$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20057.roa File: AS20057.roa (raw, json) Hash identifier: SOoadBbC/QxG5rIaomwkicaQ2UJYFTCtaDl2yK4DWJ0= Subject key identifier: 06:00:FB:00:09:40:F5:F7:84:8D:3D:31:8B:8F:F1:DB:B8:08:02:2A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1505816EEB9DB7AF137D2174B350D18007C51EC8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20057.roa Signing time: Sat 24 Aug 2024 14:34:37 +0000 ROA not before: Sat 24 Aug 2024 14:29:37 +0000 ROA not after: Sat 23 Aug 2025 14:34:37 +0000 asID: 20057 IP address blocks: 104.234.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:05:81:6e:eb:9d:b7:af:13:7d:21:74:b3:50:d1:80:07:c5:1e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 24 14:29:37 2024 GMT Not After : Aug 23 14:34:37 2025 GMT Subject: CN=0600FB000940F5F7848D3D318B8FF1DBB808022A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9c:56:ca:41:38:08:89:f0:f6:a3:f9:a6:55: 72:92:ab:b2:e2:6b:d0:46:9f:15:0b:a0:cc:4d:01: b5:81:eb:10:d4:0c:4e:85:d8:e7:f1:1a:99:4a:8f: 6d:e1:2f:77:80:4b:50:c3:e1:1c:ab:43:df:6b:22: d1:29:3c:eb:2f:5d:50:cb:4e:a9:16:e5:2f:4a:b6: b8:c2:ee:00:5a:9b:9a:4c:5e:2c:51:c9:97:82:24: 36:2c:e0:21:78:01:83:5e:bf:1e:83:bf:d5:7c:a2: cc:ab:65:49:d6:61:cc:76:c4:8b:54:1c:30:31:ed: a6:ca:2b:a1:c5:db:ba:d2:10:89:97:e3:2c:32:e6: 04:86:f5:ff:6e:23:84:d2:93:f5:ab:b9:4f:a7:b1: 50:47:b0:e2:ac:af:cf:a0:68:f4:24:9a:5b:de:71: 32:44:a9:29:47:a0:28:f2:59:c3:45:30:c5:51:55: 68:3e:3a:ad:e2:fb:50:a8:3f:92:53:b4:d7:cf:5d: 77:7c:46:82:13:9c:d6:62:21:ca:86:76:a4:38:1e: 16:e8:5a:d2:0c:79:df:ba:39:10:8e:22:0f:46:1e: e8:89:9a:66:5f:79:15:4b:9f:35:95:56:b6:08:ed: b3:f4:0d:9a:8c:63:a8:7d:6c:76:19:bd:87:38:eb: e8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:00:FB:00:09:40:F5:F7:84:8D:3D:31:8B:8F:F1:DB:B8:08:02:2A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20057.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.48.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:fd:c2:f6:87:ab:d3:b9:21:d5:a5:1f:d8:9e:aa:1c:8c:34: c1:13:5f:ef:f0:43:35:6d:94:de:7f:0c:d4:63:b3:cb:1e:63: ed:19:c9:04:e9:9d:e5:6b:89:2b:f5:92:bb:a4:0f:b2:9f:85: d7:3b:0e:48:53:19:7b:4e:1e:66:93:92:19:20:40:d4:59:8d: e9:e6:9e:8c:f4:b7:d8:3e:43:60:c8:15:ad:c7:4f:30:d7:75: d7:7d:42:b1:02:4c:43:bb:f7:ef:69:96:6a:47:79:c4:a6:f8: 2c:71:82:a1:43:8f:1e:9d:ca:78:8a:82:e7:dc:76:6a:65:88: 6a:53:83:d9:a7:03:da:87:8a:f0:74:43:02:29:05:96:4a:81: f6:f7:63:56:a0:15:62:1c:21:dc:0e:6c:1d:5a:f5:a4:09:61: 2f:fe:d9:8a:41:66:57:22:c8:f2:b5:eb:c9:e8:64:96:c3:01: 60:65:32:a8:f5:39:18:19:60:b3:ee:97:0f:1a:33:20:13:bb: 71:0b:ad:80:72:9b:42:c7:c7:b8:b3:4b:8a:f2:6e:e8:db:1e: 7c:9a:59:a0:42:76:10:f5:eb:e3:42:ca:22:4f:46:d3:fa:8d: 4d:1f:ec:a3:7f:6e:a6:e1:37:b0:f3:58:66:f2:57:df:ed:5e: d5:96:07:88 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUFQWBbuudt68TfSF0s1DRgAfFHsgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwODI0MTQyOTM3WhcNMjUwODIzMTQzNDM3 WjAzMTEwLwYDVQQDEygwNjAwRkIwMDA5NDBGNUY3ODQ4RDNEMzE4QjhGRjFEQkI4 MDgwMjJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5xWykE4CInw 9qP5plVykquy4mvQRp8VC6DMTQG1gesQ1AxOhdjn8RqZSo9t4S93gEtQw+Ecq0Pf ayLRKTzrL11Qy06pFuUvSra4wu4AWpuaTF4sUcmXgiQ2LOAheAGDXr8eg7/VfKLM q2VJ1mHMdsSLVBwwMe2myiuhxdu60hCJl+MsMuYEhvX/biOE0pP1q7lPp7FQR7Di rK/PoGj0JJpb3nEyRKkpR6Ao8lnDRTDFUVVoPjqt4vtQqD+SU7TXz113fEaCE5zW YiHKhnakOB4W6FrSDHnfujkQjiIPRh7oiZpmX3kVS581lVa2CO2z9A2ajGOofWx2 Gb2HOOvo9QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFAYA+wAJQPX3hI09MYuP8du4 CAIqMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwMDU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOowMA0GCSqGSIb3DQEBCwUAA4IB AQAP/cL2h6vTuSHVpR/YnqocjDTBE1/v8EM1bZTefwzUY7PLHmPtGckE6Z3la4kr 9ZK7pA+yn4XXOw5IUxl7Th5mk5IZIEDUWY3p5p6M9LfYPkNgyBWtx08w13XXfUKx AkxDu/fvaZZqR3nEpvgscYKhQ48encp4ioLn3HZqZYhqU4PZpwPah4rwdEMCKQWW SoH292NWoBViHCHcDmwdWvWkCWEv/tmKQWZXIsjytevJ6GSWwwFgZTKo9TkYGWCz 7pcPGjMgE7txC62AcptCx8e4s0uK8m7o2x58mlmgQnYQ9evjQsoiT0bT+o1NH+yj f26m4Tew81hm8lff7V7VlgeI -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org