$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1239.roa File: AS1239.roa (raw, json) Hash identifier: vy46hJdGFLg6fWpP1oHtqmdimOPLY1PsFIRLmyd5bYM= Subject key identifier: 8F:13:E0:04:D3:CD:11:4D:AD:8A:3D:31:F5:5A:FE:48:DF:C8:21:3F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 101ADD4CDF6FB4EDFC0742A42BCC11B0241024A5 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1239.roa Signing time: Thu 23 Mar 2023 00:00:11 +0000 ROA not before: Wed 22 Mar 2023 23:55:11 +0000 ROA not after: Thu 21 Mar 2024 00:00:11 +0000 asID: 1239 IP address blocks: 104.234.33.0/24 maxlen: 24 104.234.44.0/24 maxlen: 24 104.234.55.0/24 maxlen: 24 104.234.57.0/24 maxlen: 24 104.234.74.0/24 maxlen: 24 104.234.76.0/24 maxlen: 24 104.234.85.0/24 maxlen: 24 104.234.97.0/24 maxlen: 24 104.234.132.0/24 maxlen: 24 104.234.182.0/24 maxlen: 24 104.234.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Mar 2023 03:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1a:dd:4c:df:6f:b4:ed:fc:07:42:a4:2b:cc:11:b0:24:10:24:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 22 23:55:11 2023 GMT Not After : Mar 21 00:00:11 2024 GMT Subject: CN=8F13E004D3CD114DAD8A3D31F55AFE48DFC8213F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:ec:87:d4:69:8e:ac:f4:c9:74:06:15:11: e8:ed:96:e9:ff:35:ed:18:6f:60:83:f2:64:12:82: 35:46:bb:b5:8a:15:85:86:d4:c7:e7:4d:2a:22:47: 40:c0:93:7c:ee:55:6b:fa:8f:8b:bc:09:7f:c7:07: 3a:75:f4:e7:e3:06:6c:bc:a5:7e:62:88:4d:90:e5: 8f:83:b9:3f:52:3b:80:df:ec:72:a2:c4:af:19:41: 2c:25:cb:ce:f6:9a:91:96:bb:ae:57:4e:a3:d0:59: c1:2e:4b:50:4d:c2:b7:b6:aa:91:62:1e:03:46:1b: 48:48:21:56:28:bb:7e:39:dc:c5:7e:64:e7:d0:69: 74:d8:38:c0:d1:2d:27:01:52:05:b8:dc:60:99:ec: d3:34:bd:dd:b1:bd:3f:bf:d6:5f:51:d8:96:b6:ab: a2:14:8d:34:3b:83:ac:b0:20:83:16:67:97:78:9a: fd:5c:fc:2e:36:d4:c7:51:f4:df:fb:2d:cc:49:20: 2e:b6:f9:c3:4a:a6:11:12:13:a8:87:30:46:3c:51: e7:11:fe:22:0e:30:49:3f:9e:39:fe:3a:73:9c:59: e0:17:e4:e0:fc:2d:8b:b9:d3:d1:d3:2e:ec:c7:48: de:c8:ea:65:52:3d:9a:a4:cb:98:ce:d3:b8:df:7d: 6b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:E0:04:D3:CD:11:4D:AD:8A:3D:31:F5:5A:FE:48:DF:C8:21:3F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS1239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.33.0/24 104.234.44.0/24 104.234.55.0/24 104.234.57.0/24 104.234.74.0/24 104.234.76.0/24 104.234.85.0/24 104.234.97.0/24 104.234.132.0/24 104.234.182.0/24 104.234.