$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa File: AS23352.roa (raw, json) Hash identifier: pbEusCdgy9MpSgxfu2Z0oAEqKcDpCXCnxQU4Mit5whc= Subject key identifier: 5F:79:99:5B:2D:8B:F5:C2:68:40:8F:EF:AF:E8:C1:A0:9F:6F:84:1C Certificate issuer: /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Certificate serial: 1DCB22B62B3FC841269964E284954628E2665EF3 Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa Signing time: Tue 20 May 2025 15:14:54 +0000 ROA not before: Tue 20 May 2025 15:09:54 +0000 ROA not after: Tue 19 May 2026 15:14:54 +0000 asID: 23352 IP address blocks: 64.202.113.0/24 maxlen: 24 66.225.220.0/23 maxlen: 24 66.225.221.0/24 maxlen: 24 75.102.8.0/23 maxlen: 24 216.246.66.0/23 maxlen: 24 216.246.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 13:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:cb:22:b6:2b:3f:c8:41:26:99:64:e2:84:95:46:28:e2:66:5e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4 Validity Not Before: May 20 15:09:54 2025 GMT Not After : May 19 15:14:54 2026 GMT Subject: CN=5F79995B2D8BF5C268408FEFAFE8C1A09F6F841C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ad:6b:23:44:15:6a:f0:54:fc:c3:79:ef:d4: 8e:1c:18:85:da:ee:8a:7d:12:02:75:8b:52:05:4c: 3c:cf:66:86:42:86:2a:d4:20:bc:6c:30:48:ec:3a: 3b:9d:6b:51:5f:6e:f5:80:ea:78:ac:a7:c1:77:93: da:80:7f:55:03:99:ef:74:93:b9:71:fe:36:b0:ac: 7f:1d:f1:01:03:bc:73:c8:8d:44:33:4e:8c:d3:97: 31:66:fd:d3:66:84:55:a6:23:9e:4f:71:6b:c8:76: 44:2a:16:d3:77:38:30:5e:f0:6d:aa:9f:46:c6:b7: 6f:9d:5f:11:36:54:62:d9:df:ac:f4:86:e5:33:75: c5:9c:da:ca:d0:c7:71:41:25:4c:64:c4:21:b5:8e: dd:84:03:eb:91:e3:74:30:58:f5:ff:52:bb:4f:46: 4c:68:20:c5:dd:02:30:28:43:85:09:99:78:ed:24: 5e:1b:52:96:eb:a5:80:1b:af:92:23:fd:20:bf:35: 53:e9:d0:2c:d0:11:df:3d:08:95:04:04:ed:d3:f6: 83:b5:11:9f:2e:8c:83:91:7f:90:71:d9:ed:e3:c9: 80:7a:00:86:2c:f1:fd:36:4f:46:68:39:04:2f:9a: e9:db:9a:5a:da:db:25:14:94:c0:7b:e6:72:6e:ba: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:79:99:5B:2D:8B:F5:C2:68:40:8F:EF:AF:E8:C1:A0:9F:6F:84:1C X509v3 Authority Key Identifier: keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS23352.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 64.202.113.0/24 66.225.220.0/23 75.102.8.0/23 216.246.66.0/23 216.246.80.0/21 Signature Algorithm: sha256WithRSAEncryption 72:55:ad:32:1a:77:59:61:3a:ca:05:06:c0:8a:5c:e2:05:cd: d0:3b:81:41:18:62:5b:73:77:f1:0b:94:4d:6c:4d:3c:70:71: fd:58:7c:1e:af:7f:c4:34:57:fa:46:aa:d8:47:2f:65:ec:9a: 39:20:f0:16:98:04:1f:4f:b3:b6:4d:d0:7c:94:9a:7d:a7:20: 45:43:3e:5c:26:af:f7:8d:1f:5b:f6:f9:c2:b0:ef:dd:b8:4f: 04:b2:98:b5:7e:9a:2d:a1:f6:17:34:1c:ed:ed:e6:e4:a4:dd: 43:89:1e:4e:63:76:17:17:4e:fb:58:7b:22:73:3c:32:6a:7d: 88:a9:21:71:10:81:a5:f7:ec:a9:0d:fb:0a:a7:f7:e5:97:72: 29:35:e8:d6:52:27:66:36:55:fe:5a:55:7c:35:b9:2f:02:96: 4f:44:93:a0:47:7f:92:c8:0a:68:e0:95:21:0c:a9:92:38:74: 19:d0:62:ef:64:d3:27:e8:13:b5:b7:3c:51:d0:74:d0:c1:f3: d5:a2:3c:65:ef:cd:28:83:00:64:cd:16:ed:76:89:42:89:2d: 27:ad:fc:01:3c:28:cd:80:c7:ae:89:79:ee:93:8b:a4:62:59: 3d:32:2a:5c:57:be:e1:de:43:5b:07:ec:24:b5:a5:cb:3b:2a: 3f:fc:f6:6a -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUHcsitis/yEEmmWTihJVGKOJmXvMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwNTIwMTUwOTU0WhcNMjYwNTE5MTUxNDU0 WjAzMTEwLwYDVQQDEyg1Rjc5OTk1QjJEOEJGNUMyNjg0MDhGRUZBRkU4QzFBMDlG NkY4NDFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA061rI0QVavBU /MN579SOHBiF2u6KfRICdYtSBUw8z2aGQoYq1CC8bDBI7Do7nWtRX271gOp4rKfB d5PagH9VA5nvdJO5cf42sKx/HfEBA7xzyI1EM06M05cxZv3TZoRVpiOeT3FryHZE KhbTdzgwXvBtqp9GxrdvnV8RNlRi2d+s9IblM3XFnNrK0MdxQSVMZMQhtY7dhAPr keN0MFj1/1K7T0ZMaCDF3QIwKEOFCZl47SReG1KW66WAG6+SI/0gvzVT6dAs0BHf PQiVBATt0/aDtRGfLoyDkX+Qcdnt48mAegCGLPH9Nk9GaDkEL5rp25pa2tslFJTA e+ZybrpUyQIDAQABo4ICljCCApIwHQYDVR0OBBYEFF95mVsti/XCaECP76/owaCf b4QcMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi MzQ2MmEvMC9BUzIzMzUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAQMpxAwQBQuHcAwQBS2YIAwQB2PZC AwQD2PZQMA0GCSqGSIb3DQEBCwUAA4IBAQByVa0yGndZYTrKBQbAilziBc3QO4FB GGJbc3fxC5RNbE08cHH9WHwer3/ENFf6RqrYRy9l7Jo5IPAWmAQfT7O2TdB8lJp9 pyBFQz5cJq/3jR9b9vnCsO/duE8Espi1fpotofYXNBzt7ebkpN1DiR5OY3YXF077 WHsiczwyan2IqSFxEIGl9+ypDfsKp/fll3IpNejWUidmNlX+WlV8NbkvApZPRJOg R3+SyApo4JUhDKmSOHQZ0GLvZNMn6BO1tzxR0HTQwfPVojxl780ogwBkzRbtdolC iS0nrfwBPCjNgMeuiXnuk4ukYlk9MipcV77h3kNbB+wktaXLOyo//PZq -----END CERTIFICATE-----Generated at Wed Nov 5 00:29:18 2025 by rpki-client