$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: SXc83GRWEPPZm9gEQV5K1Yq3rnfWf/P8mCLMBhl1e74= Subject key identifier: F5:EF:D3:72:AB:9B:C4:32:53:1A:67:67:BB:CB:1E:6B:51:35:81:87 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 4734CF27FECFCC9B3F7BCEA8816B689B827FAFD4 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS0.roa Signing time: Mon 13 Nov 2023 16:59:39 +0000 ROA not before: Mon 13 Nov 2023 16:54:39 +0000 ROA not after: Mon 11 Nov 2024 16:59:39 +0000 asID: 0 IP address blocks: 66.85.248.0/24 maxlen: 24 148.163.200.0/24 maxlen: 24 209.170.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Apr 2024 07:38:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:34:cf:27:fe:cf:cc:9b:3f:7b:ce:a8:81:6b:68:9b:82:7f:af:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Nov 13 16:54:39 2023 GMT Not After : Nov 11 16:59:39 2024 GMT Subject: CN=F5EFD372AB9BC432531A6767BBCB1E6B51358187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:17:6b:ea:24:77:6d:ff:74:53:72:4b:19:f0: 21:df:d8:d9:d6:0e:4c:e9:df:f1:df:d7:e5:b1:22: 35:fe:d0:f8:8f:d0:4a:cc:cb:f6:92:f3:15:ab:e8: c2:3f:41:1c:f2:eb:d2:be:68:ec:51:6b:08:5b:77: 33:28:dc:ee:b0:b7:aa:f7:86:87:eb:f4:ed:1e:46: e3:7b:4f:54:6d:f4:69:56:2e:cb:6a:92:c1:44:73: c8:d8:51:ae:a0:5d:13:af:d6:70:d1:e7:42:74:a7: fd:df:0c:62:61:aa:d9:62:ab:4c:10:d9:3f:cf:1f: 16:41:ec:ad:b0:bd:2c:a8:a1:0f:ec:00:85:24:cc: 0c:d4:76:00:87:da:01:15:66:20:54:bf:ab:c6:1c: 15:be:ac:ed:bf:a2:35:12:27:93:a0:09:c9:66:d8: 65:5c:47:ab:4d:ae:d0:36:2a:25:09:22:af:50:6f: ef:85:80:06:da:78:18:64:3a:f2:c1:9e:78:93:e6: 87:a8:e4:c7:41:76:05:a6:60:82:42:8d:14:f8:d7: 10:6c:ef:2d:32:42:04:28:9b:d3:20:82:cc:53:3b: 1d:0f:7d:41:dd:c9:b5:71:88:66:f5:84:46:d6:69: 1e:08:10:32:6a:74:5a:58:f0:bf:09:92:47:05:fe: 40:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:EF:D3:72:AB:9B:C4:32:53:1A:67:67:BB:CB:1E:6B:51:35:81:87 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.85.248.0/24 148.163.200.0/24 209.170.157.0/24 Signature Algorithm: sha256WithRSAEncryption 46:56:50:f5:82:b2:3e:db:b2:da:57:85:4b:2b:e7:6d:fb:1c: 66:32:d0:cc:29:89:7e:20:3c:17:f2:31:42:fd:b8:7e:c7:26: d1:8f:51:58:21:1f:02:86:3d:e8:eb:11:8f:24:4d:bf:cf:09: de:e6:15:a9:26:9b:57:73:61:98:99:d0:4e:9c:c5:8e:48:2e: f6:31:84:0a:47:ed:60:0a:89:db:01:fd:99:05:9d:25:d5:ad: c6:44:17:b3:c7:98:df:06:59:cc:d8:44:59:f6:0f:34:66:cb: e7:0f:92:03:ee:03:f2:8f:94:1e:1a:9b:b4:ef:f2:72:e6:51: c4:17:3e:02:08:2b:10:07:61:9a:8e:a2:86:32:0b:20:d7:2c: 9f:0b:07:b4:2a:2e:e9:fd:ea:22:40:53:3b:2c:e8:9a:7d:06: 35:59:61:09:c0:2a:00:c8:13:10:72:08:f3:79:a0:72:20:8f: 41:9e:81:74:93:1d:68:f4:8c:da:9d:67:4a:e1:e4:cc:12:e2: fa:5e:94:cd:e5:e1:36:08:72:4d:41:fb:9b:f6:b4:29:4a:60: 6f:39:ef:33:dd:cf:45:89:e5:89:45:6d:68:8b:de:c5:95:73: 05:e5:5b:ae:27:f0:97:f8:7d:ee:37:ee:b7:cc:24:26:89:ef: d3:2d:8f:67 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgIURzTPJ/7PzJs/e86ogWtom4J/r9QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjMxMTEzMTY1NDM5WhcNMjQxMTExMTY1OTM5 WjAzMTEwLwYDVQQDEyhGNUVGRDM3MkFCOUJDNDMyNTMxQTY3NjdCQkNCMUU2QjUx MzU4MTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bdr6iR3bf90 U3JLGfAh39jZ1g5M6d/x39flsSI1/tD4j9BKzMv2kvMVq+jCP0Ec8uvSvmjsUWsI W3czKNzusLeq94aH6/TtHkbje09UbfRpVi7LapLBRHPI2FGuoF0Tr9Zw0edCdKf9 3wxiYarZYqtMENk/zx8WQeytsL0sqKEP7ACFJMwM1HYAh9oBFWYgVL+rxhwVvqzt v6I1EieToAnJZthlXEerTa7QNiolCSKvUG/vhYAG2ngYZDrywZ54k+aHqOTHQXYF pmCCQo0U+NcQbO8tMkIEKJvTIILMUzsdD31B3cm1cYhm9YRG1mkeCBAyanRaWPC/ CZJHBf5AJQIDAQABo4IChjCCAoIwHQYDVR0OBBYEFPXv03Krm8QyUxpnZ7vLHmtR NYGHMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYIKwYB BQUHAQcBAf8EHDAaMBgEAgABMBIDBABCVfgDBACUo8gDBADRqp0wDQYJKoZIhvcN AQELBQADggEBAEZWUPWCsj7bstpXhUsr5237HGYy0MwpiX4gPBfyMUL9uH7HJtGP UVghHwKGPejrEY8kTb/PCd7mFakmm1dzYZiZ0E6cxY5ILvYxhApH7WAKidsB/ZkF nSXVrcZEF7PHmN8GWczYRFn2DzRmy+cPkgPuA/KPlB4am7Tv8nLmUcQXPgIIKxAH YZqOooYyCyDXLJ8LB7QqLun96iJAUzss6Jp9BjVZYQnAKgDIExByCPN5oHIgj0Ge gXSTHWj0jNqdZ0rh5MwS4vpelM3l4TYIck1B+5v2tClKYG857zPdz0WJ5YlFbWiL 3sWVcwXlW64n8Jf4fe437rfMJCaJ79Mtj2c= -----END CERTIFICATE-----Generated at Thu Apr 25 07:18:00 2024 by rpki-client on console-fra.rpki-client.org