$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214967.roa File: AS214967.roa (raw, json) Hash identifier: PKz2q3H6IRF92yu7j6InPcjPPp+bwJ16UnmqoQhxrRo= Subject key identifier: C6:66:B8:F1:69:C5:8B:35:BB:7C:24:6F:23:9B:C1:2D:35:88:19:83 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 072830AF09CAC64D6E1488BAC15CD8BDB384C72B Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214967.roa Signing time: Thu 20 Jun 2024 11:22:03 +0000 ROA not before: Thu 20 Jun 2024 11:17:03 +0000 ROA not after: Thu 19 Jun 2025 11:22:03 +0000 asID: 214967 IP address blocks: 23.95.123.0/24 maxlen: 24 23.95.159.0/24 maxlen: 24 198.23.218.0/24 maxlen: 24 198.23.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jul 2024 16:19:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:28:30:af:09:ca:c6:4d:6e:14:88:ba:c1:5c:d8:bd:b3:84:c7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jun 20 11:17:03 2024 GMT Not After : Jun 19 11:22:03 2025 GMT Subject: CN=C666B8F169C58B35BB7C246F239BC12D35881983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:bb:bd:ed:04:a2:a0:31:cc:84:da:98:bf: 35:ad:21:26:51:6a:1b:dc:fd:c1:a8:a8:5b:8c:ab: d3:23:d1:e3:9d:cb:2d:21:b7:40:70:b9:da:cc:ff: 21:18:76:bc:da:75:42:60:20:ba:f4:ee:61:05:dd: b8:5a:f0:30:77:5f:aa:e2:cc:0d:95:e2:3e:95:df: 53:d6:6e:84:38:cb:c6:14:a3:59:13:84:d4:72:df: 59:a4:c9:b1:8b:6d:a5:67:e3:83:41:b7:bd:3d:94: d1:cb:ff:65:4b:b3:99:f9:63:84:7f:53:e0:c4:df: 04:b9:0d:71:c4:e6:78:c4:c9:1a:0e:c7:71:49:1a: a4:fc:b3:23:ee:3f:1f:e6:d7:37:17:5a:c9:0f:6d: e8:eb:95:4e:5f:33:70:2e:41:ba:be:76:5f:70:e5: f3:9b:9a:69:84:da:f4:0e:5d:70:f0:80:22:dc:fa: 61:8f:25:a0:c4:e6:4e:26:ef:76:fc:39:f9:e7:f9: c7:46:ff:91:19:38:43:b2:de:ad:8a:df:7b:4e:b3: 82:ae:6d:1f:7b:15:ba:87:1d:b9:ca:9f:66:1f:b4: ea:85:43:bc:d8:95:33:99:4c:6c:c1:09:01:74:93: 20:ee:e7:b2:00:f4:7a:e1:d5:d6:bf:4b:f4:9b:63: 56:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:66:B8:F1:69:C5:8B:35:BB:7C:24:6F:23:9B:C1:2D:35:88:19:83 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS214967.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.123.0/24 23.95.159.0/24 198.23.218.0/24 198.23.222.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:83:7a:9c:5d:45:db:3e:45:44:26:9d:a6:e4:cd:e7:2c:d4: 05:b9:db:fb:f4:e1:da:32:1e:1b:37:e9:53:14:bc:74:54:21: 6f:03:8f:09:56:21:64:63:64:e2:1a:5f:05:14:ea:90:c5:89: d9:bc:59:6e:25:66:55:9b:c0:f1:1d:aa:7d:27:16:ca:2e:06: ea:ab:43:e9:08:66:34:80:4b:58:0f:fc:2c:6c:38:04:32:8b: 29:f9:60:df:92:0f:f0:ae:52:9e:3e:53:2b:66:4b:dd:e6:bd: 6f:50:b1:ab:67:43:51:bf:e8:14:5a:e8:88:c0:82:49:f1:b0: c3:a7:8f:5e:4e:ef:f8:2b:91:1e:7b:eb:be:1d:c5:06:b2:4d: a8:fc:8f:e4:98:6e:1d:c7:70:88:38:ee:88:ad:0e:71:7c:c4: 71:33:13:4d:3a:35:d9:a6:95:92:a9:ed:3c:a9:2b:c2:1f:69: 33:61:0b:7c:23:35:88:92:aa:43:a8:48:58:fe:bf:44:82:32: 6d:14:c5:b7:96:c8:2b:a2:9f:0b:0b:a2:23:19:17:19:66:d0: ba:76:1d:25:3b:67:cf:07:6d:1a:80:15:fb:e6:e6:d4:f8:86: ed:c4:d5:dd:7b:f9:4f:58:9b:41:14:b4:58:0a:6f:03:af:97: 24:4f:87:31 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUBygwrwnKxk1uFIi6wVzYvbOExyswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwNjIwMTExNzAzWhcNMjUwNjE5MTEyMjAz WjAzMTEwLwYDVQQDEyhDNjY2QjhGMTY5QzU4QjM1QkI3QzI0NkYyMzlCQzEyRDM1 ODgxOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvm7ve0EoqAx zITamL81rSEmUWob3P3BqKhbjKvTI9HjncstIbdAcLnazP8hGHa82nVCYCC69O5h Bd24WvAwd1+q4swNleI+ld9T1m6EOMvGFKNZE4TUct9ZpMmxi22lZ+ODQbe9PZTR y/9lS7OZ+WOEf1PgxN8EuQ1xxOZ4xMkaDsdxSRqk/LMj7j8f5tc3F1rJD23o65VO XzNwLkG6vnZfcOXzm5pphNr0Dl1w8IAi3PphjyWgxOZOJu92/Dn55/nHRv+RGThD st6tit97TrOCrm0fexW6hx25yp9mH7TqhUO82JUzmUxswQkBdJMg7ueyAPR64dXW v0v0m2NWTwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFMZmuPFpxYs1u3wkbyObwS01 iBmDMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIxNDk2Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEABdfewMEABdfnwMEAMYX2gMEAMYX 3jANBgkqhkiG9w0BAQsFAAOCAQEAPoN6nF1F2z5FRCadpuTN5yzUBbnb+/Th2jIe GzfpUxS8dFQhbwOPCVYhZGNk4hpfBRTqkMWJ2bxZbiVmVZvA8R2qfScWyi4G6qtD 6QhmNIBLWA/8LGw4BDKLKflg35IP8K5Snj5TK2ZL3ea9b1Cxq2dDUb/oFFroiMCC SfGww6ePXk7v+CuRHnvrvh3FBrJNqPyP5JhuHcdwiDjuiK0OcXzEcTMTTTo12aaV kqntPKkrwh9pM2ELfCM1iJKqQ6hIWP6/RIIybRTFt5bIK6KfCwuiIxkXGWbQunYd JTtnzwdtGoAV++bm1PiG7cTV3Xv5T1ibQRS0WApvA6+XJE+HMQ== -----END CERTIFICATE-----Generated at Fri Jul 5 16:41:42 2024 by rpki-client on console-ams.rpki-client.org