$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa File: AS64267.roa (raw, json) Hash identifier: bdN5EkbtOMUAen8dSDWax2UeiJuEuQGqrTYNmiVs3vU= Subject key identifier: 62:3F:CB:70:47:BA:85:C5:01:F8:41:13:A6:BF:65:FF:97:C6:80:DB Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 7A491F79CCF303B73CC890AE19614420586E806B Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa Signing time: Fri 10 Oct 2025 12:26:45 +0000 ROA not before: Fri 10 Oct 2025 12:21:45 +0000 ROA not after: Fri 09 Oct 2026 12:26:45 +0000 asID: 64267 IP address blocks: 23.94.90.0/24 maxlen: 24 23.94.106.0/24 maxlen: 24 23.94.109.0/24 maxlen: 24 23.94.135.0/24 maxlen: 24 74.50.7.0/24 maxlen: 24 172.245.98.0/24 maxlen: 24 198.23.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 15:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:49:1f:79:cc:f3:03:b7:3c:c8:90:ae:19:61:44:20:58:6e:80:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 10 12:21:45 2025 GMT Not After : Oct 9 12:26:45 2026 GMT Subject: CN=623FCB7047BA85C501F84113A6BF65FF97C680DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b7:8e:ce:42:b1:3c:bc:9a:72:6f:d0:62:77: 07:4c:09:cb:63:de:3f:38:ef:c8:82:9a:9f:3b:4f: 6d:d5:95:00:c1:c3:ca:8f:bc:d4:5d:62:06:6f:fa: 31:ae:46:f0:67:b4:20:f9:9e:d8:3e:c5:5f:39:94: 6e:73:a9:ff:a9:e7:d3:5d:24:5e:12:61:1c:b9:8d: 1b:ef:2a:f5:59:73:55:e8:ae:5e:33:9e:bf:56:f8: e1:84:d3:b9:e3:05:76:73:24:2e:1f:6d:dd:f7:6e: eb:26:25:02:02:3f:3f:57:d7:b1:5e:68:b6:59:db: 67:c4:a5:38:13:79:a8:97:e4:a6:c0:16:c3:d9:0d: 77:cd:a7:c1:e4:fd:f1:7c:38:2d:a0:40:41:1b:0e: 38:f4:31:8b:ba:93:04:22:34:b8:f8:9b:0f:ab:7a: d9:ea:05:6c:8a:44:3e:a4:3d:08:8c:a7:c1:d5:11: 82:c4:b3:9f:dc:1d:40:ba:02:e3:52:d6:e8:57:14: 71:68:9e:e5:b3:83:29:a3:6f:92:89:5e:1e:f0:67: 70:13:54:3a:ef:a5:50:14:37:4a:c2:03:3a:eb:df: dc:f0:cb:6f:4b:a5:b2:12:60:69:b5:40:cb:0d:6b: 24:2e:6a:ae:b7:f1:dc:94:18:df:05:fd:da:06:1f: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3F:CB:70:47:BA:85:C5:01:F8:41:13:A6:BF:65:FF:97:C6:80:DB X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.90.0/24 23.94.106.0/24 23.94.109.0/24 23.94.135.0/24 74.50.7.0/24 172.245.98.0/24 198.23.222.0/24 Signature Algorithm: sha256WithRSAEncryption b7:7f:15:b0:9f:82:74:56:da:4d:e9:06:74:bc:3c:bd:bd:fa: 1b:e5:a1:61:5f:0f:6f:71:66:ac:ce:e0:02:29:cd:dc:c1:7d: 33:e8:87:80:db:21:9b:a2:28:0b:ad:1c:f5:0c:16:c4:df:54: a2:87:9e:50:88:81:af:e2:71:ae:6a:6c:8a:ef:9e:1a:51:c0: 79:8d:0b:39:91:17:c5:45:7f:80:ed:97:06:36:d3:3b:be:42: 4a:95:c2:6c:ec:6f:5c:84:4c:63:0e:bb:25:e0:53:5c:27:a0: ce:5d:af:0f:92:8e:0d:68:f6:72:e4:96:b2:a9:ec:16:41:56: 6f:c5:1a:ca:d2:01:1a:3b:93:a8:fe:d5:4e:50:71:b6:cd:59: 0f:01:1c:6e:24:8b:d8:0f:86:cd:63:64:10:19:88:53:b9:7d: 6f:a7:c1:ec:c7:02:e8:4b:ea:ba:c5:c1:6b:da:5e:70:43:a0: b4:02:6d:d6:f8:90:79:6d:d6:08:bb:4f:ed:4c:cf:ff:49:88: 7a:2a:4b:db:c0:1b:37:4c:aa:41:0e:11:10:b8:cd:87:f6:34: a1:0f:fd:ff:4b:f0:c9:e7:e0:5c:11:53:5e:5e:bf:f5:0d:72: b0:6f:52:5a:87:0b:8b:69:73:e5:6f:34:68:15:0b:d2:8b:c4: fe:52:8d:64 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIUekkfeczzA7c8yJCuGWFEIFhugGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDEwMTIyMTQ1WhcNMjYxMDA5MTIyNjQ1 WjAzMTEwLwYDVQQDEyg2MjNGQ0I3MDQ3QkE4NUM1MDFGODQxMTNBNkJGNjVGRjk3 QzY4MERCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybeOzkKxPLya cm/QYncHTAnLY94/OO/IgpqfO09t1ZUAwcPKj7zUXWIGb/oxrkbwZ7Qg+Z7YPsVf OZRuc6n/qefTXSReEmEcuY0b7yr1WXNV6K5eM56/VvjhhNO54wV2cyQuH23d927r JiUCAj8/V9exXmi2WdtnxKU4E3mol+SmwBbD2Q13zafB5P3xfDgtoEBBGw449DGL upMEIjS4+JsPq3rZ6gVsikQ+pD0IjKfB1RGCxLOf3B1AugLjUtboVxRxaJ7ls4Mp o2+SiV4e8GdwE1Q676VQFDdKwgM669/c8MtvS6WyEmBptUDLDWskLmqut/HclBjf Bf3aBh/BRwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGI/y3BHuoXFAfhBE6a/Zf+X xoDbMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEMG CCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAF15aAwQAF15qAwQAF15tAwQAF16H AwQASjIHAwQArPViAwQAxhfeMA0GCSqGSIb3DQEBCwUAA4IBAQC3fxWwn4J0VtpN 6QZ0vDy9vfob5aFhXw9vcWaszuACKc3cwX0z6IeA2yGboigLrRz1DBbE31Sih55Q iIGv4nGuamyK754aUcB5jQs5kRfFRX+A7ZcGNtM7vkJKlcJs7G9chExjDrsl4FNc J6DOXa8Pko4NaPZy5JayqewWQVZvxRrK0gEaO5Oo/tVOUHG2zVkPARxuJIvYD4bN Y2QQGYhTuX1vp8HsxwLoS+q6xcFr2l5wQ6C0Am3W+JB5bdYIu0/tTM//SYh6Kkvb wBs3TKpBDhEQuM2H9jShD/3/S/DJ5+BcEVNeXr/1DXKwb1JahwuLaXPlbzRoFQvS i8T+Uo1k -----END CERTIFICATE-----Generated at Sun Oct 19 22:31:31 2025 by rpki-client