$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa File: AS200325.roa (raw, json) Hash identifier: jMo99/YMxIW4okhYWNq3w1VcaS1pUCEIsxNfJLYK8i0= Subject key identifier: F0:71:DF:20:E1:4A:F7:D4:35:B1:0C:8F:67:3E:FD:22:34:E8:47:EE Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 122B7312829A8C1E69B56160093C2227B9C90CF7 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa Signing time: Mon 02 Sep 2024 23:13:12 +0000 ROA not before: Mon 02 Sep 2024 23:08:12 +0000 ROA not after: Mon 01 Sep 2025 23:13:12 +0000 asID: 200325 IP address blocks: 157.53.226.0/24 maxlen: 24 2607:f740:e00c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2b:73:12:82:9a:8c:1e:69:b5:61:60:09:3c:22:27:b9:c9:0c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Sep 2 23:08:12 2024 GMT Not After : Sep 1 23:13:12 2025 GMT Subject: CN=F071DF20E14AF7D435B10C8F673EFD2234E847EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:9a:90:7f:19:fa:f6:88:66:94:37:86:8c: 4f:22:93:bd:67:7b:87:e5:62:bf:99:c9:00:36:66: c6:2a:3a:ed:c9:ec:87:9e:72:60:ce:a8:85:ed:ce: 63:4a:3f:a3:61:8c:29:85:ca:02:80:9d:02:a3:c7: ff:83:5b:b8:72:43:9d:a2:2f:13:f5:6e:22:71:ee: 3c:b3:39:0a:8e:c1:9e:9b:b6:7f:b6:bf:0c:98:71: 74:63:59:53:88:e9:cb:50:bf:de:b0:f7:97:6c:94: 7d:4c:05:c4:f4:f4:9d:8a:2e:82:3b:21:27:26:30: f6:ca:96:f7:b9:ce:22:36:33:e5:8f:ab:49:33:e7: d3:2c:ed:0d:4c:84:73:54:fe:44:79:b3:81:f4:83: b7:13:73:48:78:5e:4a:83:35:5c:6a:73:0d:f9:d1: 21:22:ee:de:55:25:c4:d9:6a:0d:9b:dd:61:59:4e: 44:6c:45:c7:a7:88:d8:dd:08:e1:66:87:bb:1b:48: 95:75:45:d8:e0:da:33:d8:60:38:7e:7a:87:6c:17: df:5b:16:0a:31:da:1f:3c:99:eb:2b:68:43:27:e7: aa:1a:25:32:56:e6:ca:86:a9:96:02:dd:0c:29:d4: b8:b8:f7:1a:15:a9:6d:0d:09:e7:e5:99:aa:ff:bb: 3c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:71:DF:20:E1:4A:F7:D4:35:B1:0C:8F:67:3E:FD:22:34:E8:47:EE X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.226.0/24 IPv6: 2607:f740:e00c::/48 Signature Algorithm: sha256WithRSAEncryption 91:94:87:f2:52:af:07:bc:f7:59:ae:7d:d7:1c:a2:b2:bd:43: c9:50:10:92:6c:c2:10:46:af:a9:89:5a:ce:04:9d:fb:59:b5: 0d:1c:e7:45:3b:3c:e4:dc:57:76:d3:fa:77:26:fc:81:12:96: 05:36:5e:16:03:1a:7b:b1:d2:9e:66:ee:08:2a:60:65:a8:c4: b7:3f:47:34:f9:e2:07:4e:cd:ac:ea:50:10:3a:3b:e3:7d:a0: b0:ae:de:d3:5a:d7:4c:de:17:a3:4e:e6:9a:e0:bd:7c:60:68: 0a:a3:21:7e:01:88:d2:3a:70:b8:05:ca:5d:03:5e:4c:fb:21: 79:51:10:49:b3:02:85:47:f8:9a:9a:19:7e:3c:5f:a8:6b:57: 72:69:4d:5c:43:78:c3:f8:f2:18:92:9d:ec:65:97:ce:86:64: 69:07:6a:3b:3a:c3:6f:ab:02:ee:e6:42:ca:58:a0:59:58:a8: e5:a9:16:e5:1b:c0:83:bb:d1:1d:6c:0f:33:60:97:ab:a1:22: ab:81:37:66:58:dd:27:73:f0:ef:cf:ac:8d:b9:e3:82:29:d4: 06:a3:dc:ec:b9:7e:76:85:e0:f6:a3:70:3c:02:23:e1:fc:07: ee:97:e0:49:ce:6e:ce:d9:c6:af:3a:25:a5:ca:6a:d1:2e:0d: df:30:d7:71 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUEitzEoKajB5ptWFgCTwiJ7nJDPcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjQwOTAyMjMwODEyWhcNMjUwOTAxMjMxMzEy WjAzMTEwLwYDVQQDEyhGMDcxREYyMEUxNEFGN0Q0MzVCMTBDOEY2NzNFRkQyMjM0 RTg0N0VFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tmakH8Z+vaI ZpQ3hoxPIpO9Z3uH5WK/mckANmbGKjrtyeyHnnJgzqiF7c5jSj+jYYwphcoCgJ0C o8f/g1u4ckOdoi8T9W4ice48szkKjsGem7Z/tr8MmHF0Y1lTiOnLUL/esPeXbJR9 TAXE9PSdii6COyEnJjD2ypb3uc4iNjPlj6tJM+fTLO0NTIRzVP5EebOB9IO3E3NI eF5KgzVcanMN+dEhIu7eVSXE2WoNm91hWU5EbEXHp4jY3QjhZoe7G0iVdUXY4Noz 2GA4fnqHbBffWxYKMdofPJnrK2hDJ+eqGiUyVubKhqmWAt0MKdS4uPcaFaltDQnn 5Zmq/7s8fwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFPBx3yDhSvfUNbEMj2c+/SI0 6EfuMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzIwMDMyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJ014jAPBAIAAjAJAwcAJgf3QOAM MA0GCSqGSIb3DQEBCwUAA4IBAQCRlIfyUq8HvPdZrn3XHKKyvUPJUBCSbMIQRq+p iVrOBJ37WbUNHOdFOzzk3Fd20/p3JvyBEpYFNl4WAxp7sdKeZu4IKmBlqMS3P0c0 +eIHTs2s6lAQOjvjfaCwrt7TWtdM3hejTuaa4L18YGgKoyF+AYjSOnC4BcpdA15M +yF5URBJswKFR/iamhl+PF+oa1dyaU1cQ3jD+PIYkp3sZZfOhmRpB2o7OsNvqwLu 5kLKWKBZWKjlqRblG8CDu9EdbA8zYJeroSKrgTdmWN0nc/Dvz6yNueOCKdQGo9zs uX52heD2o3A8AiPh/Aful+BJzm7O2cavOiWlymrRLg3fMNdx -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:01 2024 by rpki-client on console-ams.rpki-client.org