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:04:39:8f:8e:f1:2a:9f:73:4f:8e:d6:3d:aa:2f:84:af:d5: 1f:93:da:1c:92:4d:72:d2:59:6b:47:42:a7:4e:ac:33:6d:3f: 63:c4:6e:0e:ff:8c:e9:bb:d9:7f:d2:f7:ba:f1:3a:a0:e0:02: 92:74:21:28:8d:49:73:38:7d:d5:41:e0:53:fa:7b:21:87:37: 4f:ac:48:ce:7f:ac:f0:35:ad:d3:c7:59:b2:15:4f:4a:5b:f1: 8b:33:97:f1:d0:92:de:a2:0f:14:84:81:ac:e8:fe:1e:58:93: b7:22:c6:e9:aa:39:3a:43:b2:d4:55:f1:32:78:55:42:2e:1b: 98:fa:8f:a8:0f:b1:40:41:a6:6b:0f:21:11:bb:45:7b:c7:36: 0d:b0:00:66:25:9d:34:cc:f6:62:82:94:a8:63:c0:1d:c2:c0: 43:eb:97:fa:cb:85:48:2b:c3:9e:c8:f2:04:bc:fc:9f:22:a1: 85:df:28:22:a6:cd:85:3c:59:c2:da:28:7b:bf:60:22:40:b6: 5a:de:65:e8:15:0c:93:d9:b7:af:24:df:0a:98:db:75:66:36: 6b:16:dd:1b:37:53:e1:ba:d0:a6:db:36:b8:5c:e0:04:68:4f: 31:a0:01:53:34:ad:3d:ec:74:eb:40:7b:2c:99:25:13:e3:1c: 40:bc:17:7b -----BEGIN CERTIFICATE----- MIIFuTCCBKGgAwIBAgIUEBrdTN9vtO38B0KkK8wRsCQQJKUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwMzIyMjM1NTExWhcNMjQwMzIxMDAwMDEx WjAzMTEwLwYDVQQDEyg4RjEzRTAwNEQzQ0QxMTREQUQ4QTNEMzFGNTVBRkU0OERG QzgyMTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnazsh9Rpjqz0 yXQGFRHo7Zbp/zXtGG9gg/JkEoI1Rru1ihWFhtTH500qIkdAwJN87lVr+o+LvAl/ xwc6dfTn4wZsvKV+YohNkOWPg7k/UjuA3+xyosSvGUEsJcvO9pqRlruuV06j0FnB LktQTcK3tqqRYh4DRhtISCFWKLt+OdzFfmTn0Gl02DjA0S0nAVIFuNxgmezTNL3d sb0/v9ZfUdiWtquiFI00O4OssCCDFmeXeJr9XPwuNtTHUfTf+y3MSSAutvnDSqYR EhOohzBGPFHnEf4iDjBJP545/jpznFngF+Tg/C2LudPR0y7sx0jeyOplUj2apMuY ztO4331rrwIDAQABo4ICuTCCArUwHQYDVR0OBBYEFI8T4ATTzRFNrYo9MfVa/kjf yCE/MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzEyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwWwYI KwYBBQUHAQcBAf8ETDBKMEgEAgABMEIDBABo6iEDBABo6iwDBABo6jcDBABo6jkD BABo6koDBABo6kwDBABo6lUDBABo6mEDBABo6oQDBABo6rYDBABo6vYwDQYJKoZI hvcNAQELBQADggEBAFsEOY+O8Sqfc0+O1j2qL4Sv1R+T2hySTXLSWWtHQqdOrDNt P2PEbg7/jOm72X/S97rxOqDgApJ0ISiNSXM4fdVB4FP6eyGHN0+sSM5/rPA1rdPH WbIVT0pb8Yszl/HQkt6iDxSEgazo/h5Yk7cixumqOTpDstRV8TJ4VUIuG5j6j6gP sUBBpmsPIRG7RXvHNg2wAGYlnTTM9mKClKhjwB3CwEPrl/rLhUgrw57I8gS8/J8i oYXfKCKmzYU8WcLaKHu/YCJAtlreZegVDJPZt68k3wqY23VmNmsW3Rs3U+G60Kbb Nrhc4ARoTzGgAVM0rT3sdOtAeyyZJRPjHEC8F3s= -----END CERTIFICATE-----Generated at Thu Mar 23 00:32:35 2023 by rpki-client on console-fra.rpki-client.org