$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa File: AS16509.roa (raw, json) Hash identifier: gaeUzcCb6o0QLsi0gj6K7OSs4EXTAopP9wrnL6kY9ac= Subject key identifier: 1B:1C:6E:32:48:F9:4E:D4:AA:0F:3C:CC:AF:C6:83:0D:10:50:E9:A4 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1817A47704383225EBC61300417B165391D89F91 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa Signing time: Mon 31 Jul 2023 15:00:04 +0000 ROA not before: Mon 31 Jul 2023 14:55:04 +0000 ROA not after: Mon 29 Jul 2024 15:00:04 +0000 asID: 16509 IP address blocks: 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Aug 2023 15:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:17:a4:77:04:38:32:25:eb:c6:13:00:41:7b:16:53:91:d8:9f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 31 14:55:04 2023 GMT Not After : Jul 29 15:00:04 2024 GMT Subject: CN=1B1C6E3248F94ED4AA0F3CCCAFC6830D1050E9A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f4:01:3d:2f:8f:96:65:07:e8:53:41:fa:b0: 47:78:3f:7a:a9:59:36:ca:8a:0e:d0:5f:2f:58:d2: da:1f:c1:3e:25:4b:f8:56:17:b6:d9:bc:21:01:cb: 31:11:60:9e:52:84:64:62:d7:de:88:93:15:4c:71: 68:dd:46:46:39:7c:74:fa:0c:a2:e0:9c:69:2b:6d: 7d:d0:b7:0b:0e:36:06:a0:a1:a2:55:f0:75:f1:b9: e8:e0:8b:cb:09:95:e7:3d:c0:d9:f5:8c:ce:d9:44: a7:25:53:5c:98:a9:9f:87:00:f6:c8:0b:37:c5:65: 64:32:8d:c0:77:4e:29:a5:60:8f:7e:85:ab:63:3f: 04:7f:f2:55:eb:29:82:75:d0:3e:51:0d:94:24:4e: b7:07:b1:f6:94:1f:54:dc:ba:af:d8:f5:b4:12:a3: 30:2b:b7:17:5e:5c:50:3e:60:e2:59:f0:22:1b:7a: 37:d9:54:8f:32:ea:1b:a0:3b:ef:b1:ab:f1:0b:90: b7:7f:cd:ba:cc:33:14:5f:2f:5c:10:96:63:63:4a: 87:00:8e:df:9e:e9:d9:7c:00:11:12:7e:87:33:a8: d1:f6:de:36:5d:97:bb:a7:a2:b2:bc:25:94:3f:4e: 54:72:18:30:ee:34:29:7f:10:22:56:d0:09:e5:1d: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1C:6E:32:48:F9:4E:D4:AA:0F:3C:CC:AF:C6:83:0D:10:50:E9:A4 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16509.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.137.0/24 104.234.141.0/24 104.234.160.0/24 Signature Algorithm: sha256WithRSAEncryption 85:d0:dd:bc:3c:18:ad:3a:9e:8b:58:30:20:4e:46:e8:cf:29: 9c:a6:37:3c:75:5a:cd:b8:f9:33:ab:3b:86:99:70:48:e1:29: d0:b5:c1:02:e0:fd:73:06:15:49:f7:e2:37:7d:9b:1e:b2:d0: 87:e6:25:c1:94:0c:a7:d6:48:31:fd:00:17:0d:ab:a9:8c:69: aa:bf:15:6f:4b:74:f5:5e:b6:47:0e:66:bb:eb:38:87:6a:da: 7a:0a:eb:80:32:ec:80:3c:74:42:c0:a6:1b:71:4c:9a:72:02: 3b:7b:51:3f:26:29:cc:f8:44:18:fc:ef:42:44:b7:8d:ef:06: d9:36:de:76:89:f8:e4:1c:a4:b5:1e:97:d3:df:1b:82:2c:ab: 61:97:5b:65:c0:87:a9:4a:a6:67:b1:98:61:e0:d4:7e:df:6a: e9:5a:7f:9e:11:50:fd:cc:64:24:4e:91:81:ce:29:c0:d3:67: 30:2a:c8:eb:81:1b:2c:35:a6:33:37:00:61:fa:05:46:19:20: 5f:5f:d3:b7:1f:da:1d:ce:bb:1b:8b:02:2f:c9:79:8d:2e:97: 60:12:b5:74:33:86:b6:98:46:58:b1:3b:ef:df:f5:64:5d:65: 5d:47:81:96:a9:0e:d8:bc:f2:f3:51:65:f5:b2:21:fa:6b:9b: ee:ad:01:81 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGBekdwQ4MiXrxhMAQXsWU5HYn5EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwNzMxMTQ1NTA0WhcNMjQwNzI5MTUwMDA0 WjAzMTEwLwYDVQQDEygxQjFDNkUzMjQ4Rjk0RUQ0QUEwRjNDQ0NBRkM2ODMwRDEw NTBFOUE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/QBPS+PlmUH 6FNB+rBHeD96qVk2yooO0F8vWNLaH8E+JUv4Vhe22bwhAcsxEWCeUoRkYtfeiJMV THFo3UZGOXx0+gyi4JxpK2190LcLDjYGoKGiVfB18bno4IvLCZXnPcDZ9YzO2USn JVNcmKmfhwD2yAs3xWVkMo3Ad04ppWCPfoWrYz8Ef/JV6ymCddA+UQ2UJE63B7H2 lB9U3Lqv2PW0EqMwK7cXXlxQPmDiWfAiG3o32VSPMuoboDvvsavxC5C3f826zDMU Xy9cEJZjY0qHAI7fnunZfAAREn6HM6jR9t42XZe7p6KyvCWUP05Uchgw7jQpfxAi VtAJ5R0khQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFBscbjJI+U7Uqg88zK/Ggw0Q UOmkMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2NTA5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOqJAwQAaOqNAwQAaOqgMA0GCSqG SIb3DQEBCwUAA4IBAQCF0N28PBitOp6LWDAgTkbozymcpjc8dVrNuPkzqzuGmXBI 4SnQtcEC4P1zBhVJ9+I3fZsestCH5iXBlAyn1kgx/QAXDaupjGmqvxVvS3T1XrZH Dma76ziHatp6CuuAMuyAPHRCwKYbcUyacgI7e1E/JinM+EQY/O9CRLeN7wbZNt52 ifjkHKS1HpfT3xuCLKthl1tlwIepSqZnsZhh4NR+32rpWn+eEVD9zGQkTpGBzinA 02cwKsjrgRssNaYzNwBh+gVGGSBfX9O3H9odzrsbiwIvyXmNLpdgErV0M4a2mEZY sTvv3/VkXWVdR4GWqQ7YvPLzUWX1siH6a5vurQGB -----END CERTIFICATE-----Generated at Mon Jul 31 15:21:10 2023 by rpki-client on console-fra.rpki-client.org