$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa File: AS23352.roa (raw, json) Hash identifier: ZvopAI8ECoEjHzxa6BqkyEOjYA3X/bZipvGxt72xryQ= Subject key identifier: 39:59:39:21:34:E4:83:F9:41:77:17:34:B2:94:F3:70:B8:4B:D8:79 Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 56B4C298C967F4FC6B78C1DFE66F3C5C812F3E80 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa Signing time: Fri 15 Nov 2024 18:38:32 +0000 ROA not before: Fri 15 Nov 2024 18:33:32 +0000 ROA not after: Fri 14 Nov 2025 18:38:32 +0000 asID: 23352 IP address blocks: 64.202.113.0/24 maxlen: 24 66.225.220.0/23 maxlen: 24 66.225.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 05:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:b4:c2:98:c9:67:f4:fc:6b:78:c1:df:e6:6f:3c:5c:81:2f:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: Nov 15 18:33:32 2024 GMT Not After : Nov 14 18:38:32 2025 GMT Subject: CN=3959392134E483F941771734B294F370B84BD879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:54:bd:ea:a7:b4:1f:19:e9:d6:e5:89:bf: 9b:af:c8:b2:5a:c1:f8:1e:9a:50:5b:a8:d3:9c:df: fa:90:b8:79:3c:e0:b2:d8:bf:ef:9c:50:ea:52:3d: bf:96:6a:d2:51:62:04:da:5d:6d:7f:62:5d:6c:a7: 94:8c:5b:e4:50:81:7f:1e:bd:23:22:ef:26:35:b8: d7:fd:46:8d:75:db:4b:94:2b:d2:16:8e:7c:be:cc: 46:4c:00:d3:62:47:63:4e:9b:43:e0:f1:a3:a7:e4: e6:f8:76:9f:e2:c8:13:ed:b5:41:c7:6f:2c:7e:8a: c2:53:e3:fb:d6:90:31:70:b4:e1:6f:21:56:e0:18: 9e:8d:21:7f:35:35:92:80:f9:18:0f:30:5c:d7:d8: 8f:91:28:a3:21:70:5e:5d:59:f1:d1:7b:5d:70:71: 16:47:f6:55:00:35:b5:c8:4c:49:40:d5:f6:92:e5: 76:7e:0e:02:ac:dc:6d:d8:2e:7b:cb:98:9b:01:e8: 80:ff:d4:a5:7a:56:fe:b7:83:68:b2:60:fe:0c:fa: 78:a9:73:5b:10:ef:28:8f:e5:35:e5:bf:e6:67:50: 04:ad:37:13:27:98:53:28:80:0c:e8:56:98:b7:72: e5:7a:82:27:c9:cc:2e:52:59:69:af:85:42:6e:ff: 6d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:59:39:21:34:E4:83:F9:41:77:17:34:B2:94:F3:70:B8:4B:D8:79 X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.113.0/24 66.225.220.0/23 Signature Algorithm: sha256WithRSAEncryption 40:c2:a9:0d:bd:7a:3b:dd:97:0e:51:37:04:40:ac:ef:2b:15: 66:4d:55:52:78:17:23:48:ba:98:95:24:61:f1:cf:21:9f:b0: 3d:87:f9:c8:5b:6d:77:d8:a1:93:16:33:42:35:8a:9b:30:23: 2b:04:9b:95:68:85:9a:72:f2:11:97:4d:cc:1a:62:41:e2:62: 27:74:50:5e:83:59:d1:9e:dc:3c:b7:5b:98:cb:fc:63:8c:fe: 4b:3d:ac:f3:51:79:6d:da:74:e1:9d:e9:bb:ce:0a:bc:63:b3: 0b:0d:2c:bf:f1:b8:37:f4:1d:57:21:0d:d4:8c:38:37:29:6a: 40:35:38:20:c3:76:1c:9c:47:0d:10:2d:89:68:fd:0d:8c:06: 04:86:ff:eb:69:1c:56:eb:34:b5:a3:f9:51:47:fc:94:a2:d7: 15:e6:10:ee:50:44:8a:2a:bf:df:96:67:21:d2:bc:7c:97:4d: 4e:7b:2e:3b:31:0a:05:1d:58:ec:08:9d:c8:39:f1:67:5b:a9: d8:d8:48:4a:c8:40:59:b1:6a:88:ef:0e:04:b4:56:cc:7a:3a: 1f:4d:8a:0e:ab:f6:e0:da:21:29:44:a9:a7:e4:72:e8:b9:8b: 48:91:e0:e7:a5:37:02:de:10:e7:a3:02:77:36:f7:7b:c8:bf: ce:86:40:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUVrTCmMln9PxreMHf5m88XIEvPoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjQxMTE1MTgzMzMyWhcNMjUxMTE0MTgzODMy WjAzMTEwLwYDVQQDEygzOTU5MzkyMTM0RTQ4M0Y5NDE3NzE3MzRCMjk0RjM3MEI4 NEJEODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi1UveqntB8Z 6dblib+br8iyWsH4HppQW6jTnN/6kLh5POCy2L/vnFDqUj2/lmrSUWIE2l1tf2Jd bKeUjFvkUIF/Hr0jIu8mNbjX/UaNddtLlCvSFo58vsxGTADTYkdjTptD4PGjp+Tm +Haf4sgT7bVBx28sforCU+P71pAxcLThbyFW4BiejSF/NTWSgPkYDzBc19iPkSij IXBeXVnx0XtdcHEWR/ZVADW1yExJQNX2kuV2fg4CrNxt2C57y5ibAeiA/9Slelb+ t4NosmD+DPp4qXNbEO8oj+U15b/mZ1AErTcTJ5hTKIAM6FaYt3LleoInycwuUllp r4VCbv9tywIDAQABo4IChDCCAoAwHQYDVR0OBBYEFDlZOSE05IP5QXcXNLKU83C4 S9h5MB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzIzMzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQMpxAwQBQuHcMA0GCSqGSIb3DQEB CwUAA4IBAQBAwqkNvXo73ZcOUTcEQKzvKxVmTVVSeBcjSLqYlSRh8c8hn7A9h/nI W2132KGTFjNCNYqbMCMrBJuVaIWacvIRl03MGmJB4mIndFBeg1nRntw8t1uYy/xj jP5LPazzUXlt2nThnem7zgq8Y7MLDSy/8bg39B1XIQ3UjDg3KWpANTggw3YcnEcN EC2JaP0NjAYEhv/raRxW6zS1o/lRR/yUotcV5hDuUESKKr/flmch0rx8l01Oey47 MQoFHVjsCJ3IOfFnW6nY2EhKyEBZsWqI7w4EtFbMejofTYoOq/bg2iEpRKmn5HLo uYtIkeDnpTcC3hDnowJ3Nvd7yL/OhkDV -----END CERTIFICATE-----Generated at Mon Nov 25 02:57:12 2024 by rpki-client on console-fra.rpki-client.org