$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa File: AS133398.roa (raw, json) Hash identifier: UdIsZ7Q55n53ZBW4b6IP6uDkkzmrQ6rvr68w1eFUWzA= Subject key identifier: 51:80:80:57:A8:FC:AA:FF:35:C2:61:C6:5E:C4:7F:AD:5F:B9:14:03 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 13884527590A9CE04B87AA4263F6672857B025C8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa Signing time: Thu 01 Feb 2024 11:56:56 +0000 ROA not before: Thu 01 Feb 2024 11:51:56 +0000 ROA not after: Thu 30 Jan 2025 11:56:56 +0000 asID: 133398 IP address blocks: 104.234.58.0/24 maxlen: 24 104.234.198.0/24 maxlen: 24 104.234.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:88:45:27:59:0a:9c:e0:4b:87:aa:42:63:f6:67:28:57:b0:25:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 1 11:51:56 2024 GMT Not After : Jan 30 11:56:56 2025 GMT Subject: CN=51808057A8FCAAFF35C261C65EC47FAD5FB91403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:07:fe:98:d1:dd:9f:71:a5:54:b6:fd:9b:af: bd:0b:9e:3a:d4:67:31:4a:8b:25:6f:9f:e9:9c:f1: 8b:b8:0c:f2:2f:66:d2:f0:4a:48:f4:e6:9c:e6:87: e3:24:a7:20:ff:92:28:fd:00:c5:be:bc:f1:0a:c0: dc:47:dc:03:89:40:39:b7:64:d1:ca:08:96:c7:b7: ec:6a:5b:f7:7d:2e:c7:74:bb:32:21:21:2a:bb:6a: 71:ab:ba:e1:8c:97:1b:bc:06:d1:a8:5b:3d:11:2e: 5a:d2:cc:46:a0:a0:3f:01:16:7c:02:13:a7:7c:a4: 4c:63:04:1d:4a:af:96:9d:f0:1d:44:9d:f9:ed:b8: ef:72:7e:25:69:92:0f:be:a2:5d:fb:2e:f7:66:2e: 74:55:79:0a:63:6c:4f:3a:c1:db:ca:4a:0a:95:41: 77:47:a3:ef:99:3c:f2:bc:b4:da:ca:64:4a:2b:f4: e1:25:f5:03:e4:e4:e3:50:bf:88:1e:38:37:ac:af: d5:b7:d2:67:7f:07:91:eb:9c:a2:52:bc:72:1c:5a: 49:84:2a:21:d6:84:b5:70:cc:d0:3f:ec:69:8c:3a: a3:40:3d:63:15:33:99:23:2c:b3:d6:f0:ee:21:15: 4e:b8:12:1c:cb:c1:67:e3:49:3e:e0:a8:15:ff:80: 2a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:80:80:57:A8:FC:AA:FF:35:C2:61:C6:5E:C4:7F:AD:5F:B9:14:03 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS133398.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.58.0/24 104.234.198.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:a2:7c:75:cc:2f:a4:96:cd:91:ae:c6:32:96:10:ba:99:c1: 0c:7a:05:f4:6c:00:11:04:d0:29:eb:61:14:82:29:3d:e8:78: 92:47:d4:21:9a:2b:02:2c:0f:d9:c8:c1:0a:6f:6c:2b:d5:d1: 4d:34:4e:af:86:e4:f5:b9:25:d9:bc:95:19:98:5d:26:aa:50: 3b:f0:11:75:8d:c6:c0:b1:e2:e2:04:61:05:07:19:c1:44:3c: 40:8d:3e:4d:10:12:ea:eb:72:2a:cf:08:01:dc:18:4a:c1:5c: a1:f0:f0:fd:7a:e1:7c:a7:32:21:02:d0:20:65:98:ea:3b:f7: d3:04:c5:25:1e:d6:df:ee:66:7a:b5:6e:14:f0:b1:3f:ae:94: 33:ee:85:ab:b5:ee:50:e2:ee:14:8d:aa:c4:f4:e1:a2:95:09: 57:fe:e6:0c:38:65:5c:6c:1d:77:d2:c5:fa:b9:8f:b1:82:67: 30:57:81:00:7d:4a:4b:d8:97:dd:13:c5:ea:51:bb:40:74:25: d7:53:44:df:87:f3:f9:97:04:29:35:e6:3f:cd:2a:94:85:31: 88:41:01:c9:35:57:db:be:64:fb:1e:f6:a1:c4:32:41:47:f0: 3b:30:a9:e3:55:51:f4:84:63:9e:d0:1c:e3:b4:79:09:48:d1: 4a:53:c4:47 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUE4hFJ1kKnOBLh6pCY/ZnKFewJcgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMjAxMTE1MTU2WhcNMjUwMTMwMTE1NjU2 WjAzMTEwLwYDVQQDEyg1MTgwODA1N0E4RkNBQUZGMzVDMjYxQzY1RUM0N0ZBRDVG QjkxNDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQf+mNHdn3Gl VLb9m6+9C5461GcxSoslb5/pnPGLuAzyL2bS8EpI9Oac5ofjJKcg/5Io/QDFvrzx CsDcR9wDiUA5t2TRygiWx7fsalv3fS7HdLsyISEqu2pxq7rhjJcbvAbRqFs9ES5a 0sxGoKA/ARZ8AhOnfKRMYwQdSq+WnfAdRJ357bjvcn4laZIPvqJd+y73Zi50VXkK Y2xPOsHbykoKlUF3R6PvmTzyvLTaymRKK/ThJfUD5OTjUL+IHjg3rK/Vt9JnfweR 65yiUrxyHFpJhCoh1oS1cMzQP+xpjDqjQD1jFTOZIyyz1vDuIRVOuBIcy8Fn40k+ 4KgV/4AqswIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFGAgFeo/Kr/NcJhxl7Ef61f uRQDMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzEzMzM5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqOgMEAWjqxjANBgkqhkiG9w0B AQsFAAOCAQEALqJ8dcwvpJbNka7GMpYQupnBDHoF9GwAEQTQKethFIIpPeh4kkfU IZorAiwP2cjBCm9sK9XRTTROr4bk9bkl2byVGZhdJqpQO/ARdY3GwLHi4gRhBQcZ wUQ8QI0+TRAS6utyKs8IAdwYSsFcofDw/XrhfKcyIQLQIGWY6jv30wTFJR7W3+5m erVuFPCxP66UM+6Fq7XuUOLuFI2qxPThopUJV/7mDDhlXGwdd9LF+rmPsYJnMFeB AH1KS9iX3RPF6lG7QHQl11NE34fz+ZcEKTXmP80qlIUxiEEByTVX275k+x72ocQy QUfwOzCp41VR9IRjntAc47R5CUjRSlPERw== -----END CERTIFICATE-----Generated at Thu Nov 21 21:40:15 2024 by rpki-client on console-ams.rpki-client.org