$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: 6BLFX471TFk7fd/TXLlU6wjv3noVSITF/oUb5zLPguQ= Subject key identifier: 55:FC:AA:66:0A:A0:6F:15:42:09:52:B1:1F:24:9D:54:D7:52:BD:F9 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 6AE1E4848E547E4A0E764729C71DFD5B9269662D Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS0.roa Signing time: Mon 14 Oct 2024 17:13:22 +0000 ROA not before: Mon 14 Oct 2024 17:08:22 +0000 ROA not after: Mon 13 Oct 2025 17:13:22 +0000 asID: 0 IP address blocks: 66.85.248.0/24 maxlen: 24 148.163.200.0/24 maxlen: 24 209.170.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 17:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:e1:e4:84:8e:54:7e:4a:0e:76:47:29:c7:1d:fd:5b:92:69:66:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Oct 14 17:08:22 2024 GMT Not After : Oct 13 17:13:22 2025 GMT Subject: CN=55FCAA660AA06F15420952B11F249D54D752BDF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:f6:70:64:6a:11:9f:26:0a:d6:11:1c:b8: d9:cf:28:38:01:03:a7:60:9e:72:da:cd:46:a9:1a: a8:80:de:1b:55:20:2f:e3:3f:21:2a:7b:b4:5a:9a: 84:d6:72:4f:17:84:26:28:1c:40:a9:eb:97:54:45: f1:1d:7a:88:85:53:78:4c:b2:ef:b1:9d:0b:48:13: 0d:2d:c4:6c:8c:9d:a4:b1:24:c8:15:72:a0:a8:03: 17:d1:a4:0f:6a:c1:d0:3d:a6:30:d3:33:c9:52:01: 91:48:c4:ef:de:44:90:86:7c:87:26:09:58:44:73: dc:2d:f2:5a:e1:7c:de:b4:cd:1f:d8:00:a4:d3:bc: 48:1b:20:28:0b:c1:59:f7:8c:b7:0e:8a:e7:a0:f1: b2:e4:55:14:e7:eb:97:8a:69:20:ae:61:f9:00:6e: 86:5a:8e:0b:20:3e:24:84:d0:62:2a:b0:39:43:43: b4:da:2a:61:68:57:80:9b:10:b4:0c:96:4c:35:c2: 07:22:df:4b:02:4f:67:24:e8:cc:39:ee:00:6d:36: 4a:ff:1c:b5:19:dd:25:06:4c:46:24:59:42:22:88: 5d:bb:ba:6f:36:4c:b9:05:14:50:a0:57:3b:7a:b4: 64:52:86:51:ee:2f:0c:d0:4f:71:bb:99:99:f2:08: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:FC:AA:66:0A:A0:6F:15:42:09:52:B1:1F:24:9D:54:D7:52:BD:F9 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.85.248.0/24 148.163.200.0/24 209.170.157.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:01:7d:38:84:02:be:e6:58:b9:e5:82:7e:72:c0:67:70:3a: b7:ef:a2:2a:59:69:07:1e:36:ad:ad:3c:45:c5:ed:57:93:7a: 38:dc:b6:ca:28:d6:10:88:cc:a4:86:cb:75:3b:97:09:a3:40: 4e:0b:9c:0b:90:69:a6:47:f5:bf:0e:e6:5c:a9:bd:9f:83:6b: 50:3c:bb:7b:45:78:4d:02:69:c0:30:49:9e:71:36:1b:f5:4b: 4b:7a:eb:6e:ee:f5:bb:03:c7:46:22:08:72:8f:aa:b8:71:c3: 4f:d1:fc:36:67:df:f2:44:26:b9:51:b1:4d:8b:19:91:88:34: 2b:16:a0:e9:37:c1:88:01:72:4d:6c:f8:89:a6:30:bc:3e:f1: cb:6f:ed:b8:27:2b:4c:b2:8f:45:ac:10:52:32:79:49:c6:82: 07:87:63:9d:a1:79:d1:5f:fd:fd:b4:82:dc:46:45:22:b6:3c: ff:12:37:1b:5d:11:78:b7:f6:7a:14:cb:e6:7c:49:77:ca:dd: 06:e3:91:c6:05:93:bf:91:8f:99:23:1d:78:54:e5:f4:18:a0: 1e:6e:28:1f:50:8f:86:57:0e:dc:7b:94:e5:4d:35:1d:68:ae: 10:d6:92:1a:f6:be:d8:f6:dc:da:75:c7:28:35:0a:b1:7c:fe: 4b:70:d2:dd -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIUauHkhI5UfkoOdkcpxx39W5JpZi0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQxMDE0MTcwODIyWhcNMjUxMDEzMTcxMzIy WjAzMTEwLwYDVQQDEyg1NUZDQUE2NjBBQTA2RjE1NDIwOTUyQjExRjI0OUQ1NEQ3 NTJCREY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuon2cGRqEZ8m CtYRHLjZzyg4AQOnYJ5y2s1GqRqogN4bVSAv4z8hKnu0WpqE1nJPF4QmKBxAqeuX VEXxHXqIhVN4TLLvsZ0LSBMNLcRsjJ2ksSTIFXKgqAMX0aQPasHQPaYw0zPJUgGR SMTv3kSQhnyHJglYRHPcLfJa4XzetM0f2ACk07xIGyAoC8FZ94y3DornoPGy5FUU 5+uXimkgrmH5AG6GWo4LID4khNBiKrA5Q0O02iphaFeAmxC0DJZMNcIHIt9LAk9n JOjMOe4AbTZK/xy1Gd0lBkxGJFlCIohdu7pvNky5BRRQoFc7erRkUoZR7i8M0E9x u5mZ8ggChQIDAQABo4IChjCCAoIwHQYDVR0OBBYEFFX8qmYKoG8VQglSsR8knVTX Ur35MB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYB BQUHAQcBAf8EHDAaMBgEAgABMBIDBABCVfgDBACUo8gDBADRqp0wDQYJKoZIhvcN AQELBQADggEBAE0BfTiEAr7mWLnlgn5ywGdwOrfvoipZaQceNq2tPEXF7VeTejjc tsoo1hCIzKSGy3U7lwmjQE4LnAuQaaZH9b8O5lypvZ+Da1A8u3tFeE0CacAwSZ5x Nhv1S0t6627u9bsDx0YiCHKPqrhxw0/R/DZn3/JEJrlRsU2LGZGINCsWoOk3wYgB ck1s+ImmMLw+8ctv7bgnK0yyj0WsEFIyeUnGggeHY52hedFf/f20gtxGRSK2PP8S NxtdEXi39noUy+Z8SXfK3QbjkcYFk7+Rj5kjHXhU5fQYoB5uKB9Qj4ZXDtx7lOVN NR1orhDWkhr2vtj23Np1xyg1CrF8/ktw0t0= -----END CERTIFICATE-----Generated at Thu Nov 21 18:49:10 2024 by rpki-client on console-ams.rpki-client.org