$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa File: AS23273.roa (raw, json) Hash identifier: +RXUnIvyTOoPqDr22KVBeg3suU7UB9ylyTuZO106rkM= Subject key identifier: 37:CE:15:13:B5:E5:12:76:43:FF:48:8E:33:3B:FC:77:DA:CE:7D:22 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 5ED8D8E6623FF506FEB12FC2E002C45C16BEE657 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa Signing time: Thu 03 Jul 2025 15:24:07 +0000 ROA not before: Thu 03 Jul 2025 15:19:07 +0000 ROA not after: Thu 02 Jul 2026 15:24:07 +0000 asID: 23273 IP address blocks: 69.12.66.0/24 maxlen: 24 172.96.180.0/22 maxlen: 24 192.161.49.0/24 maxlen: 24 204.44.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Jul 2025 10:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:d8:d8:e6:62:3f:f5:06:fe:b1:2f:c2:e0:02:c4:5c:16:be:e6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 3 15:19:07 2025 GMT Not After : Jul 2 15:24:07 2026 GMT Subject: CN=37CE1513B5E5127643FF488E333BFC77DACE7D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:48:69:d1:33:a6:30:4c:a9:96:a6:d9:4e:b7: af:47:40:f8:39:a1:63:84:8f:4d:e3:94:d7:ec:6b: 45:31:b0:16:80:f3:5c:b6:0b:6e:8a:f6:28:3a:9c: cd:f4:5e:00:c9:53:c1:ef:d5:23:8f:6f:da:f3:ab: 78:96:da:4e:a6:35:44:df:60:34:2f:bb:03:15:55: b9:59:a9:77:1d:7c:51:d9:72:4f:c6:f8:f6:97:40: bf:01:7f:d2:90:a6:cf:21:d7:04:bc:16:7e:a9:b7: 74:4a:83:dd:ee:a2:f8:fb:a9:a3:ce:a3:55:2f:f7: 22:c5:cb:ae:7d:9c:c7:70:19:df:df:4c:07:bc:8f: 4a:64:95:59:83:6f:ca:51:c1:c2:ba:04:01:49:1a: fb:47:dc:e4:ac:b0:b5:9a:84:f4:99:ed:30:55:04: 9c:e5:37:4a:f7:5f:c2:76:81:95:0b:db:6e:f8:05: da:7d:9a:ce:d5:a6:ae:2d:94:6d:fa:28:f6:6e:99: a8:e4:c0:9f:b0:5d:7c:43:f3:0f:d4:3d:b5:8b:6f: 3b:d1:89:97:6a:03:46:f1:eb:55:eb:6b:62:1c:97: 6a:8a:ae:7a:a2:a4:0e:cb:62:03:9e:fe:62:67:50: 32:f1:02:83:c1:41:ff:26:c4:03:b4:87:fa:a3:61: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CE:15:13:B5:E5:12:76:43:FF:48:8E:33:3B:FC:77:DA:CE:7D:22 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.12.66.0/24 172.96.180.0/22 192.161.49.0/24 204.44.192.0/20 Signature Algorithm: sha256WithRSAEncryption 36:ae:77:6a:4c:23:ef:a9:8c:ef:10:d7:09:b1:bc:96:36:b1: aa:12:58:16:83:91:97:7a:56:62:6c:8f:6b:e6:05:bd:45:fa: b1:38:14:47:b7:cd:b8:a2:bc:fb:a3:ab:30:0f:c6:af:bf:c1: cc:da:4f:1c:5c:be:b7:89:c9:97:8a:33:37:aa:86:6f:e1:2b: 15:b8:01:c2:1e:c9:f2:7d:ac:58:f6:f7:fd:54:7c:90:30:b7: 28:aa:5d:5b:e6:ee:a6:b3:ff:ce:09:37:17:f1:ce:df:e2:ff: 40:e5:67:43:7a:b3:48:22:fc:d9:88:5a:f2:cd:05:6b:00:6c: 19:19:6c:c2:e7:90:09:f6:4f:7e:ed:a6:bb:33:19:e4:20:ac: 57:cf:b5:49:80:81:50:50:3a:e0:5c:a5:68:09:f3:c6:7a:65: e7:47:b0:65:fa:fc:7c:75:16:37:f5:89:db:2f:b1:f8:5b:3b: 3c:57:3d:e6:da:d5:89:dc:70:54:31:73:a3:85:3a:ea:56:4a: 83:fc:e5:57:59:f9:b8:d3:60:04:73:05:f3:e8:82:6f:34:d2: 2f:a5:88:f1:f2:08:51:45:e8:df:fe:a8:62:09:65:34:fc:39: 5e:fe:3b:9e:18:2f:d8:52:ef:71:0e:1e:4c:5a:3d:84:aa:3d: 7b:12:79:f1 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUXtjY5mI/9Qb+sS/C4ALEXBa+5lcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzAzMTUxOTA3WhcNMjYwNzAyMTUyNDA3 WjAzMTEwLwYDVQQDEygzN0NFMTUxM0I1RTUxMjc2NDNGRjQ4OEUzMzNCRkM3N0RB Q0U3RDIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikhp0TOmMEyp lqbZTrevR0D4OaFjhI9N45TX7GtFMbAWgPNctgtuivYoOpzN9F4AyVPB79Ujj2/a 86t4ltpOpjVE32A0L7sDFVW5Wal3HXxR2XJPxvj2l0C/AX/SkKbPIdcEvBZ+qbd0 SoPd7qL4+6mjzqNVL/cixcuufZzHcBnf30wHvI9KZJVZg2/KUcHCugQBSRr7R9zk rLC1moT0me0wVQSc5TdK91/CdoGVC9tu+AXafZrO1aauLZRt+ij2bpmo5MCfsF18 Q/MP1D21i2870YmXagNG8etV62tiHJdqiq56oqQOy2IDnv5iZ1Ay8QKDwUH/JsQD tIf6o2GUuQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFDfOFRO15RJ2Q/9IjjM7/Hfa zn0iMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIzMjczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQARQxCAwQCrGC0AwQAwKExAwQEzCzA MA0GCSqGSIb3DQEBCwUAA4IBAQA2rndqTCPvqYzvENcJsbyWNrGqElgWg5GXelZi bI9r5gW9RfqxOBRHt824orz7o6swD8avv8HM2k8cXL63icmXijM3qoZv4SsVuAHC HsnyfaxY9vf9VHyQMLcoql1b5u6ms//OCTcX8c7f4v9A5WdDerNIIvzZiFryzQVr AGwZGWzC55AJ9k9+7aa7MxnkIKxXz7VJgIFQUDrgXKVoCfPGemXnR7Bl+vx8dRY3 9YnbL7H4Wzs8Vz3m2tWJ3HBUMXOjhTrqVkqD/OVXWfm402AEcwXz6IJvNNIvpYjx 8ghRRejf/qhiCWU0/Dle/jueGC/YUu9xDh5MWj2Eqj17Ennx -----END CERTIFICATE-----Generated at Sat Jul 26 02:42:07 2025 by rpki-client