$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa File: AS64267.roa (raw, json) Hash identifier: EHlqQUIgQpTuEC0GyZcCELWXqxgyncn/VMASKyISitI= Subject key identifier: 77:20:79:7E:53:C6:41:18:84:E3:68:14:A7:7B:30:1D:DC:6C:6D:A3 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 5FCDFA8358FE6A75B989D6A99FD81CC1C59403FD Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa Signing time: Wed 12 Mar 2025 14:37:26 +0000 ROA not before: Wed 12 Mar 2025 14:32:26 +0000 ROA not after: Wed 11 Mar 2026 14:37:26 +0000 asID: 64267 IP address blocks: 23.94.90.0/24 maxlen: 24 23.94.106.0/24 maxlen: 24 23.94.109.0/24 maxlen: 24 23.94.135.0/24 maxlen: 24 198.23.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 16:41:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:cd:fa:83:58:fe:6a:75:b9:89:d6:a9:9f:d8:1c:c1:c5:94:03:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 12 14:32:26 2025 GMT Not After : Mar 11 14:37:26 2026 GMT Subject: CN=7720797E53C6411884E36814A77B301DDC6C6DA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e1:b4:31:4e:db:22:82:aa:86:b3:00:bb:1c: 1f:fe:7b:07:8b:ea:60:20:20:a6:0b:43:27:b2:29: 99:d1:4f:ff:82:93:7a:ca:74:1e:45:07:3a:ec:49: 1c:7a:19:bc:36:e9:e0:ef:7b:ab:70:66:5e:d3:29: 50:a9:43:d3:b4:fe:3a:56:7d:70:5a:4f:47:28:18: a7:16:fb:6c:f3:00:02:40:21:53:94:3e:f9:15:68: bd:1c:1b:65:e6:2c:93:34:a7:58:4e:79:e6:fc:fe: c0:94:b0:62:8a:73:90:e8:22:8a:c0:3f:62:40:8c: 2b:16:d2:03:9b:6a:bb:ee:aa:e2:37:39:23:f9:71: db:e2:0f:3f:29:30:06:f8:d4:86:5d:36:29:bf:a4: e8:06:d3:76:83:90:da:3b:81:31:d6:45:a3:12:a6: 2a:a1:27:5e:00:f1:ad:76:6d:70:3d:c9:e0:03:04: 1e:a4:6d:53:c6:27:ae:d9:f6:65:45:51:61:2d:7c: 1a:17:05:5d:14:5a:f2:52:1e:7a:cf:03:1f:29:da: bd:bf:b5:75:d6:5a:05:7a:fd:03:6f:ce:f9:35:a0: a3:af:ff:dd:38:2e:9d:0e:c0:0a:3a:dd:6a:01:70: 63:3c:1c:be:8f:ed:e8:fc:bb:62:37:99:26:40:8f: 36:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:79:7E:53:C6:41:18:84:E3:68:14:A7:7B:30:1D:DC:6C:6D:A3 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.90.0/24 23.94.106.0/24 23.94.109.0/24 23.94.135.0/24 198.23.222.0/24 Signature Algorithm: sha256WithRSAEncryption 00:ca:ba:3b:8d:55:ba:44:39:fe:3f:ef:5c:c9:1a:69:ae:b5: e5:65:a7:2a:a4:cc:c0:f7:76:99:5f:b5:7f:cd:45:bf:5d:7b: 9b:3b:68:45:87:08:fa:d1:25:a9:34:94:f2:ce:02:ed:1b:e2: 07:15:b0:ed:a7:6c:95:71:e5:47:e0:b3:6b:3a:1b:a4:3c:e3: 9b:a6:7b:ac:8f:07:05:24:fb:1a:85:4d:7d:bc:40:f0:08:f2: 5f:a8:31:a9:ce:a3:43:1a:08:9c:b7:96:29:5a:6f:05:c7:e8: 9e:0a:93:a4:8f:5c:aa:6f:54:5f:79:bf:d5:27:31:f0:8c:79: f1:e2:64:97:81:8e:67:95:f1:e8:0b:31:2e:e4:2c:bb:78:03: 46:62:3f:ae:f6:24:f1:4b:f6:71:b2:16:e0:9d:b3:e9:11:7d: 9e:fc:e6:18:12:03:31:21:17:35:54:41:ad:11:d2:e0:1a:09: 04:b0:e5:3b:18:c8:97:c8:97:6b:4e:d8:bb:2c:3e:6b:fa:d1: ad:68:c1:73:b6:b5:5e:2f:69:31:c6:08:02:b1:51:14:ec:fe: 78:94:8b:20:4e:97:25:b6:57:e8:e8:ef:30:b5:05:f1:fc:38: ee:22:9f:1c:be:10:8c:42:79:8c:74:23:fb:dd:a7:d2:92:11: 14:6c:11:49 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUX836g1j+anW5idapn9gcwcWUA/0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwMzEyMTQzMjI2WhcNMjYwMzExMTQzNzI2 WjAzMTEwLwYDVQQDEyg3NzIwNzk3RTUzQzY0MTE4ODRFMzY4MTRBNzdCMzAxRERD NkM2REEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOG0MU7bIoKq hrMAuxwf/nsHi+pgICCmC0MnsimZ0U//gpN6ynQeRQc67Ekcehm8Nung73urcGZe 0ylQqUPTtP46Vn1wWk9HKBinFvts8wACQCFTlD75FWi9HBtl5iyTNKdYTnnm/P7A lLBiinOQ6CKKwD9iQIwrFtIDm2q77qriNzkj+XHb4g8/KTAG+NSGXTYpv6ToBtN2 g5DaO4Ex1kWjEqYqoSdeAPGtdm1wPcngAwQepG1Txieu2fZlRVFhLXwaFwVdFFry Uh56zwMfKdq9v7V11loFev0Db875NaCjr//dOC6dDsAKOt1qAXBjPBy+j+3o/Lti N5kmQI828wIDAQABo4ICljCCApIwHQYDVR0OBBYEFHcgeX5TxkEYhONoFKd7MB3c bG2jMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAF15aAwQAF15qAwQAF15tAwQAF16H AwQAxhfeMA0GCSqGSIb3DQEBCwUAA4IBAQAAyro7jVW6RDn+P+9cyRpprrXlZacq pMzA93aZX7V/zUW/XXubO2hFhwj60SWpNJTyzgLtG+IHFbDtp2yVceVH4LNrOhuk POObpnusjwcFJPsahU19vEDwCPJfqDGpzqNDGgict5YpWm8Fx+ieCpOkj1yqb1Rf eb/VJzHwjHnx4mSXgY5nlfHoCzEu5Cy7eANGYj+u9iTxS/ZxshbgnbPpEX2e/OYY EgMxIRc1VEGtEdLgGgkEsOU7GMiXyJdrTti7LD5r+tGtaMFztrVeL2kxxggCsVEU 7P54lIsgTpcltlfo6O8wtQXx/DjuIp8cvhCMQnmMdCP73afSkhEUbBFJ -----END CERTIFICATE-----Generated at Sun Apr 27 22:22:27 2025 by rpki-client