZeKCRZZy1TemraEzwEWvj6NIcMK12baXwV+2Voaejqsc 1ZIXeKqZnl6ucz9ASgjaZlqDO0Q2yyv1nSEcD+sJyhiFS4WhIeH02bjMkJVjtwfV 31+F8qVGo1z6hoXheuNce5iyJfY+gGhu+Y5PDCGgKYHTPAW4IQBD1NUGKg1IsNcQ ctUtCzQ8qwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFPHz/tMgPKB19dxrwa6JKk4j ZT4wMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9 BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEABdffgMEABdfhQMEABdfjQMEAEAy tQMEAMYXuAMEAMYXwzANBgkqhkiG9w0BAQsFAAOCAQEAgNNTqoqx7M1J2Ygxsck6 8RM6+PxJazI7h+P+E5R2oluDeKcvpJ6rqKmTM9yQKiduBEvEmQ0i3jnojty4KGWy 3GRQ18A+YKB9laEeWryqCpShsAIm0gyhQjuhTOkQtVLli2J8Bmx2nfzJPFzJuTAB 1HwB/WfvAB3UGpqec8oTzVpUoVNzEPbMwgaXskmHTW+zYZOGzJgBQ1uAWq1HW3Of iK9HG0LozXr7LChLhNyMl2BEJ1YCnqVGQP/u6W/6GQz5nJF6s4H1eddc8qaDNCD7 7FIfLV9V2vUpR/7myMX/IFFk8j7/WdTVjM/rwsb28ulYbfCW4ElyfJSs69B1vO1J GQ== -----END CERTIFICATE-----Generated at Sat Jul 26 02:43:02 2025 by rpki-client