$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20648.roa File: AS20648.roa (raw, json) Hash identifier: AmLR/B+oFYLiIy9/YQzgIN+ZJ+KEX/MAiRMSz6mlHII= Subject key identifier: 27:04:9C:0C:6D:7E:C7:BC:33:1F:02:0B:D7:16:EF:11:F3:31:10:8E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 743BCD40FDF6C0CD0E5894203D5C8CE0DDDF4BE6 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20648.roa Signing time: Wed 08 Jan 2025 12:11:38 +0000 ROA not before: Wed 08 Jan 2025 12:06:38 +0000 ROA not after: Wed 07 Jan 2026 12:11:38 +0000 asID: 20648 IP address blocks: 104.234.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 09:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:3b:cd:40:fd:f6:c0:cd:0e:58:94:20:3d:5c:8c:e0:dd:df:4b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 8 12:06:38 2025 GMT Not After : Jan 7 12:11:38 2026 GMT Subject: CN=27049C0C6D7EC7BC331F020BD716EF11F331108E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:fd:43:f9:ac:20:cc:f3:3b:bc:4c:4d:8e: 39:06:1c:a8:eb:16:64:fa:01:fb:ce:62:b2:69:7c: 88:b9:6b:a3:70:41:d0:81:00:95:19:38:b8:05:ae: 08:da:31:71:29:63:0e:f2:3d:ea:52:e7:cf:c3:21: a6:bf:0c:2a:76:f4:0c:ac:95:11:1a:95:f3:26:c6: 38:b2:fe:56:ed:6c:85:68:7d:bf:38:de:8c:21:ce: 0a:69:01:13:5c:f5:ed:32:09:3a:ef:0e:d2:fc:44: d7:86:d2:d5:44:b9:be:2a:25:ad:4f:d5:06:df:dd: 9f:d7:3a:7d:ff:a2:29:fd:4d:83:81:d3:2d:ae:d4: f7:46:c8:1d:c3:d9:00:15:9f:ed:ca:dd:66:f1:53: 5d:f3:0d:b8:21:9d:ff:2d:0b:6d:25:e5:0b:40:4f: 56:2a:3a:24:cd:41:b1:02:bd:0f:5c:d7:c1:d6:da: 37:69:84:2a:40:f5:6c:a5:fd:2e:0a:e9:00:90:f6: ae:eb:3a:42:86:ce:96:db:75:07:c0:5e:a4:b9:00: 8f:64:33:24:f7:b4:84:2b:ca:04:b8:50:b9:c9:3b: 8a:b8:11:69:2d:91:ba:12:97:2e:67:fd:ea:d6:53: 8e:3d:17:57:38:18:f2:1a:71:db:1c:5e:f9:f1:0f: fe:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:04:9C:0C:6D:7E:C7:BC:33:1F:02:0B:D7:16:EF:11:F3:31:10:8E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS20648.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.106.0/24 Signature Algorithm: sha256WithRSAEncryption bf:68:8d:0b:87:fa:38:58:e2:24:cc:38:98:de:65:ee:ce:a5: 33:c6:67:ac:b6:0d:43:da:be:32:dc:b5:ba:29:5a:06:df:ff: e6:b7:6b:09:46:90:17:4a:94:dc:f1:82:72:9a:2a:28:ef:5b: b3:b0:c8:50:1f:a1:6c:78:f5:e1:45:d7:c3:92:f4:d1:ea:0a: 01:72:0c:ba:97:2c:72:1a:87:56:ec:41:bf:bf:d1:f2:55:6f: 73:4e:78:a2:b7:22:d3:67:b4:d9:56:31:07:74:ef:e3:90:73: ec:9a:c1:d9:0e:7d:45:55:13:b4:4b:0f:71:c2:f1:f6:c7:28: 6c:3e:fe:b2:c7:02:9c:42:2a:a2:d2:1d:86:44:9f:ac:2d:1f: e1:2f:34:26:35:2b:9c:bc:87:59:f6:b6:e5:53:8c:98:1a:18: a4:7a:ce:ad:25:9b:99:3d:9e:a5:9f:e4:8b:4d:e6:49:33:de: cd:2c:e0:a3:fe:6c:f7:62:1a:bd:7b:c4:4e:aa:fa:99:c0:eb: 62:5b:2f:f1:8a:34:8f:74:77:fb:5b:83:79:19:ab:86:38:62: ba:95:fb:71:08:8c:3a:70:e2:ec:9b:33:b0:ff:bf:f6:50:fe: ab:49:58:6b:ca:dd:56:cd:e3:2b:38:84:b5:74:df:43:ca:46: 3e:8d:50:67 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUdDvNQP32wM0OWJQgPVyM4N3fS+YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA4MTIwNjM4WhcNMjYwMTA3MTIxMTM4 WjAzMTEwLwYDVQQDEygyNzA0OUMwQzZEN0VDN0JDMzMxRjAyMEJENzE2RUYxMUYz MzExMDhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0//9Q/msIMzz O7xMTY45Bhyo6xZk+gH7zmKyaXyIuWujcEHQgQCVGTi4Ba4I2jFxKWMO8j3qUufP wyGmvwwqdvQMrJURGpXzJsY4sv5W7WyFaH2/ON6MIc4KaQETXPXtMgk67w7S/ETX htLVRLm+KiWtT9UG392f1zp9/6Ip/U2DgdMtrtT3Rsgdw9kAFZ/tyt1m8VNd8w24 IZ3/LQttJeULQE9WKjokzUGxAr0PXNfB1to3aYQqQPVspf0uCukAkPau6zpChs6W 23UHwF6kuQCPZDMk97SEK8oEuFC5yTuKuBFpLZG6EpcuZ/3q1lOOPRdXOBjyGnHb HF758Q/+JwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCcEnAxtfse8Mx8CC9cW7xHz MRCOMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNjQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpqMA0GCSqGSIb3DQEBCwUAA4IB AQC/aI0Lh/o4WOIkzDiY3mXuzqUzxmestg1D2r4y3LW6KVoG3//mt2sJRpAXSpTc 8YJymioo71uzsMhQH6FsePXhRdfDkvTR6goBcgy6lyxyGodW7EG/v9HyVW9zTnii tyLTZ7TZVjEHdO/jkHPsmsHZDn1FVRO0Sw9xwvH2xyhsPv6yxwKcQiqi0h2GRJ+s LR/hLzQmNSucvIdZ9rblU4yYGhikes6tJZuZPZ6ln+SLTeZJM97NLOCj/mz3Yhq9 e8ROqvqZwOtiWy/xijSPdHf7W4N5GauGOGK6lftxCIw6cOLsmzOw/7/2UP6rSVhr yt1WzeMrOIS1dN9DykY+jVBn -----END CERTIFICATE-----Generated at Wed Feb 5 08:36:38 2025 by rpki-client