$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa File: AS200325.roa (raw, json) Hash identifier: TIJ9iSXBFmLc8v1qHIyIPbAfcUQTM2p0oKm3P6mvPn0= Subject key identifier: A5:6F:FE:81:3B:DA:91:48:1C:28:C5:AF:1B:9C:46:34:83:97:07:A6 Certificate issuer: /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Certificate serial: 44C08639297C26844797F702899E7F5E3FFC5060 Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa Signing time: Mon 02 Oct 2023 22:55:40 +0000 ROA not before: Mon 02 Oct 2023 22:50:40 +0000 ROA not after: Mon 30 Sep 2024 22:55:40 +0000 asID: 200325 IP address blocks: 157.53.226.0/24 maxlen: 24 2607:f740:e00c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 May 2024 08:04:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:c0:86:39:29:7c:26:84:47:97:f7:02:89:9e:7f:5e:3f:fc:50:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d Validity Not Before: Oct 2 22:50:40 2023 GMT Not After : Sep 30 22:55:40 2024 GMT Subject: CN=A56FFE813BDA91481C28C5AF1B9C4634839707A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a9:90:b3:2f:ee:8e:19:d9:0b:ac:46:8a:93: f2:76:72:23:ea:b9:b1:d8:73:8f:16:4b:48:bb:12: 04:84:e7:0c:af:83:47:38:e3:ec:d1:47:dc:60:8e: 60:2a:4f:3f:da:28:29:30:85:16:f9:fd:12:02:8a: 18:13:46:73:1b:02:79:7a:e1:d0:0b:e6:1c:00:49: ce:41:9d:f3:ae:76:02:1a:13:c4:ec:d9:34:00:a1: 6b:35:b8:86:cb:d5:84:60:c3:13:36:d5:b8:8c:74: 84:dd:3b:33:a1:fa:9c:b5:76:bc:fe:a5:b1:30:0f: da:54:a1:5e:d0:df:41:13:56:cd:47:3c:39:18:cc: 28:c9:97:4d:81:aa:79:4c:e8:0d:9f:b9:c6:62:3a: cd:04:17:da:4c:68:09:0b:da:70:23:cd:7f:51:67: 1d:7d:89:aa:20:15:d3:cd:be:38:f4:f5:c7:0b:25: f5:57:47:ee:f2:82:cc:8c:ff:21:80:fa:40:d5:0e: 47:aa:36:e1:e0:18:c0:df:e4:65:b6:4f:75:85:cd: 97:32:39:09:3c:15:df:a1:88:ba:b1:eb:fb:53:b9: 26:72:74:e1:6f:16:86:57:b2:5a:57:b4:7a:ad:26: 0c:0e:17:0c:d9:28:0d:76:91:1d:6c:01:12:92:7c: 45:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:6F:FE:81:3B:DA:91:48:1C:28:C5:AF:1B:9C:46:34:83:97:07:A6 X509v3 Authority Key Identifier: keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS200325.