$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: qneaKojLYPncHEvM5PWLkyjzEdHyI6AWx8RAa2pdeeA= Subject key identifier: 85:4C:A0:0B:68:07:CB:8E:DE:73:1F:0B:3D:B1:EE:AB:73:74:9C:B1 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 7D5097C204D9BF8741E34E939D8C705791DB6031 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23470.roa Signing time: Tue 27 Feb 2024 10:07:06 +0000 ROA not before: Tue 27 Feb 2024 10:02:06 +0000 ROA not after: Tue 25 Feb 2025 10:07:06 +0000 asID: 23470 IP address blocks: 140.99.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:50:97:c2:04:d9:bf:87:41:e3:4e:93:9d:8c:70:57:91:db:60:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Feb 27 10:02:06 2024 GMT Not After : Feb 25 10:07:06 2025 GMT Subject: CN=854CA00B6807CB8EDE731F0B3DB1EEAB73749CB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:80:5e:93:b8:ec:6f:4a:ef:a1:9f:b1:db:dd: d1:24:1a:79:d7:d7:1a:ed:ea:50:f3:8b:41:57:f5: 40:55:2e:b1:73:a5:fa:3e:1f:1e:7c:44:42:10:84: bb:46:e6:d8:49:2b:8d:e3:bc:56:9b:a8:85:83:80: a9:18:e4:54:2c:5f:9b:25:6e:3a:5a:8c:92:6e:62: 6f:57:e4:5b:96:86:62:bf:8c:f0:58:1a:dc:f0:b1: 57:fa:96:77:1b:21:55:96:ae:cf:1b:c0:b4:63:c5: a9:48:8d:84:ef:17:06:8a:52:e9:6e:de:e2:06:50: 1e:4f:b6:a6:7b:6f:c9:b2:c3:71:9e:ca:9f:e9:12: c2:c6:7f:27:43:4f:6b:0c:29:a2:e1:95:40:7d:c0: 91:3d:80:bf:71:33:02:8e:fa:4a:9d:4c:0d:a4:b5: d3:ef:d5:8e:00:ed:ec:80:48:10:59:97:06:47:12: 7f:b0:57:58:62:ad:c8:c4:b4:cc:fa:b6:f9:d1:56: 8f:af:e8:a6:bb:2d:b4:d3:18:77:67:e7:62:21:c3: 22:b6:0e:f8:97:ab:66:38:77:b3:b6:be:92:28:a7: ac:e1:af:4f:d1:b9:5b:c3:85:17:b7:be:98:93:ae: ca:ad:04:21:69:36:75:d1:cc:1d:31:73:15:6e:4b: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:4C:A0:0B:68:07:CB:8E:DE:73:1F:0B:3D:B1:EE:AB:73:74:9C:B1 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.223.0/24 Signature Algorithm: sha256WithRSAEncryption ab:38:04:1e:ad:f1:57:f8:12:7c:f4:88:59:80:ac:ff:c3:b1: c8:32:68:64:49:97:1f:ec:1c:89:b3:73:b8:6f:40:a0:da:79: f6:e3:93:72:e1:2b:87:2d:47:57:1b:3e:4c:49:83:6f:7d:57: 69:9e:46:d5:c3:f1:4a:db:b9:25:20:d7:b6:09:10:b9:7d:ff: 2e:36:d8:e5:0c:ed:31:52:e7:8f:f7:19:7b:33:3d:4e:3c:dd: 4a:2c:00:53:b4:a7:07:6e:ec:2d:55:95:2c:97:4f:4d:0e:36: 46:05:97:89:85:c2:2f:69:1e:ac:26:65:bf:03:78:3b:85:18: 14:c5:5d:7e:eb:ca:ed:bc:35:17:a3:63:91:4f:bf:19:db:dc: e2:e4:6a:75:b9:13:c2:58:f3:fd:df:1f:df:69:d6:6e:09:32: a9:41:eb:bd:50:8c:7c:c8:9b:78:33:5a:7e:55:fa:7f:a9:85: e3:f9:4e:96:a2:d5:f2:60:c9:39:73:5c:61:5c:cb:4b:c5:7b: 91:c1:91:73:28:1b:36:e4:4b:c9:67:35:96:48:20:7a:12:0d: c2:b3:0f:6a:ab:a1:6a:8b:cc:aa:74:25:5f:77:6b:ad:ee:18: 96:16:6e:df:25:f3:3e:95:05:70:c8:a1:03:bf:e3:c9:2e:4b: 29:1f:51:fc -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUfVCXwgTZv4dB406TnYxwV5HbYDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjQwMjI3MTAwMjA2WhcNMjUwMjI1MTAwNzA2 WjAzMTEwLwYDVQQDEyg4NTRDQTAwQjY4MDdDQjhFREU3MzFGMEIzREIxRUVBQjcz NzQ5Q0IxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oBek7jsb0rv oZ+x293RJBp519ca7epQ84tBV/VAVS6xc6X6Ph8efERCEIS7RubYSSuN47xWm6iF g4CpGORULF+bJW46WoySbmJvV+RbloZiv4zwWBrc8LFX+pZ3GyFVlq7PG8C0Y8Wp SI2E7xcGilLpbt7iBlAeT7ame2/JssNxnsqf6RLCxn8nQ09rDCmi4ZVAfcCRPYC/ cTMCjvpKnUwNpLXT79WOAO3sgEgQWZcGRxJ/sFdYYq3IxLTM+rb50VaPr+imuy20 0xh3Z+diIcMitg74l6tmOHeztr6SKKes4a9P0blbw4UXt76Yk67KrQQhaTZ10cwd MXMVbktEDwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIVMoAtoB8uO3nMfCz2x7qtz dJyxMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGPfMA0GCSqGSIb3DQEBCwUAA4IB AQCrOAQerfFX+BJ89IhZgKz/w7HIMmhkSZcf7ByJs3O4b0Cg2nn245Ny4SuHLUdX Gz5MSYNvfVdpnkbVw/FK27klINe2CRC5ff8uNtjlDO0xUueP9xl7Mz1OPN1KLABT tKcHbuwtVZUsl09NDjZGBZeJhcIvaR6sJmW/A3g7hRgUxV1+68rtvDUXo2ORT78Z 29zi5Gp1uRPCWPP93x/fadZuCTKpQeu9UIx8yJt4M1p+Vfp/qYXj+U6WotXyYMk5 c1xhXMtLxXuRwZFzKBs25EvJZzWWSCB6Eg3Csw9qq6Fqi8yqdCVfd2ut7hiWFm7f JfM+lQVwyKEDv+PJLkspH1H8 -----END CERTIFICATE-----Generated at Wed May 1 22:06:23 2024 by rpki-client on console-fra.rpki-client.org