$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa File: AS40676.roa (raw, json) Hash identifier: 2Rlbxo6jyW4XIaFYsfYIRkeay6ofPrRc7qIIYGJjNY8= Subject key identifier: 9C:ED:5E:A6:E9:46:C1:ED:FB:1F:71:AE:1E:60:3E:3F:F5:69:B0:5C Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 736F44F73C6AD3E4EE7E564BBC12ABF5EA22224C Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa Signing time: Sat 23 Mar 2024 00:00:12 +0000 ROA not before: Fri 22 Mar 2024 23:55:12 +0000 ROA not after: Sat 22 Mar 2025 00:00:12 +0000 asID: 40676 IP address blocks: 104.234.34.0/24 maxlen: 24 104.234.134.0/24 maxlen: 24 104.234.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 20:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6f:44:f7:3c:6a:d3:e4:ee:7e:56:4b:bc:12:ab:f5:ea:22:22:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 22 23:55:12 2024 GMT Not After : Mar 22 00:00:12 2025 GMT Subject: CN=9CED5EA6E946C1EDFB1F71AE1E603E3FF569B05C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:75:85:76:af:eb:58:72:d8:ad:39:4f:b5:96: e5:ce:3f:52:14:51:b4:5a:66:16:fc:8f:bc:f0:d4: 18:46:71:92:53:ff:90:ec:cb:2d:bf:27:38:90:7b: 2d:08:0c:a7:13:60:a6:c9:74:a4:c8:41:ec:dd:b4: 86:c3:85:06:11:72:77:b1:e2:b1:25:01:00:ed:1f: f0:e8:88:7b:77:f6:8e:2d:bb:2e:71:5d:4f:6c:65: d6:e2:16:2a:5f:50:a2:6a:07:75:b7:ef:71:a6:4a: d4:f2:b0:14:7a:6b:90:3e:c3:e6:4c:b9:0e:da:50: 0a:fd:c8:27:f9:66:fc:26:32:05:76:6b:55:f3:60: 3e:d5:91:01:9a:bc:b9:21:c0:d3:a6:d6:59:39:63: a9:f1:9e:30:ca:4a:b3:41:dd:1f:dc:5f:2e:62:fe: 90:be:0e:62:4f:c8:a9:8d:8e:00:32:f4:77:f0:a7: 77:33:a6:a1:cc:00:c3:30:59:f7:27:d4:6b:61:e4: b0:69:fe:12:ef:03:66:ee:0f:71:7e:ed:81:11:33: 12:2a:52:1c:dc:5d:57:42:e9:fa:30:0b:bb:ec:1b: 5f:99:30:dc:55:67:eb:a8:57:2c:c9:2a:7b:6d:82: 80:27:cb:cf:3d:94:f3:78:de:ff:8a:e2:d3:56:8e: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:ED:5E:A6:E9:46:C1:ED:FB:1F:71:AE:1E:60:3E:3F:F5:69:B0:5C X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS40676.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.34.0/24 104.234.134.0/24 104.234.172.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:18:58:a0:e6:fb:e8:e1:7c:a0:60:b3:2b:91:da:67:28:62: c5:45:e8:11:1a:59:53:06:b3:fa:18:67:c3:36:d1:59:a8:21: 14:b1:99:ed:4c:27:55:65:b6:d4:cc:33:50:7d:a6:29:c2:91: 40:11:87:02:81:8d:fe:71:51:5d:10:9d:ea:d9:f0:d7:50:08: 2c:47:b8:f1:f7:cf:27:e0:d7:74:5c:6d:6a:db:8d:e1:23:d2: 2d:75:ba:4c:a4:96:bd:3c:54:b0:98:4b:1b:cd:8e:f8:92:60: f5:02:5c:cb:51:c0:6a:25:73:78:21:57:7f:e6:93:bb:4f:58: 51:28:9f:f0:b4:66:b0:29:f9:4d:50:20:20:65:c0:a9:a9:21: 9f:6e:ab:a4:a6:40:6b:ae:f2:6b:ec:e9:de:b6:92:6f:9a:de: 52:7c:f1:ec:60:99:00:3b:b0:3a:26:76:fb:bb:34:f6:04:59: be:c2:54:22:43:ac:c2:f2:d6:09:20:59:f0:76:d5:86:af:c0: c6:18:19:43:67:b9:29:1d:66:b2:8f:2e:ab:94:39:6e:09:0e: 41:ae:a2:8a:90:ba:84:1c:d4:7f:4b:5f:0e:14:d2:b1:3a:cf: bb:0d:44:2e:17:0d:9d:34:9b:ea:86:b9:bd:d0:ac:c9:87:f3: 46:6e:0c:35 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUc29E9zxq0+TuflZLvBKr9eoiIkwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMzIyMjM1NTEyWhcNMjUwMzIyMDAwMDEy WjAzMTEwLwYDVQQDEyg5Q0VENUVBNkU5NDZDMUVERkIxRjcxQUUxRTYwM0UzRkY1 NjlCMDVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXWFdq/rWHLY rTlPtZblzj9SFFG0WmYW/I+88NQYRnGSU/+Q7Mstvyc4kHstCAynE2CmyXSkyEHs 3bSGw4UGEXJ3seKxJQEA7R/w6Ih7d/aOLbsucV1PbGXW4hYqX1Ciagd1t+9xpkrU 8rAUemuQPsPmTLkO2lAK/cgn+Wb8JjIFdmtV82A+1ZEBmry5IcDTptZZOWOp8Z4w ykqzQd0f3F8uYv6Qvg5iT8ipjY4AMvR38Kd3M6ahzADDMFn3J9RrYeSwaf4S7wNm 7g9xfu2BETMSKlIc3F1XQun6MAu77BtfmTDcVWfrqFcsySp7bYKAJ8vPPZTzeN7/ iuLTVo710QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJztXqbpRsHt+x9xrh5gPj/1 abBcMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwNjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOoiAwQAaOqGAwQAaOqsMA0GCSqG SIb3DQEBCwUAA4IBAQAdGFig5vvo4XygYLMrkdpnKGLFRegRGllTBrP6GGfDNtFZ qCEUsZntTCdVZbbUzDNQfaYpwpFAEYcCgY3+cVFdEJ3q2fDXUAgsR7jx988n4Nd0 XG1q243hI9ItdbpMpJa9PFSwmEsbzY74kmD1AlzLUcBqJXN4IVd/5pO7T1hRKJ/w tGawKflNUCAgZcCpqSGfbqukpkBrrvJr7OnetpJvmt5SfPHsYJkAO7A6Jnb7uzT2 BFm+wlQiQ6zC8tYJIFnwdtWGr8DGGBlDZ7kpHWayjy6rlDluCQ5BrqKKkLqEHNR/ S18OFNKxOs+7DUQuFw2dNJvqhrm90KzJh/NGbgw1 -----END CERTIFICATE-----Generated at Sun May 5 21:10:16 2024 by rpki-client on console-fra.rpki-client.org