$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa File: AS19786.roa (raw, json) Hash identifier: /+zBQmHiO+9+VBBcqBm1u66XN6LYLjBgmRgPJ1RwrHc= Subject key identifier: CB:FB:32:6E:AC:F0:6B:CE:65:70:58:C4:C3:E9:1C:77:2D:F8:08:4E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 37357F3B381FBB3438816DCAB9802345A088C317 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa Signing time: Wed 11 Dec 2024 04:28:23 +0000 ROA not before: Wed 11 Dec 2024 04:23:23 +0000 ROA not after: Wed 10 Dec 2025 04:28:23 +0000 asID: 19786 IP address blocks: 104.234.40.0/24 maxlen: 24 104.234.41.0/24 maxlen: 24 104.234.42.0/24 maxlen: 24 104.234.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:35:7f:3b:38:1f:bb:34:38:81:6d:ca:b9:80:23:45:a0:88:c3:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 11 04:23:23 2024 GMT Not After : Dec 10 04:28:23 2025 GMT Subject: CN=CBFB326EACF06BCE657058C4C3E91C772DF8084E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:06:70:52:42:96:5b:e9:3f:c9:96:66:b5: 13:37:20:93:77:7a:b2:c2:26:28:7b:08:c8:f6:c3: db:4d:1a:1f:ee:2b:0e:93:c7:2b:d8:48:b4:38:ab: e1:65:27:9f:37:c7:a0:12:1c:92:31:1e:a2:94:89: dc:2e:c3:f3:69:8a:2d:9a:5e:96:17:e6:3f:d4:bf: c0:9c:f7:6b:9d:59:30:3f:6d:2c:2b:d7:e4:a5:40: 70:ad:54:4b:1b:0c:97:03:8c:9e:b9:ce:97:96:e9: 99:28:23:3e:cd:7b:04:af:85:7d:49:21:f8:28:9e: 26:54:f5:a3:40:4c:3d:f2:2b:4d:7e:7c:6c:44:c9: 47:27:52:53:f2:60:82:41:a5:03:7d:fc:2f:da:cd: 03:0a:be:03:ba:f5:c1:10:a8:df:67:99:42:8e:2c: b8:71:62:4e:28:44:09:89:58:44:92:6c:71:82:cd: 72:19:9d:e6:b7:41:49:fe:de:85:fa:31:6a:01:85: e8:69:5a:fd:5c:56:7c:fa:8f:12:f9:0a:d2:20:18: c1:89:65:8d:d5:6f:54:0d:76:54:bf:5a:8d:9a:23: 67:5a:e4:24:d4:a0:69:9b:18:97:0a:b7:d3:63:92: 3d:23:74:1f:b7:c3:b6:4b:bd:0b:b1:5c:c1:90:76: f3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:FB:32:6E:AC:F0:6B:CE:65:70:58:C4:C3:E9:1C:77:2D:F8:08:4E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19786.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.40.0-104.234.42.255 104.234.191.0/24 Signature Algorithm: sha256WithRSAEncryption ae:55:d0:b5:1a:7c:3f:21:95:b5:1a:36:06:5b:47:27:9a:b7: 62:b7:f9:bf:03:c9:ad:eb:37:57:af:29:52:95:8a:46:19:f3: 14:d8:75:43:e0:b7:97:e5:2b:e1:bb:a0:c4:ad:c7:6f:54:83: fa:ce:59:48:f0:50:ab:b7:03:1b:17:c7:8f:b8:5e:a5:e1:99: 43:b6:41:80:ab:c0:31:aa:28:a7:0b:ad:89:81:b0:6b:7b:23: 31:e7:08:92:48:08:c0:82:d0:5b:7d:73:06:3e:7b:cc:9d:7c: 79:37:b9:44:7c:cf:c9:b6:3f:c7:5d:70:5d:9c:ad:18:93:2b: 15:fe:47:aa:23:04:9e:3b:74:09:19:df:ff:9b:be:36:eb:27: 67:5e:2a:38:a3:00:6a:3b:17:b8:27:14:58:44:7c:5b:a5:04: 90:fe:c7:be:6a:97:85:43:19:0c:5d:4a:7a:15:43:38:fc:bd: 17:81:58:04:48:cb:9b:7b:e3:df:56:17:aa:65:4c:9b:bc:23: 8f:dd:91:21:e7:8a:a2:0f:4d:b4:47:ac:d2:58:95:30:47:a7: 42:2d:57:09:2d:b2:33:e8:bb:5d:3f:6b:a9:60:a7:21:f6:9e: 3b:ee:29:e4:a7:b5:4b:26:e9:75:2f:a5:d2:d8:4a:dd:fc:01: 85:5a:80:0a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIUNzV/OzgfuzQ4gW3KuYAjRaCIwxcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMjExMDQyMzIzWhcNMjUxMjEwMDQyODIz WjAzMTEwLwYDVQQDEyhDQkZCMzI2RUFDRjA2QkNFNjU3MDU4QzRDM0U5MUM3NzJE RjgwODRFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu0GcFJCllvp P8mWZrUTNyCTd3qywiYoewjI9sPbTRof7isOk8cr2Ei0OKvhZSefN8egEhySMR6i lIncLsPzaYotml6WF+Y/1L/AnPdrnVkwP20sK9fkpUBwrVRLGwyXA4yeuc6XlumZ KCM+zXsEr4V9SSH4KJ4mVPWjQEw98itNfnxsRMlHJ1JT8mCCQaUDffwv2s0DCr4D uvXBEKjfZ5lCjiy4cWJOKEQJiVhEkmxxgs1yGZ3mt0FJ/t6F+jFqAYXoaVr9XFZ8 +o8S+QrSIBjBiWWN1W9UDXZUv1qNmiNnWuQk1KBpmxiXCrfTY5I9I3Qft8O2S70L sVzBkHbzRQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFMv7Mm6s8GvOZXBYxMPpHHct +AhOMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE5Nzg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC0G CCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBANo6igDBABo6ioDBABo6r8wDQYJ KoZIhvcNAQELBQADggEBAK5V0LUafD8hlbUaNgZbRyeat2K3+b8Dya3rN1evKVKV ikYZ8xTYdUPgt5flK+G7oMStx29Ug/rOWUjwUKu3AxsXx4+4XqXhmUO2QYCrwDGq KKcLrYmBsGt7IzHnCJJICMCC0Ft9cwY+e8ydfHk3uUR8z8m2P8ddcF2crRiTKxX+ R6ojBJ47dAkZ3/+bvjbrJ2deKjijAGo7F7gnFFhEfFulBJD+x75ql4VDGQxdSnoV Qzj8vReBWARIy5t7499WF6plTJu8I4/dkSHniqIPTbRHrNJYlTBHp0ItVwktsjPo u10/a6lgpyH2njvuKeSntUsm6XUvpdLYSt38AYVagAo= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:45 2025 by rpki-client