$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: /J45Y8FQ1EoElLU/xFUCX4jh3/y1L5+FkHA+7vfDBW0= Subject key identifier: 85:CA:07:14:90:43:DB:84:CF:E7:6C:EA:03:C0:A2:B9:6E:8F:FA:2C Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 1C15017EAFDE82141F4640928363BDF4ECB48E99 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS23470.roa Signing time: Wed 24 Apr 2024 19:01:49 +0000 ROA not before: Wed 24 Apr 2024 18:56:49 +0000 ROA not after: Wed 23 Apr 2025 19:01:49 +0000 asID: 23470 IP address blocks: 157.254.153.0/24 maxlen: 24 157.254.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 17:16:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:15:01:7e:af:de:82:14:1f:46:40:92:83:63:bd:f4:ec:b4:8e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 24 18:56:49 2024 GMT Not After : Apr 23 19:01:49 2025 GMT Subject: CN=85CA07149043DB84CFE76CEA03C0A2B96E8FFA2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c7:7d:54:50:8f:b3:b3:0b:06:a7:55:4a:ab: e4:03:dd:ec:9e:31:77:ec:21:e4:cf:6a:f7:e7:df: 4b:2a:cf:70:a5:17:5c:18:ea:45:ff:28:5a:ca:9b: 40:a6:33:f6:d8:0b:68:00:7c:a4:97:2b:d6:8b:06: 3b:1e:58:42:87:10:84:b5:4b:29:f3:70:d2:c7:e8: 98:b9:c9:72:aa:85:a3:44:58:ca:f7:fb:b2:bc:89: f7:86:64:7f:ff:c7:70:04:44:b1:8f:d4:60:7a:87: d9:b8:48:4e:85:c0:3d:c6:52:36:4f:d9:a1:cc:a0: 20:bc:bb:6c:8a:55:e4:ab:88:55:cf:ac:09:a0:e2: 45:4f:c8:a7:94:78:77:fe:e6:fe:23:de:18:9d:aa: 24:32:72:c5:af:91:18:c6:64:0e:1f:e3:f5:7c:33: 9f:0f:4a:be:5e:f1:70:26:e9:e3:5f:f0:b0:62:6b: e8:1c:b8:44:73:ac:ff:71:f4:4f:22:79:73:4e:60: 79:be:9f:1b:b9:fe:70:b9:2e:ed:0e:24:e0:36:d4: f1:30:09:d2:06:47:3f:7a:a1:8a:1b:c6:f0:ec:5f: 25:96:c2:8f:d1:4a:54:e9:76:9d:51:d5:00:52:cb: 39:99:fb:fc:c7:1e:94:d1:2c:ae:0f:cf:43:2e:72: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CA:07:14:90:43:DB:84:CF:E7:6C:EA:03:C0:A2:B9:6E:8F:FA:2C X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.153.0/24 157.254.158.0/24 Signature Algorithm: sha256WithRSAEncryption 07:34:60:cf:18:4d:74:4d:04:5c:ba:1a:39:57:e9:1d:b9:94: c8:76:7c:47:1b:ab:8d:b5:ba:a6:a5:6a:cc:f4:a3:a1:9d:05: 22:e4:d8:a0:07:5b:50:06:4b:06:42:c5:71:d8:f6:11:8d:e5: 3d:bc:19:57:e8:01:ca:12:d7:e7:13:0f:8b:b0:a0:02:9d:0a: 15:f8:39:d1:6d:97:bf:d6:23:2e:a3:37:89:7d:bd:7a:77:8b: 18:f2:93:1a:e2:f1:e2:e9:fd:cb:99:fb:d4:44:24:4a:3c:18: 07:c9:d6:1e:a9:08:b6:c9:03:a9:9b:e0:83:fb:cc:10:35:ab: af:83:a6:96:0d:d5:cd:f3:d0:fe:f6:39:fa:bc:32:f7:a6:c7: b5:e8:13:aa:a4:ea:d5:9c:32:aa:61:1b:ae:a9:ea:b5:6c:f1: 8d:09:bd:01:81:f4:8a:9f:67:89:2b:2f:34:cd:40:7f:23:f2: 81:4d:f7:7e:0d:23:6b:73:06:8d:3a:97:54:c1:43:e4:39:88: 64:62:88:2d:c8:32:58:56:92:61:ea:3f:0e:d9:1e:49:e7:cd: 33:6a:02:56:13:30:f0:f2:3e:99:0b:26:c0:19:88:9e:44:d6: e1:15:98:bc:a2:a4:4a:a8:2a:48:12:ae:ee:ad:f4:7b:b7:8f: cc:f3:3e:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIUHBUBfq/eghQfRkCSg2O99Oy0jpkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNDI0MTg1NjQ5WhcNMjUwNDIzMTkwMTQ5 WjAzMTEwLwYDVQQDEyg4NUNBMDcxNDkwNDNEQjg0Q0ZFNzZDRUEwM0MwQTJCOTZF OEZGQTJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8d9VFCPs7ML BqdVSqvkA93snjF37CHkz2r3599LKs9wpRdcGOpF/yhayptApjP22AtoAHyklyvW iwY7HlhChxCEtUsp83DSx+iYuclyqoWjRFjK9/uyvIn3hmR//8dwBESxj9RgeofZ uEhOhcA9xlI2T9mhzKAgvLtsilXkq4hVz6wJoOJFT8inlHh3/ub+I94YnaokMnLF r5EYxmQOH+P1fDOfD0q+XvFwJunjX/CwYmvoHLhEc6z/cfRPInlzTmB5vp8buf5w uS7tDiTgNtTxMAnSBkc/eqGKG8bw7F8llsKP0UpU6XadUdUAUss5mfv8xx6U0Syu D89DLnKMowIDAQABo4IChDCCAoAwHQYDVR0OBBYEFIXKBxSQQ9uEz+ds6gPAorlu j/osMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUG CCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAnf6ZAwQAnf6eMA0GCSqGSIb3DQEB CwUAA4IBAQAHNGDPGE10TQRcuho5V+kduZTIdnxHG6uNtbqmpWrM9KOhnQUi5Nig B1tQBksGQsVx2PYRjeU9vBlX6AHKEtfnEw+LsKACnQoV+DnRbZe/1iMuozeJfb16 d4sY8pMa4vHi6f3LmfvURCRKPBgHydYeqQi2yQOpm+CD+8wQNauvg6aWDdXN89D+ 9jn6vDL3pse16BOqpOrVnDKqYRuuqeq1bPGNCb0BgfSKn2eJKy80zUB/I/KBTfd+ DSNrcwaNOpdUwUPkOYhkYogtyDJYVpJh6j8O2R5J580zagJWEzDw8j6ZCybAGYie RNbhFZi8oqRKqCpIEq7urfR7t4/M8z7e -----END CERTIFICATE-----Generated at Wed May 1 16:08:58 2024 by rpki-client on console-fra.rpki-client.org