$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa File: AS200017.roa (raw, json) Hash identifier: 5yNGAG5B+Q+e5WBuT7lRfMqbWPgtw+Lqk+tYWhMWrGA= Subject key identifier: A6:9B:5B:DF:D2:72:1B:11:A6:2D:5E:6D:8A:4C:15:5B:69:13:2F:0A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 68EEC80F6FE5C84503EE8AF7C154A0EE9852F451 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa Signing time: Thu 29 Jun 2023 14:00:05 +0000 ROA not before: Thu 29 Jun 2023 13:55:05 +0000 ROA not after: Thu 27 Jun 2024 14:00:05 +0000 asID: 200017 IP address blocks: 98.142.248.0/24 maxlen: 24 104.234.71.0/24 maxlen: 24 104.234.111.0/24 maxlen: 24 104.234.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 May 2024 13:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ee:c8:0f:6f:e5:c8:45:03:ee:8a:f7:c1:54:a0:ee:98:52:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jun 29 13:55:05 2023 GMT Not After : Jun 27 14:00:05 2024 GMT Subject: CN=A69B5BDFD2721B11A62D5E6D8A4C155B69132F0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:67:51:4f:7d:cf:12:73:4b:0d:92:81:e1:f6: cc:23:27:ee:8f:ae:5f:98:ed:2c:ca:e2:76:ba:d3: 38:33:16:f1:0b:17:f3:1c:72:69:c0:3d:f2:ae:0e: 6b:23:d6:0b:49:d9:93:f8:78:96:75:12:fc:fe:2c: b5:8c:43:d6:dc:16:6d:20:24:c5:28:b7:c1:57:51: 69:56:87:d8:e5:85:06:ab:f5:40:68:9d:a6:4d:9b: bb:2c:64:02:ed:2e:01:6e:47:26:2c:3c:a3:9b:7e: b8:d3:27:3b:8f:a3:30:bc:57:fa:bb:4e:14:54:9b: 59:32:a8:7d:5c:4f:f8:39:0c:40:cc:7e:66:e3:33: fa:d3:aa:16:00:6c:b0:f8:07:ad:10:c8:15:6d:57: 0d:e6:f8:0f:b3:ee:8b:8a:21:73:e5:70:ec:a6:50: 48:d0:7a:cd:29:dd:30:14:79:ce:21:ad:f6:65:23: c1:6f:f1:20:7c:3b:86:2c:7a:9a:ab:d5:8e:03:0e: 07:ff:ab:86:7c:ce:e6:68:2f:17:38:28:9f:04:2c: ee:a9:95:79:e1:87:4f:c5:95:63:a6:cc:95:d4:00: 0a:b0:42:6d:9e:09:ef:c3:eb:63:b0:01:e3:86:a4: 17:19:b1:9e:be:a9:2a:42:0d:63:05:5c:2c:93:5e: de:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9B:5B:DF:D2:72:1B:11:A6:2D:5E:6D:8A:4C:15:5B:69:13:2F:0A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.248.0/24 104.234.71.0/24 104.234.111.0/24 104.234.188.0/24 Signature Algorithm: sha256WithRSAEncryption 19:8d:5c:05:77:8d:b7:5e:ed:20:4c:22:9e:44:a7:0b:dd:ae: 44:c7:f7:4b:d3:71:cb:55:71:8a:80:71:68:44:90:f4:6f:14: 6b:3a:62:fd:e7:d3:58:62:1a:c0:8f:f2:4b:fd:9c:46:d4:be: 92:52:f8:fa:73:6f:28:fc:9d:9f:0e:e0:fb:7c:ec:96:3e:42: 93:c3:0b:42:5a:14:de:18:b5:d4:0d:81:66:33:b2:a0:96:10: 17:c2:d7:22:ad:7f:8b:bc:b5:ef:fd:32:7d:24:29:6b:27:fc: 07:c9:56:d4:2c:c7:d0:7c:cf:6d:fe:4e:a4:ad:4b:93:a1:c2: 8e:57:10:31:59:38:f6:11:51:d9:66:61:30:f0:38:ab:a8:af: 4b:b5:9e:9f:c8:8f:ca:94:7d:01:5d:71:ef:a1:0f:3e:ac:3f: d1:d1:2e:11:b2:30:87:f6:ae:0e:68:c7:55:e1:73:0a:4c:12: 39:af:75:1c:5a:15:89:16:2e:ef:5b:c5:b5:68:5f:09:74:4f: 7a:72:6d:72:69:43:2d:35:7a:ee:ff:8e:48:30:b0:6c:77:16: 1a:c6:b6:d0:aa:dd:ce:f5:42:0f:d9:10:bc:4d:2e:f0:84:28: e0:f9:d0:27:6b:39:f5:6f:5c:ac:fd:0f:e6:5e:46:4a:03:76: a8:9b:5e:7b -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUaO7ID2/lyEUD7or3wVSg7phS9FEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMwNjI5MTM1NTA1WhcNMjQwNjI3MTQwMDA1 WjAzMTEwLwYDVQQDEyhBNjlCNUJERkQyNzIxQjExQTYyRDVFNkQ4QTRDMTU1QjY5 MTMyRjBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmdRT33PEnNL DZKB4fbMIyfuj65fmO0syuJ2utM4MxbxCxfzHHJpwD3yrg5rI9YLSdmT+HiWdRL8 /iy1jEPW3BZtICTFKLfBV1FpVofY5YUGq/VAaJ2mTZu7LGQC7S4BbkcmLDyjm364 0yc7j6MwvFf6u04UVJtZMqh9XE/4OQxAzH5m4zP606oWAGyw+AetEMgVbVcN5vgP s+6LiiFz5XDsplBI0HrNKd0wFHnOIa32ZSPBb/EgfDuGLHqaq9WOAw4H/6uGfM7m aC8XOCifBCzuqZV54YdPxZVjpsyV1AAKsEJtngnvw+tjsAHjhqQXGbGevqkqQg1j BVwsk17ehwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFKabW9/SchsRpi1ebYpMFVtp Ey8KMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDAxNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGKO+AMEAGjqRwMEAGjqbwMEAGjq vDANBgkqhkiG9w0BAQsFAAOCAQEAGY1cBXeNt17tIEwinkSnC92uRMf3S9Nxy1Vx ioBxaESQ9G8Uazpi/efTWGIawI/yS/2cRtS+klL4+nNvKPydnw7g+3zslj5Ck8ML QloU3hi11A2BZjOyoJYQF8LXIq1/i7y17/0yfSQpayf8B8lW1CzH0HzPbf5OpK1L k6HCjlcQMVk49hFR2WZhMPA4q6ivS7Wen8iPypR9AV1x76EPPqw/0dEuEbIwh/au DmjHVeFzCkwSOa91HFoViRYu71vFtWhfCXRPenJtcmlDLTV67v+OSDCwbHcWGsa2 0KrdzvVCD9kQvE0u8IQo4PnQJ2s59W9crP0P5l5GSgN2qJteew== -----END CERTIFICATE-----Generated at Fri May 17 12:06:30 2024 by rpki-client on console-fra.rpki-client.org