$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa File: AS43350.roa (raw, json) Hash identifier: zeo1JN9Tvxl4KZcZ8EFhFre/rRHbOQypPO0ckLevcnY= Subject key identifier: 90:62:19:5A:89:5F:49:B5:84:2E:45:FD:93:34:E1:74:E6:26:1E:02 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 56E8C392491DA24409D09A766BB1B1C34540321D Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa Signing time: Wed 28 Feb 2024 11:01:15 +0000 ROA not before: Wed 28 Feb 2024 10:56:15 +0000 ROA not after: Wed 26 Feb 2025 11:01:15 +0000 asID: 43350 IP address blocks: 104.234.1.0/24 maxlen: 24 104.234.46.0/24 maxlen: 24 104.234.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 06 May 2024 03:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:e8:c3:92:49:1d:a2:44:09:d0:9a:76:6b:b1:b1:c3:45:40:32:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 28 10:56:15 2024 GMT Not After : Feb 26 11:01:15 2025 GMT Subject: CN=9062195A895F49B5842E45FD9334E174E6261E02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:63:9e:b5:73:c5:72:5a:f6:48:de:df:cd:b9: 48:14:29:4b:13:a4:75:ea:02:0d:a8:24:e0:0a:fd: a0:bf:f0:3e:82:6b:f0:60:17:78:17:97:30:66:34: 98:90:40:e0:ec:66:ef:fb:2e:ed:f5:d1:0f:c9:0f: dc:fe:53:08:2e:9b:cf:24:62:32:d8:08:9c:ee:da: df:82:3a:d3:97:ce:ae:a1:5d:6b:d9:a0:69:74:32: 72:82:a0:56:f8:20:0d:ee:a9:10:e3:b8:14:16:43: 02:1c:71:17:90:4c:76:d2:90:71:2d:82:08:69:03: 4a:11:cd:53:26:c6:c0:1f:64:ef:ad:52:f7:84:19: 1e:26:fe:f8:f1:76:94:50:a8:5a:17:1f:9b:3e:5f: c3:be:db:49:8d:0a:31:36:ce:13:aa:75:05:55:56: 4a:49:c9:9c:57:51:ae:70:54:16:a2:46:f7:b7:8c: 9e:a0:f7:41:52:ef:ff:64:84:bb:11:80:e1:58:f4: 26:14:8e:38:59:91:72:ff:d4:4b:37:8b:09:f1:e0: b3:0d:cc:f5:33:d1:54:17:df:9b:a0:2a:4b:d3:23: 31:45:56:31:37:ae:2e:b8:5b:46:2f:83:2f:8e:eb: f4:ef:3f:48:08:e7:63:7c:a2:ae:f0:ee:07:29:01: 60:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:62:19:5A:89:5F:49:B5:84:2E:45:FD:93:34:E1:74:E6:26:1E:02 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.1.0/24 104.234.46.0/24 104.234.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:10:61:a2:be:95:f8:30:c2:a0:fa:99:14:22:f1:5a:15:69: e5:c8:54:0f:06:5f:b0:51:35:1c:7b:f8:5d:d3:93:5c:99:25: d8:5b:fc:b9:81:9a:0a:b6:d3:61:d4:64:a3:0c:49:be:ca:a6: ac:d6:8b:64:24:31:ef:0c:2e:3a:0c:0a:5a:15:84:82:84:f6: c3:1e:2a:96:e7:c8:b5:a1:24:92:9b:b2:2d:1d:80:74:28:b4: 82:54:02:14:2d:79:cc:b1:bf:cb:1a:dc:26:17:f9:f6:4a:e2: 67:fa:b4:d0:71:17:11:18:8d:02:d5:2a:39:97:a4:b1:dc:60: aa:b7:1c:94:27:52:14:e4:41:f0:6c:12:a6:7c:23:6f:34:ae: 58:4b:9e:06:fb:5e:9a:b5:a4:d3:a8:f9:cd:6b:08:54:3f:d6: 89:a2:6b:e3:16:ca:e7:be:a4:36:09:49:17:a4:84:81:a1:f1: 93:3e:b6:d1:47:ac:b7:92:d8:99:1f:44:34:33:1b:3a:1c:eb: ba:d9:ab:26:8a:14:e1:82:f6:ca:af:2d:25:8c:2a:dc:76:9a: 58:46:aa:fe:05:9c:a8:9e:da:e9:62:b0:e1:72:61:a4:a4:90: 69:56:bb:07:b0:35:ce:d3:26:5d:a5:c0:05:05:48:8f:97:8e: 25:4e:a0:4c -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUVujDkkkdokQJ0Jp2a7Gxw0VAMh0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMjI4MTA1NjE1WhcNMjUwMjI2MTEwMTE1 WjAzMTEwLwYDVQQDEyg5MDYyMTk1QTg5NUY0OUI1ODQyRTQ1RkQ5MzM0RTE3NEU2 MjYxRTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GOetXPFclr2 SN7fzblIFClLE6R16gINqCTgCv2gv/A+gmvwYBd4F5cwZjSYkEDg7Gbv+y7t9dEP yQ/c/lMILpvPJGIy2Aic7trfgjrTl86uoV1r2aBpdDJygqBW+CAN7qkQ47gUFkMC HHEXkEx20pBxLYIIaQNKEc1TJsbAH2TvrVL3hBkeJv748XaUUKhaFx+bPl/DvttJ jQoxNs4TqnUFVVZKScmcV1GucFQWokb3t4yeoPdBUu//ZIS7EYDhWPQmFI44WZFy /9RLN4sJ8eCzDcz1M9FUF9+boCpL0yMxRVYxN64uuFtGL4Mvjuv07z9ICOdjfKKu 8O4HKQFgswIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJBiGVqJX0m1hC5F/ZM04XTm Jh4CMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQzMzUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOoBAwQAaOouAwQAaOrEMA0GCSqG SIb3DQEBCwUAA4IBAQBMEGGivpX4MMKg+pkUIvFaFWnlyFQPBl+wUTUce/hd05Nc mSXYW/y5gZoKttNh1GSjDEm+yqas1otkJDHvDC46DApaFYSChPbDHiqW58i1oSSS m7ItHYB0KLSCVAIULXnMsb/LGtwmF/n2SuJn+rTQcRcRGI0C1So5l6Sx3GCqtxyU J1IU5EHwbBKmfCNvNK5YS54G+16ataTTqPnNawhUP9aJomvjFsrnvqQ2CUkXpISB ofGTPrbRR6y3ktiZH0Q0Mxs6HOu62asmihThgvbKry0ljCrcdppYRqr+BZyontrp YrDhcmGkpJBpVrsHsDXO0yZdpcAFBUiPl44lTqBM -----END CERTIFICATE-----Generated at Sun May 5 03:09:17 2024 by rpki-client on console-ams.rpki-client.org