$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33652.roa File: AS33652.roa (raw, json) Hash identifier: 1ld7ijaZdV6lmR3cmmvUT/b4bf3JsjiZf40N6EFx49Y= Subject key identifier: 73:80:14:4B:48:3D:31:CB:21:EB:CB:71:E7:DA:3B:E6:82:A4:40:40 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2E059A0FD82089F0EEF8E93D3E2967BBAC4052ED Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33652.roa Signing time: Wed 22 Jan 2025 23:28:26 +0000 ROA not before: Wed 22 Jan 2025 23:23:26 +0000 ROA not after: Wed 21 Jan 2026 23:28:26 +0000 asID: 33652 IP address blocks: 64.50.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 08:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:05:9a:0f:d8:20:89:f0:ee:f8:e9:3d:3e:29:67:bb:ac:40:52:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Jan 22 23:23:26 2025 GMT Not After : Jan 21 23:28:26 2026 GMT Subject: CN=7380144B483D31CB21EBCB71E7DA3BE682A44040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:78:85:17:80:57:af:5c:02:b4:e6:c3:28: e2:d7:60:eb:17:21:c3:e3:9b:66:b5:12:9b:f1:c7: 22:f8:1b:1e:8c:d1:8c:29:b1:ef:9c:ea:45:af:6e: ff:e7:1e:2b:6f:43:de:41:02:01:dd:20:7e:55:2f: 3e:49:44:51:d8:db:62:c5:70:6e:2f:4c:50:45:f2: f3:9b:11:6e:e5:bd:82:b0:b5:ac:2b:8c:41:8e:eb: 06:9c:11:86:fb:01:6a:b8:6d:e8:97:59:4b:72:e4: be:d7:6d:bd:77:b0:97:59:35:55:5a:ff:e8:46:8d: 53:27:90:93:97:af:3e:a1:af:be:a6:89:48:c2:84: 5c:f0:cb:bb:ef:e9:43:8e:c1:d2:f3:3e:4b:bd:a0: be:50:fb:f8:14:5d:ca:95:f6:cf:e6:9d:01:89:10: df:70:6b:d4:9a:3c:45:fd:16:c5:5f:69:b4:f3:48: e6:1d:85:63:bf:e2:06:46:5c:99:e3:5d:47:03:e1: ec:80:80:e5:60:b3:e5:0c:b9:05:69:cd:a8:e9:f4: bd:5a:5a:46:f6:03:2e:46:12:b8:e8:0f:d2:b0:e8: f8:7b:90:31:7d:0e:6a:9c:90:d0:2a:99:a3:99:4e: 73:69:79:93:ed:58:92:63:96:fc:1b:42:25:93:75: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:80:14:4B:48:3D:31:CB:21:EB:CB:71:E7:DA:3B:E6:82:A4:40:40 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS33652.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.50.168.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:66:b1:b0:f2:bd:cc:60:b0:dc:44:13:e9:43:4a:b3:72:15: 4c:8d:67:f0:33:7b:1d:73:95:8a:1e:b3:46:c9:e7:c4:84:4b: 2c:af:62:81:1e:c9:b9:67:b9:75:55:9b:49:a8:a0:99:10:e4: a4:64:d1:7f:f1:c1:eb:77:48:0e:5d:03:3c:ad:ae:20:38:61: 6d:19:99:17:91:e7:84:b2:6c:1f:cb:0c:11:bf:1f:1e:c0:c4: 3c:04:79:10:b4:41:2d:27:0c:04:ed:63:8e:68:4a:08:d0:4b: 1f:8b:76:f8:fa:f7:dc:62:ea:b2:8c:1a:5b:dd:6c:2d:f1:49: 6f:fd:a6:87:10:71:c7:d2:ff:b5:ad:17:91:4c:31:2d:7b:65: a1:b3:68:a8:df:9b:53:f7:47:37:79:9b:88:47:44:c9:fd:a0: 2d:11:ea:d9:5e:2b:9e:04:f6:60:93:01:d0:3e:6f:70:84:5a: 6b:c6:c7:f2:49:35:5b:7f:eb:d5:43:0c:8f:6f:41:15:71:dd: ec:3b:e4:87:c5:38:fe:b3:9c:fd:86:5b:13:3e:2b:e6:13:82: 7f:7d:3b:9c:b3:02:61:4c:cc:a4:12:06:3e:3d:c2:55:94:bb: aa:3c:a9:53:91:67:c9:e2:48:ce:d9:14:1f:0a:e9:1e:0e:05: 9e:c3:f2:f9 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIULgWaD9ggifDu+Ok9Pilnu6xAUu0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMTIyMjMyMzI2WhcNMjYwMTIxMjMyODI2 WjAzMTEwLwYDVQQDEyg3MzgwMTQ0QjQ4M0QzMUNCMjFFQkNCNzFFN0RBM0JFNjgy QTQ0MDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyh4hReAV69c ArTmwyji12DrFyHD45tmtRKb8cci+BsejNGMKbHvnOpFr27/5x4rb0PeQQIB3SB+ VS8+SURR2NtixXBuL0xQRfLzmxFu5b2CsLWsK4xBjusGnBGG+wFquG3ol1lLcuS+ 1229d7CXWTVVWv/oRo1TJ5CTl68+oa++polIwoRc8Mu77+lDjsHS8z5LvaC+UPv4 FF3KlfbP5p0BiRDfcGvUmjxF/RbFX2m080jmHYVjv+IGRlyZ411HA+HsgIDlYLPl DLkFac2o6fS9WlpG9gMuRhK46A/SsOj4e5AxfQ5qnJDQKpmjmU5zaXmT7ViSY5b8 G0Ilk3XfYQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHOAFEtIPTHLIevLcefaO+aC pEBAMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzMzNjUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQDKoMA0GCSqGSIb3DQEBCwUAA4IB AQBaZrGw8r3MYLDcRBPpQ0qzchVMjWfwM3sdc5WKHrNGyefEhEssr2KBHsm5Z7l1 VZtJqKCZEOSkZNF/8cHrd0gOXQM8ra4gOGFtGZkXkeeEsmwfywwRvx8ewMQ8BHkQ tEEtJwwE7WOOaEoI0Esfi3b4+vfcYuqyjBpb3Wwt8Ulv/aaHEHHH0v+1rReRTDEt e2Whs2io35tT90c3eZuIR0TJ/aAtEerZXiueBPZgkwHQPm9whFprxsfySTVbf+vV QwyPb0EVcd3sO+SHxTj+s5z9hlsTPivmE4J/fTucswJhTMykEgY+PcJVlLuqPKlT kWfJ4kjO2RQfCukeDgWew/L5 -----END CERTIFICATE-----Generated at Sun Feb 16 20:21:27 2025 by rpki-client