$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa File: AS152672.roa (raw, json) Hash identifier: UuPbd+KCD9+S1D1FbRbMGtzR0VL+9EEhJ/dl+uAfPOE= Subject key identifier: 24:4A:1F:D4:96:EF:B8:76:86:EF:60:2C:23:E3:A0:8F:EC:93:CE:A4 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 616C589E9F3E29116DAC61619B30AEE697EA5A31 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa Signing time: Wed 05 Feb 2025 01:23:43 +0000 ROA not before: Wed 05 Feb 2025 01:18:43 +0000 ROA not after: Wed 04 Feb 2026 01:23:43 +0000 asID: 152672 IP address blocks: 23.95.126.0/24 maxlen: 24 23.95.133.0/24 maxlen: 24 23.95.141.0/24 maxlen: 24 198.23.184.0/24 maxlen: 24 198.23.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 18:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:6c:58:9e:9f:3e:29:11:6d:ac:61:61:9b:30:ae:e6:97:ea:5a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Feb 5 01:18:43 2025 GMT Not After : Feb 4 01:23:43 2026 GMT Subject: CN=244A1FD496EFB87686EF602C23E3A08FEC93CEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:22:2d:8f:38:2a:a3:f5:84:fc:e0:72:fc:36: 00:7e:b0:65:bf:26:2c:36:5c:45:1a:7c:a6:e3:4c: 12:8c:04:e8:00:6b:fd:52:c3:d8:52:39:99:42:ae: c0:e1:45:36:62:82:c8:e9:ac:ad:78:ac:4e:65:70: e4:08:1e:0d:ea:38:0e:a8:ee:13:84:eb:a2:27:91: a2:a7:0c:84:17:1c:ce:61:f5:3f:96:ed:17:09:9b: 94:2c:2c:92:27:14:c6:3c:0a:84:18:06:35:34:fa: 4b:a7:f8:6c:1c:c5:1f:65:10:1a:97:b2:cc:ac:4f: ee:a1:ad:be:f7:0e:b3:20:02:16:7f:d2:2a:1f:0e: 7b:c4:57:a0:20:88:9f:92:5e:ad:8e:f8:d7:07:a5: ab:e8:3f:df:c9:fb:3c:7c:6d:7e:12:38:5e:eb:ce: 0c:64:db:df:3d:c2:3a:7b:06:0b:47:06:64:dc:7f: bd:fd:bc:0b:32:14:fa:2a:aa:0c:91:c5:7c:43:c8: 25:0d:b1:d6:8b:a1:19:24:64:39:9f:ab:7a:9d:81: 2c:1e:31:5e:7a:4a:37:87:2d:29:f6:44:67:49:9c: 8c:7b:a5:8a:18:a1:79:fb:7d:5e:e8:92:36:3e:e7: 4e:6c:60:0f:20:3d:fe:fd:6f:6f:1f:ec:df:ed:b7: 1a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4A:1F:D4:96:EF:B8:76:86:EF:60:2C:23:E3:A0:8F:EC:93:CE:A4 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.126.0/24 23.95.133.0/24 23.95.141.0/24 198.23.184.0/24 198.23.195.0/24 Signature Algorithm: sha256WithRSAEncryption c2:d7:95:a3:26:2f:af:89:5a:2d:c2:8a:32:fa:f7:41:1a:8c: a0:95:bf:1e:b4:a0:5d:32:26:28:8f:31:a0:29:77:ea:f6:3c: e3:4d:9f:41:0f:af:79:17:93:b5:bc:61:88:c3:3b:00:d7:13: d7:f6:01:39:ee:3e:87:f4:96:ba:16:4a:7c:51:1d:33:5a:fa: 35:4f:9d:92:d9:7f:17:fd:1e:d0:00:d5:4a:48:bc:c1:78:0a: b4:e0:64:1d:ee:3d:77:48:7c:36:4e:58:3c:45:4a:36:d8:80: d5:6b:f6:ef:41:ad:28:e9:da:f0:57:e1:02:c6:3d:30:9d:35: 3c:a8:df:fd:70:2e:89:71:4e:bc:71:b4:c8:46:16:ad:76:9a: 85:22:8c:ac:42:d7:15:0d:8b:15:10:ee:82:bd:71:de:35:55: 95:f3:a0:90:b0:b9:df:73:67:77:8a:34:e8:82:0d:d4:ff:07: 57:b1:7d:d6:d0:b3:9b:59:85:02:18:90:2d:e1:cd:36:b5:84: 4c:4c:72:fb:a6:99:ae:fd:84:09:48:6a:36:0d:76:79:d6:24: 6f:6a:69:b5:72:48:49:6b:ba:90:99:c3:05:22:0c:f5:7c:2e: 6b:26:6d:73:84:17:73:8f:00:3e:18:fd:5e:79:57:0c:28:56: 5c:18:90:01 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUYWxYnp8+KRFtrGFhmzCu5pfqWjEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMjA1MDExODQzWhcNMjYwMjA0MDEyMzQz WjAzMTEwLwYDVQQDEygyNDRBMUZENDk2RUZCODc2ODZFRjYwMkMyM0UzQTA4RkVD OTNDRUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iItjzgqo/WE /OBy/DYAfrBlvyYsNlxFGnym40wSjAToAGv9UsPYUjmZQq7A4UU2YoLI6ayteKxO ZXDkCB4N6jgOqO4ThOuiJ5GipwyEFxzOYfU/lu0XCZuULCySJxTGPAqEGAY1NPpL p/hsHMUfZRAal7LMrE/uoa2+9w6zIAIWf9IqHw57xFegIIifkl6tjvjXB6Wr6D/f yfs8fG1+Ejhe684MZNvfPcI6ewYLRwZk3H+9/bwLMhT6KqoMkcV8Q8glDbHWi6EZ JGQ5n6t6nYEsHjFeeko3hy0p9kRnSZyMe6WKGKF5+31e6JI2PudObGAPID3+/W9v H+zf7bcaFwIDAQABo4IClzCCApMwHQYDVR0OBBYEFCRKH9SW77h2hu9gLCPjoI/s k86kMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEABdffgMEABdfhQMEABdfjQMEAMYX uAMEAMYXwzANBgkqhkiG9w0BAQsFAAOCAQEAwteVoyYvr4laLcKKMvr3QRqMoJW/ HrSgXTImKI8xoCl36vY8402fQQ+veReTtbxhiMM7ANcT1/YBOe4+h/SWuhZKfFEd M1r6NU+dktl/F/0e0ADVSki8wXgKtOBkHe49d0h8Nk5YPEVKNtiA1Wv270GtKOna 8FfhAsY9MJ01PKjf/XAuiXFOvHG0yEYWrXaahSKMrELXFQ2LFRDugr1x3jVVlfOg kLC533Nnd4o06IIN1P8HV7F91tCzm1mFAhiQLeHNNrWETExy+6aZrv2ECUhqNg12 edYkb2pptXJISWu6kJnDBSIM9XwuayZtc4QXc48APhj9XnlXDChWXBiQAQ== -----END CERTIFICATE-----Generated at Sat Apr 5 06:26:34 2025 by rpki-client