$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198989.roa File: AS198989.roa (raw, json) Hash identifier: kBbcczPgP37kHAxiaQGzz96tguM0P0UAB2mXuw4oWLE= Subject key identifier: 98:E3:39:BD:38:A2:0F:FD:1B:B7:24:18:C5:87:2B:1A:1F:AC:F3:A6 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 19B74546C9FB238A575196D41668D3C1EB4C7E14 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198989.roa Signing time: Fri 25 Oct 2024 10:11:24 +0000 ROA not before: Fri 25 Oct 2024 10:06:24 +0000 ROA not after: Fri 24 Oct 2025 10:11:24 +0000 asID: 198989 IP address blocks: 104.234.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b7:45:46:c9:fb:23:8a:57:51:96:d4:16:68:d3:c1:eb:4c:7e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 25 10:06:24 2024 GMT Not After : Oct 24 10:11:24 2025 GMT Subject: CN=98E339BD38A20FFD1BB72418C5872B1A1FACF3A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:28:52:63:1c:d1:81:b9:b7:f1:b6:8b:9e:5c: 77:55:53:31:70:25:c6:73:3c:8c:83:ca:a4:0d:b4: f8:af:e8:d6:ab:1f:0d:6e:6a:71:da:4d:78:01:0f: d6:9f:c8:c8:4a:20:a1:6b:76:e5:b3:86:08:a2:81: ed:cf:07:d0:e3:35:ad:37:8c:40:da:1a:39:67:73: 22:ba:37:34:84:9f:5a:9c:f8:6e:35:27:19:5e:65: 45:25:28:ba:e0:25:72:b7:33:15:eb:2a:f6:d9:9f: 8d:c0:9e:cd:c0:4b:28:35:e9:9d:f4:4b:3a:b3:e4: 22:4d:0c:a1:e6:12:b5:bf:75:fb:a7:48:8e:a8:93: f7:c5:6c:ee:c6:06:36:30:aa:41:25:03:76:b1:7e: df:cf:2a:3d:03:d6:76:45:39:f4:d2:d4:99:95:4c: 28:40:9e:d3:b0:fa:83:1e:7f:d0:7a:7f:f5:20:0a: fa:96:36:f8:e1:7b:ea:29:57:96:42:cd:07:2e:2e: 8a:9c:0c:1c:f7:b7:64:3e:f6:2f:8c:64:4c:98:30: 99:65:26:0d:af:8f:92:e4:b3:0b:c1:b4:37:d7:f3: 3e:86:51:af:38:ae:30:1a:a9:6e:b0:ba:1b:4c:50: e0:06:1a:2e:78:7b:65:3a:c1:79:e2:94:a9:1c:2b: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E3:39:BD:38:A2:0F:FD:1B:B7:24:18:C5:87:2B:1A:1F:AC:F3:A6 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198989.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.174.0/24 Signature Algorithm: sha256WithRSAEncryption a9:ea:e1:42:c0:33:c8:13:62:85:c3:95:08:15:72:e3:f9:3d: 3f:6d:18:f4:50:3f:dc:3b:7f:c8:14:43:9e:d0:2f:cd:8a:a6: a1:17:e9:00:0b:f4:de:48:1b:b5:67:88:f2:fa:33:a8:b0:f5: 89:67:5c:a3:ef:bd:39:75:25:b0:7b:ae:1c:f2:8d:39:d9:a6: 37:ea:6d:6c:c6:f5:12:9b:70:26:b9:bd:bf:cb:af:43:93:87: 1e:bc:d1:b4:b7:12:70:17:c0:70:8e:52:16:75:47:4b:18:e3: c6:5e:95:c9:85:d4:97:11:04:bf:b7:ae:9a:ef:77:d7:5a:77: 32:4b:02:95:8c:87:0f:57:0a:44:45:25:6b:8b:09:9d:4e:9d: 44:96:3f:f8:a1:3c:1b:8d:e7:41:c6:5b:54:81:86:35:cf:70: 4c:a4:97:69:0f:65:9e:90:cc:d6:19:4b:8a:e8:81:ae:2d:94: 29:e2:13:d7:cd:32:d3:23:2b:11:ae:78:d3:d1:05:7b:0b:77: 5f:8b:6d:c8:21:dc:51:6c:c8:9d:50:46:22:79:68:3f:19:3d: fe:01:39:f5:c8:6c:82:b6:96:6b:69:d4:3e:bc:5a:ec:07:a6: 37:4e:72:3f:3b:b2:79:d2:6f:25:52:d2:49:af:75:39:1c:6f: 2f:60:cf:40 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUGbdFRsn7I4pXUZbUFmjTwetMfhQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDI1MTAwNjI0WhcNMjUxMDI0MTAxMTI0 WjAzMTEwLwYDVQQDEyg5OEUzMzlCRDM4QTIwRkZEMUJCNzI0MThDNTg3MkIxQTFG QUNGM0E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ChSYxzRgbm3 8baLnlx3VVMxcCXGczyMg8qkDbT4r+jWqx8Nbmpx2k14AQ/Wn8jISiCha3bls4YI ooHtzwfQ4zWtN4xA2ho5Z3Miujc0hJ9anPhuNScZXmVFJSi64CVytzMV6yr22Z+N wJ7NwEsoNemd9Es6s+QiTQyh5hK1v3X7p0iOqJP3xWzuxgY2MKpBJQN2sX7fzyo9 A9Z2RTn00tSZlUwoQJ7TsPqDHn/Qen/1IAr6ljb44XvqKVeWQs0HLi6KnAwc97dk PvYvjGRMmDCZZSYNr4+S5LMLwbQ31/M+hlGvOK4wGqlusLobTFDgBhoueHtlOsF5 4pSpHCvOCwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJjjOb04og/9G7ckGMWHKxof rPOmMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE5ODk4OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqrjANBgkqhkiG9w0BAQsFAAOC AQEAqerhQsAzyBNihcOVCBVy4/k9P20Y9FA/3Dt/yBRDntAvzYqmoRfpAAv03kgb tWeI8vozqLD1iWdco++9OXUlsHuuHPKNOdmmN+ptbMb1EptwJrm9v8uvQ5OHHrzR tLcScBfAcI5SFnVHSxjjxl6VyYXUlxEEv7eumu9311p3MksClYyHD1cKREUla4sJ nU6dRJY/+KE8G43nQcZbVIGGNc9wTKSXaQ9lnpDM1hlLiuiBri2UKeIT180y0yMr Ea5409EFewt3X4ttyCHcUWzInVBGInloPxk9/gE59chsgraWa2nUPrxa7AemN05y PzuyedJvJVLSSa91ORxvL2DPQA== -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org