$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa File: AS200017.roa (raw, json) Hash identifier: uLHCH7yYqP1ahNmZg2JTzDyS8c+NGMPvJbqygLOoiJA= Subject key identifier: 04:66:16:00:23:F6:2F:F0:A3:DA:F5:23:86:FF:42:71:C6:46:D4:92 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 12DACD52CDD5CC34BF0B3F80ABA035C54B386322 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa Signing time: Thu 30 May 2024 14:01:15 +0000 ROA not before: Thu 30 May 2024 13:56:15 +0000 ROA not after: Thu 29 May 2025 14:01:15 +0000 asID: 200017 IP address blocks: 98.142.248.0/24 maxlen: 24 104.234.71.0/24 maxlen: 24 104.234.111.0/24 maxlen: 24 104.234.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:da:cd:52:cd:d5:cc:34:bf:0b:3f:80:ab:a0:35:c5:4b:38:63:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 30 13:56:15 2024 GMT Not After : May 29 14:01:15 2025 GMT Subject: CN=0466160023F62FF0A3DAF52386FF4271C646D492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:43:8a:2c:79:73:5c:85:69:cd:1a:20:4b: f4:08:dd:cc:db:85:81:d9:7b:05:57:38:3e:19:92: 6b:e2:67:99:a0:e6:8b:19:b4:39:ac:80:02:e7:e8: 6b:b5:c1:1b:a8:1c:ee:a0:42:dd:61:d6:0a:f2:90: 3a:bd:70:4c:bf:a4:b7:68:38:5d:67:ec:3d:db:d5: c2:89:42:21:5a:13:6d:33:8f:13:33:31:aa:bb:ad: eb:a8:62:71:61:f9:c3:d8:72:5f:6f:de:74:bc:ed: 8b:5d:cd:53:5b:18:89:57:35:14:7d:69:e1:87:fb: 60:2b:18:11:00:77:c5:d5:4b:13:2f:77:f7:bd:5b: e5:0f:d2:65:be:d1:9e:a5:29:46:09:90:6e:47:e1: b2:6e:86:37:eb:0f:bd:d2:36:c0:65:7d:18:bf:e1: ac:ca:d4:8e:ba:41:97:54:4e:d2:32:fb:57:fc:6c: 59:f8:45:c8:a0:73:82:62:60:63:35:9c:32:e8:64: 4c:57:c4:e4:a0:74:cc:bf:67:d7:6b:7f:67:c3:0d: 4f:7a:68:df:48:9b:e1:90:6b:44:b5:2d:b7:93:85: cd:3e:11:fb:1f:99:23:ca:8a:00:45:01:88:1c:3a: b6:e0:eb:d7:3a:97:9a:9f:0d:5a:7d:44:d1:f9:36: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:16:00:23:F6:2F:F0:A3:DA:F5:23:86:FF:42:71:C6:46:D4:92 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS200017.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.248.0/24 104.234.71.0/24 104.234.111.0/24 104.234.188.0/24 Signature Algorithm: sha256WithRSAEncryption af:0a:eb:d4:c2:05:e1:ba:26:0d:c2:56:6e:4c:ee:fe:ff:02: 10:1d:d5:8d:48:86:c6:03:f3:82:68:7d:c8:70:75:0f:d2:c5: ee:23:a8:18:10:1e:4a:7d:a8:f2:3a:98:7e:c3:a9:58:31:b2: 43:53:24:40:eb:e0:da:de:ca:74:1d:42:7e:9a:00:2a:9d:a5: 0d:75:79:56:d3:7c:3a:db:fd:a0:2b:29:30:c9:06:dc:2c:e3: bf:e5:98:c2:aa:44:18:80:de:b0:d0:d8:0b:67:4d:70:a2:2a: f4:9a:c8:80:f9:e0:08:c3:71:57:ce:d3:84:fb:d7:63:6f:2d: d6:cb:da:29:b1:e8:21:db:77:64:42:8b:e8:e4:1c:1d:0b:db: 75:07:88:e1:36:40:e2:4f:e8:d5:f7:4a:d8:b1:9f:35:db:48: ce:ed:d2:e6:ea:f6:7c:1f:79:46:a5:b1:fb:d2:55:a0:ae:3f: 86:b9:c5:9a:2a:fb:65:08:22:39:20:30:0c:ea:f4:cc:e2:4f: 4f:4f:6a:dd:1d:c0:15:6d:af:c7:f0:1a:bb:b2:40:ee:73:97: 7b:25:43:91:da:c2:8e:c8:45:1c:c5:49:56:09:e6:de:47:e1: bb:1f:91:dd:90:f2:01:a5:dc:2d:04:e8:de:52:44:82:21:e1: cf:3c:13:ff -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUEtrNUs3VzDS/Cz+Aq6A1xUs4YyIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNTMwMTM1NjE1WhcNMjUwNTI5MTQwMTE1 WjAzMTEwLwYDVQQDEygwNDY2MTYwMDIzRjYyRkYwQTNEQUY1MjM4NkZGNDI3MUM2 NDZENDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSlDiix5c1yF ac0aIEv0CN3M24WB2XsFVzg+GZJr4meZoOaLGbQ5rIAC5+hrtcEbqBzuoELdYdYK 8pA6vXBMv6S3aDhdZ+w929XCiUIhWhNtM48TMzGqu63rqGJxYfnD2HJfb950vO2L Xc1TWxiJVzUUfWnhh/tgKxgRAHfF1UsTL3f3vVvlD9JlvtGepSlGCZBuR+GyboY3 6w+90jbAZX0Yv+GsytSOukGXVE7SMvtX/GxZ+EXIoHOCYmBjNZwy6GRMV8TkoHTM v2fXa39nww1PemjfSJvhkGtEtS23k4XNPhH7H5kjyooARQGIHDq24OvXOpeanw1a fUTR+TYZRQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFARmFgAj9i/wo9r1I4b/QnHG RtSSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDAxNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGKO+AMEAGjqRwMEAGjqbwMEAGjq vDANBgkqhkiG9w0BAQsFAAOCAQEArwrr1MIF4bomDcJWbkzu/v8CEB3VjUiGxgPz gmh9yHB1D9LF7iOoGBAeSn2o8jqYfsOpWDGyQ1MkQOvg2t7KdB1CfpoAKp2lDXV5 VtN8Otv9oCspMMkG3Czjv+WYwqpEGIDesNDYC2dNcKIq9JrIgPngCMNxV87ThPvX Y28t1svaKbHoIdt3ZEKL6OQcHQvbdQeI4TZA4k/o1fdK2LGfNdtIzu3S5ur2fB95 RqWx+9JVoK4/hrnFmir7ZQgiOSAwDOr0zOJPT09q3R3AFW2vx/Aau7JA7nOXeyVD kdrCjshFHMVJVgnm3kfhux+R3ZDyAaXcLQTo3lJEgiHhzzwT/w== -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org