$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa File: AS23273.roa (raw, json) Hash identifier: yfo63Zqner+1UbIrfoilOoxJZWAUrKFqKIxGYCVBJVs= Subject key identifier: FB:3C:2E:30:88:A7:9C:72:FB:E2:52:C2:DD:A8:40:C5:BB:F1:26:F4 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 0E81F1C22012B6BC5563285D64671436288015A7 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa Signing time: Wed 20 Aug 2025 23:48:22 +0000 ROA not before: Wed 20 Aug 2025 23:43:22 +0000 ROA not after: Wed 19 Aug 2026 23:48:22 +0000 asID: 23273 IP address blocks: 69.12.66.0/24 maxlen: 24 107.150.4.0/24 maxlen: 24 155.94.167.0/24 maxlen: 24 172.96.180.0/22 maxlen: 24 192.161.49.0/24 maxlen: 24 204.44.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 06:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:81:f1:c2:20:12:b6:bc:55:63:28:5d:64:67:14:36:28:80:15:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Aug 20 23:43:22 2025 GMT Not After : Aug 19 23:48:22 2026 GMT Subject: CN=FB3C2E3088A79C72FBE252C2DDA840C5BBF126F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ae:19:38:b5:08:96:41:fd:30:a9:6f:e0:2b: a2:a0:48:5f:3c:4f:ba:4e:b0:3f:75:e5:dc:fd:d2: 79:cb:4e:86:3b:30:4a:5b:1e:63:b6:28:ce:15:93: 97:4d:6e:d2:73:9d:85:cb:69:ce:fc:e5:d3:4e:a4: 9f:2e:35:49:45:1d:c7:a0:82:cd:84:e7:17:d3:48: fe:01:77:c9:46:ea:3b:90:37:10:85:d5:98:74:7c: e0:96:b0:92:3b:45:2e:69:da:0a:6f:f5:bf:f0:88: de:ea:a0:c8:a5:cd:aa:1c:83:a4:2c:d1:b6:8d:44: af:d3:69:92:10:a0:d0:ca:c6:9c:90:45:48:4e:ae: f9:e6:34:dc:ad:a4:01:af:fe:03:c9:1d:9c:5f:fc: 27:a4:78:18:bf:0c:2b:9b:a9:88:54:ff:71:66:a1: ff:1c:bc:77:c9:a4:10:58:67:bc:f7:59:43:df:72: e6:75:b4:04:6d:a0:79:76:d8:52:d4:8f:61:af:84: 68:18:87:c0:85:7a:33:b8:d7:70:b2:87:36:54:a9: 09:0d:48:f6:ec:02:69:fa:e3:93:fe:28:8f:01:78: 49:ab:4f:f4:84:98:a0:8d:54:13:42:70:52:06:10: bb:fe:39:21:03:02:2d:a6:13:3a:fb:48:8f:a2:e9: c1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:3C:2E:30:88:A7:9C:72:FB:E2:52:C2:DD:A8:40:C5:BB:F1:26:F4 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23273.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 69.12.66.0/24 107.150.4.0/24 155.94.167.0/24 172.96.180.0/22 192.161.49.0/24 204.44.192.0/20 Signature Algorithm: sha256WithRSAEncryption 0d:7a:78:98:7e:a0:77:13:32:4f:4e:d3:9c:8f:1d:6e:0e:3d: 2e:a5:81:00:b0:5a:38:4b:88:61:62:0c:37:c0:c6:89:a0:05: d6:10:c3:6b:a7:7e:43:0e:1b:5b:41:2d:71:d1:b4:4e:d7:b0: d2:86:54:42:45:bb:d9:b7:db:b2:68:42:9b:af:c6:f1:6d:48: 6e:79:f4:90:86:e9:5d:5e:ff:9e:4a:1e:79:50:ab:5c:b5:50: b3:6c:8c:63:0c:51:d5:9a:9f:50:ce:de:f1:5b:3f:d2:49:1f: 7e:ae:ad:9a:cc:e6:67:e4:91:62:d4:b4:d9:11:a6:f7:41:7f: 37:10:4d:ff:b0:11:66:25:bd:f2:7e:c7:99:2e:f7:83:2c:96: 7d:43:9e:5a:ee:52:fa:78:69:17:84:c6:f9:13:c7:85:14:21: 0f:97:81:d7:86:5e:0b:6d:78:83:2c:1c:3e:d1:c5:2b:27:fd: 98:05:7a:c4:a6:28:96:3d:20:5e:7f:14:10:e5:4e:3c:cf:8d: 22:2c:48:e4:30:f3:50:14:5a:6b:6e:d5:d5:17:b6:ab:ed:ed: 72:da:33:60:4c:4e:39:a7:33:36:aa:f8:b3:d5:94:b5:e3:0e: 93:6f:23:f1:b8:f0:d5:02:27:b5:95:03:28:eb:44:83:70:53: 3c:b1:94:54 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUDoHxwiAStrxVYyhdZGcUNiiAFacwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODIwMjM0MzIyWhcNMjYwODE5MjM0ODIy WjAzMTEwLwYDVQQDEyhGQjNDMkUzMDg4QTc5QzcyRkJFMjUyQzJEREE4NDBDNUJC RjEyNkY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa4ZOLUIlkH9 MKlv4CuioEhfPE+6TrA/deXc/dJ5y06GOzBKWx5jtijOFZOXTW7Sc52Fy2nO/OXT TqSfLjVJRR3HoILNhOcX00j+AXfJRuo7kDcQhdWYdHzglrCSO0UuadoKb/W/8Ije 6qDIpc2qHIOkLNG2jUSv02mSEKDQysackEVITq755jTcraQBr/4DyR2cX/wnpHgY vwwrm6mIVP9xZqH/HLx3yaQQWGe891lD33LmdbQEbaB5dthS1I9hr4RoGIfAhXoz uNdwsoc2VKkJDUj27AJp+uOT/iiPAXhJq0/0hJigjVQTQnBSBhC7/jkhAwItphM6 +0iPounBxwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFPs8LjCIp5xy++JSwt2oQMW7 8Sb0MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIzMjczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQARQxCAwQAa5YEAwQAm16nAwQCrGC0 AwQAwKExAwQEzCzAMA0GCSqGSIb3DQEBCwUAA4IBAQANeniYfqB3EzJPTtOcjx1u Dj0upYEAsFo4S4hhYgw3wMaJoAXWEMNrp35DDhtbQS1x0bRO17DShlRCRbvZt9uy aEKbr8bxbUhuefSQhuldXv+eSh55UKtctVCzbIxjDFHVmp9Qzt7xWz/SSR9+rq2a zOZn5JFi1LTZEab3QX83EE3/sBFmJb3yfseZLveDLJZ9Q55a7lL6eGkXhMb5E8eF FCEPl4HXhl4LbXiDLBw+0cUrJ/2YBXrEpiiWPSBefxQQ5U48z40iLEjkMPNQFFpr btXVF7ar7e1y2jNgTE45pzM2qviz1ZS14w6TbyPxuPDVAie1lQMo60SDcFM8sZRU -----END CERTIFICATE-----Generated at Sat Aug 23 14:41:49 2025 by rpki-client