$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa File: AS137409.roa (raw, json) Hash identifier: MkPRaORpL6rMQb3SVUGg8tTQ9DUN/szQhouHXXZXNyY= Subject key identifier: 06:A8:28:E3:EB:39:A9:AA:67:94:4A:02:28:AB:F6:0A:FB:5F:BC:93 Certificate issuer: /CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Certificate serial: 62DBA2D6D1EEEA449AD4BBDE3348EA99551EC0D6 Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa Signing time: Tue 05 Dec 2023 08:01:11 +0000 ROA not before: Tue 05 Dec 2023 07:56:11 +0000 ROA not after: Tue 03 Dec 2024 08:01:11 +0000 asID: 137409 IP address blocks: 140.99.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Apr 2024 17:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:db:a2:d6:d1:ee:ea:44:9a:d4:bb:de:33:48:ea:99:55:1e:c0:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05 Validity Not Before: Dec 5 07:56:11 2023 GMT Not After : Dec 3 08:01:11 2024 GMT Subject: CN=06A828E3EB39A9AA67944A0228ABF60AFB5FBC93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:16:25:d2:2d:06:8c:ee:5f:aa:88:87:37: 40:e4:df:ef:62:ef:8e:8f:ec:c6:fa:cd:fd:ee:89: e7:48:00:64:17:7c:53:e6:71:34:4e:a1:5b:85:bc: 79:48:4a:d3:a5:7b:a4:cd:2e:fd:fe:fe:c4:c8:fe: 81:d1:eb:d9:9f:92:bc:b6:7d:d8:46:98:40:45:f1: 9e:10:34:27:4f:e4:cf:b6:0e:0d:c6:77:c7:f1:16: d8:88:41:35:7b:44:60:70:da:f8:12:59:07:73:15: b9:78:4e:39:b5:48:b7:71:e3:a0:c1:b0:89:bc:e1: 2c:65:07:70:20:da:55:e0:65:7e:4c:3b:23:55:1a: b4:f3:20:9f:6d:90:2f:b2:05:0b:0f:97:ee:34:33: 94:7a:fb:42:b5:1e:3d:ed:c7:81:90:4c:0a:a3:4b: c6:12:eb:91:dd:59:c9:d7:e3:49:12:ed:23:aa:13: 20:6d:25:10:63:30:69:6c:21:97:57:98:27:0a:1d: 72:2a:e3:c9:26:29:a3:23:1c:a0:4f:d7:fe:91:90: 62:53:ba:68:66:44:57:14:77:07:d8:d2:db:8f:2d: 53:5d:45:ac:df:f3:f3:92:8d:70:7f:32:63:a2:3b: 4f:00:5f:d5:3a:08:33:1e:1d:62:96:4f:25:05:ca: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A8:28:E3:EB:39:A9:AA:67:94:4A:02:28:AB:F6:0A:FB:5F:BC:93 X509v3 Authority Key Identifier: keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS137409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 140.99.0.0/23 Signature Algorithm: sha256WithRSAEncryption 98:5c:16:a3:84:1c:6d:66:c6:8b:63:21:07:83:44:e4:63:5e: 21:d0:3c:7e:cb:2a:9e:40:84:f4:da:34:4c:d1:ce:c2:f4:39: 06:62:0b:35:ee:5b:c1:fb:f6:e5:a1:06:8d:d9:4e:cd:7c:88: a5:ff:55:14:06:07:04:14:c3:56:b1:20:63:8c:bc:a5:94:c7: 15:4c:1f:b6:bc:1f:19:4e:7c:0f:aa:a3:c4:79:66:97:ce:ac: 11:16:46:58:2e:ad:2e:b6:61:53:c9:9c:33:3e:f5:d6:4b:4e: d1:ec:f6:6d:c9:19:4e:d8:7b:e1:d8:98:69:f1:40:a4:7b:f4: 7f:1a:87:0e:ed:d3:01:35:68:18:62:ae:e0:4a:5c:00:f6:28: 53:d6:2f:9e:19:97:b7:0a:7e:41:0b:fb:51:d2:d3:dc:0d:23: 3b:ce:e4:11:3e:88:c1:35:5a:a4:e0:bc:ee:87:c0:88:03:96: e5:e0:71:98:80:37:a4:cb:73:a3:a7:f3:9c:82:7b:d9:5d:87: 84:ef:08:02:0c:81:06:8f:44:39:60:1d:90:65:5a:44:95:73: 8c:5b:cb:5c:28:ec:c4:17:36:48:e0:82:58:30:7a:b4:c0:f4: 1c:2e:d1:28:8a:7e:18:e1:c8:47:48:14:51:cb:94:b2:51:0c: db:cf:aa:f4 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUYtui1tHu6kSa1LveM0jqmVUewNYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4 Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjMxMjA1MDc1NjExWhcNMjQxMjAzMDgwMTEx WjAzMTEwLwYDVQQDEygwNkE4MjhFM0VCMzlBOUFBNjc5NDRBMDIyOEFCRjYwQUZC NUZCQzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYWJdItBozu X6qIhzdA5N/vYu+Oj+zG+s397onnSABkF3xT5nE0TqFbhbx5SErTpXukzS79/v7E yP6B0evZn5K8tn3YRphARfGeEDQnT+TPtg4NxnfH8RbYiEE1e0RgcNr4ElkHcxW5 eE45tUi3ceOgwbCJvOEsZQdwINpV4GV+TDsjVRq08yCfbZAvsgULD5fuNDOUevtC tR497ceBkEwKo0vGEuuR3VnJ1+NJEu0jqhMgbSUQYzBpbCGXV5gnCh1yKuPJJimj IxygT9f+kZBiU7poZkRXFHcH2NLbjy1TXUWs3/Pzko1wfzJjojtPAF/VOggzHh1i lk8lBcqFQwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAaoKOPrOamqZ5RKAiir9gr7 X7yTMB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3 ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw YTcwYzgvMC9BUzEzNzQwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAYxjADANBgkqhkiG9w0BAQsFAAOC AQEAmFwWo4QcbWbGi2MhB4NE5GNeIdA8fssqnkCE9No0TNHOwvQ5BmILNe5bwfv2 5aEGjdlOzXyIpf9VFAYHBBTDVrEgY4y8pZTHFUwftrwfGU58D6qjxHlml86sERZG WC6tLrZhU8mcMz711ktO0ez2bckZTth74diYafFApHv0fxqHDu3TATVoGGKu4Epc APYoU9YvnhmXtwp+QQv7UdLT3A0jO87kET6IwTVapOC87ofAiAOW5eBxmIA3pMtz o6fznIJ72V2HhO8IAgyBBo9EOWAdkGVaRJVzjFvLXCjsxBc2SOCCWDB6tMD0HC7R KIp+GOHIR0gUUcuUslEM28+q9A== -----END CERTIFICATE-----Generated at Tue Apr 23 18:30:06 2024 by rpki-client on console-fra.rpki-client.org