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.53.226.0/24 IPv6: 2607:f740:e00c::/48 Signature Algorithm: sha256WithRSAEncryption 2d:6b:50:35:c4:b2:72:aa:76:27:0d:4b:18:86:a2:ce:ae:29: bf:77:a2:5f:5b:5f:09:d2:37:63:57:03:41:6c:6c:84:ed:e6: 6d:eb:c2:90:44:b5:78:02:a9:41:36:16:04:33:37:dd:2f:53: 9d:b3:f0:6d:1d:5f:c3:e3:32:23:e8:d9:a0:f4:09:12:44:c5: 39:5c:68:3e:94:31:b2:22:30:8e:86:f0:b8:09:4e:89:88:ed: db:49:42:d3:e3:f2:9c:8f:e5:9a:ec:26:24:40:88:b8:5f:ba: fc:d9:19:5c:72:df:fc:8f:2f:ac:c7:b9:32:2a:23:6d:ff:42: 4d:1f:e9:cd:bf:53:d4:f7:31:31:26:e6:53:2f:55:af:73:86: dc:04:12:fc:72:af:c8:97:57:58:99:63:07:8d:30:37:f5:e2: d6:14:84:55:4f:63:18:51:ad:b3:ab:ef:59:b8:2a:31:77:34: ed:2f:33:b3:59:29:ca:34:27:33:2b:cd:e7:84:90:43:0a:99: 0f:02:91:6e:78:9a:b6:b6:68:a4:a0:7f:b8:8d:e1:1a:d8:fc: 82:7b:fe:81:9a:54:54:b3:f8:a8:cc:ec:09:e3:fa:59:64:d1: 79:73:0c:ee:59:ab:cf:4c:49:66:e2:49:1e:bf:8b:6d:46:10: 96:e5:9d:8c -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIURMCGOSl8JoRHl/cCiZ5/Xj/8UGAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWZmNGUyNWM0NThlNDRlMjUyOTIyZGNmNTEyYTU2OGRm ZTA5ODI0MmQwMGNiNjVhM2QwHhcNMjMxMDAyMjI1MDQwWhcNMjQwOTMwMjI1NTQw WjAzMTEwLwYDVQQDEyhBNTZGRkU4MTNCREE5MTQ4MUMyOEM1QUYxQjlDNDYzNDgz OTcwN0E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qmQsy/ujhnZ C6xGipPydnIj6rmx2HOPFktIuxIEhOcMr4NHOOPs0UfcYI5gKk8/2igpMIUW+f0S AooYE0ZzGwJ5euHQC+YcAEnOQZ3zrnYCGhPE7Nk0AKFrNbiGy9WEYMMTNtW4jHSE 3TszofqctXa8/qWxMA/aVKFe0N9BE1bNRzw5GMwoyZdNgap5TOgNn7nGYjrNBBfa TGgJC9pwI81/UWcdfYmqIBXTzb449PXHCyX1V0fu8oLMjP8hgPpA1Q5Hqjbh4BjA 3+Rltk91hc2XMjkJPBXfoYi6sev7U7kmcnThbxaGV7JaV7R6rSYMDhcM2SgNdpEd bAESknxFNQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFKVv/oE72pFIHCjFrxucRjSD lwemMB8GA1UdIwQYMBaAFACZ3qsHPv10wlDAo4KyUBK1CCruMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzZjY4NjYxMDg0Yjg2LzAv MDA5OURFQUIwNzNFRkQ3NEMyNTBDMEEzODJCMjUwMTJCNTA4MkFFRS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzMwZDQyMmRjLTk4ZDEtNDMwNC05ZjhhLTA5NzEyN2UxNWQ1ZS8xZmY0 ZTI1YzQ1OGU0NGUyNTI5MjJkY2Y1MTJhNTY4ZGZlMDk4MjQyZDAwY2I2NWEzZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODNmNjg2NjEw ODRiODYvMC9BUzIwMDMyNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAJ014jAPBAIAAjAJAwcAJgf3QOAM MA0GCSqGSIb3DQEBCwUAA4IBAQAta1A1xLJyqnYnDUsYhqLOrim/d6JfW18J0jdj VwNBbGyE7eZt68KQRLV4AqlBNhYEMzfdL1Ods/BtHV/D4zIj6Nmg9AkSRMU5XGg+ lDGyIjCOhvC4CU6JiO3bSULT4/Kcj+Wa7CYkQIi4X7r82Rlcct/8jy+sx7kyKiNt /0JNH+nNv1PU9zExJuZTL1Wvc4bcBBL8cq/Il1dYmWMHjTA39eLWFIRVT2MYUa2z q+9ZuCoxdzTtLzOzWSnKNCczK83nhJBDCpkPApFueJq2tmikoH+4jeEa2PyCe/6B mlRUs/iozOwJ4/pZZNF5cwzuWavPTElm4kkev4ttRhCW5Z2M -----END CERTIFICATE-----Generated at Sun May 12 07:31:09 2024 by rpki-client on console-ams.rpki-client.org