$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152868.roa File: AS152868.roa (raw, json) Hash identifier: 9D/vD3KCHBo6LY0X9gvhgSLVNKspVpVUiFurXrVFjDM= Subject key identifier: 5E:1E:E9:54:76:E4:9C:3A:04:F0:C7:0E:E5:8E:2D:FC:03:B7:6F:77 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2F925431B14C4EC256031A358B408CB29FED1219 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152868.roa Signing time: Tue 01 Jul 2025 14:32:54 +0000 ROA not before: Tue 01 Jul 2025 14:27:54 +0000 ROA not after: Tue 30 Jun 2026 14:32:54 +0000 asID: 152868 IP address blocks: 67.210.121.0/24 maxlen: 24 67.215.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Jul 2025 02:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:92:54:31:b1:4c:4e:c2:56:03:1a:35:8b:40:8c:b2:9f:ed:12:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jul 1 14:27:54 2025 GMT Not After : Jun 30 14:32:54 2026 GMT Subject: CN=5E1EE95476E49C3A04F0C70EE58E2DFC03B76F77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:85:e2:26:75:99:7c:a7:59:af:f4:52:da: 84:f2:1e:56:5f:ff:90:30:2e:de:a8:17:ca:bf:5d: ca:9e:23:11:0e:83:c8:09:4e:da:16:fa:ce:7a:74: 85:c8:2d:ec:5e:66:f8:bd:90:48:05:cc:e6:ab:c4: d4:61:b5:4f:b7:be:92:d7:fc:c4:c5:c5:d3:8b:02: 06:de:ce:82:ac:29:55:ae:48:e7:98:22:c3:a2:58: f7:96:54:cb:8f:d7:5a:9a:db:07:29:53:f2:9c:d7: be:38:e4:34:06:47:a9:80:07:36:45:a9:f8:32:23: 18:67:fe:3c:6b:3b:d0:ec:a9:03:05:75:6c:20:03: 9e:be:3e:11:86:01:18:39:85:b9:29:9f:7f:75:4a: d6:86:17:c7:f8:0f:33:9c:ea:f1:69:f1:bc:82:ab: 13:60:cb:ec:b6:c8:49:c2:df:25:2b:df:7d:0e:a8: fc:c8:fb:10:fa:0a:9f:b8:ec:d0:f0:f7:c8:bb:0b: 06:61:be:3d:73:3e:0b:ec:5d:4f:b9:8e:35:01:b4: 85:7f:d0:9a:22:f3:d4:ca:95:f0:20:4e:04:dc:47: b9:b8:74:59:79:e5:03:11:f4:41:81:f9:71:2d:33: 70:7c:50:a3:6c:b8:c8:e2:e8:a0:84:70:50:5c:53: 28:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1E:E9:54:76:E4:9C:3A:04:F0:C7:0E:E5:8E:2D:FC:03:B7:6F:77 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS152868.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.121.0/24 67.215.254.0/24 Signature Algorithm: sha256WithRSAEncryption 13:c3:c4:ab:f3:ba:7c:ff:a0:71:f2:fd:47:80:be:39:f1:ff: d2:2c:78:7e:dd:9a:04:78:9a:04:fe:22:6d:29:1e:5a:00:66: 89:ee:6e:86:53:fd:0e:68:14:27:86:f8:d8:45:1a:a7:76:48: 5d:94:4a:8a:db:a3:db:57:e9:dc:7b:f2:1e:b4:35:4b:61:5e: 40:e8:e3:d1:74:01:39:03:4c:d6:b3:37:e2:be:73:ba:0c:2f: b7:1f:a5:39:af:b1:10:d0:07:b3:ca:fb:03:6f:65:ee:b2:d0: a4:33:c5:79:86:c3:93:cf:91:aa:c6:c1:8e:b9:2e:a5:0f:88: 28:2e:f4:e2:a7:01:6c:de:a9:7a:97:c4:4d:ec:96:87:cd:91: f6:fd:00:6e:c9:19:b0:26:bf:dc:bd:1d:6f:64:76:a5:5f:0e: d2:9d:16:c0:26:ee:4d:30:cd:4a:da:bd:64:85:dd:cc:ee:ad: 74:b2:fa:93:76:bd:2c:28:3d:27:da:16:87:db:a7:0d:f2:90: 52:00:95:19:14:e0:96:66:20:99:bd:60:08:48:80:08:88:b0: 95:0a:9a:9e:48:93:32:f8:ff:f6:dc:de:38:6d:4c:86:e4:6f: ab:14:b0:7c:08:92:28:94:54:86:b5:c0:b3:2e:6e:2e:e8:0a: 3e:9f:1c:5b -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUL5JUMbFMTsJWAxo1i0CMsp/tEhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNzAxMTQyNzU0WhcNMjYwNjMwMTQzMjU0 WjAzMTEwLwYDVQQDEyg1RTFFRTk1NDc2RTQ5QzNBMDRGMEM3MEVFNThFMkRGQzAz Qjc2Rjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNaF4iZ1mXyn Wa/0UtqE8h5WX/+QMC7eqBfKv13KniMRDoPICU7aFvrOenSFyC3sXmb4vZBIBczm q8TUYbVPt76S1/zExcXTiwIG3s6CrClVrkjnmCLDolj3llTLj9damtsHKVPynNe+ OOQ0BkepgAc2Ran4MiMYZ/48azvQ7KkDBXVsIAOevj4RhgEYOYW5KZ9/dUrWhhfH +A8znOrxafG8gqsTYMvstshJwt8lK999Dqj8yPsQ+gqfuOzQ8PfIuwsGYb49cz4L 7F1PuY41AbSFf9CaIvPUypXwIE4E3Ee5uHRZeeUDEfRBgflxLTNwfFCjbLjI4uig hHBQXFMoUQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFF4e6VR25Jw6BPDHDuWOLfwD t293MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzE1Mjg2OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAEPSeQMEAEPX/jANBgkqhkiG9w0B AQsFAAOCAQEAE8PEq/O6fP+gcfL9R4C+OfH/0ix4ft2aBHiaBP4ibSkeWgBmie5u hlP9DmgUJ4b42EUap3ZIXZRKituj21fp3HvyHrQ1S2FeQOjj0XQBOQNM1rM34r5z ugwvtx+lOa+xENAHs8r7A29l7rLQpDPFeYbDk8+RqsbBjrkupQ+IKC704qcBbN6p epfETeyWh82R9v0AbskZsCa/3L0db2R2pV8O0p0WwCbuTTDNStq9ZIXdzO6tdLL6 k3a9LCg9J9oWh9unDfKQUgCVGRTglmYgmb1gCEiACIiwlQqankiTMvj/9tzeOG1M huRvqxSwfAiSKJRUhrXAsy5uLugKPp8cWw== -----END CERTIFICATE-----Generated at Sat Jul 5 04:29:43 2025 by rpki-client