$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214174.roa File: AS214174.roa (raw, json) Hash identifier: GuCKJl/9qLioqD9srcLPoXEKo/my2wS0Gc22gEYMZr0= Subject key identifier: 33:B5:13:97:4D:3F:2B:91:75:06:ED:1E:14:4C:B9:BA:74:65:A9:D6 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3E5AD872529060BE0427C07809C65374D3F0DB57 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214174.roa Signing time: Mon 02 Dec 2024 12:18:52 +0000 ROA not before: Mon 02 Dec 2024 12:13:52 +0000 ROA not after: Mon 01 Dec 2025 12:18:52 +0000 asID: 214174 IP address blocks: 104.234.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 09:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:5a:d8:72:52:90:60:be:04:27:c0:78:09:c6:53:74:d3:f0:db:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 2 12:13:52 2024 GMT Not After : Dec 1 12:18:52 2025 GMT Subject: CN=33B513974D3F2B917506ED1E144CB9BA7465A9D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:8a:d6:f9:b2:55:ee:56:e7:32:31:67:81: 03:e4:4c:cd:31:19:32:10:e9:21:10:05:c0:cb:37: 31:7c:aa:61:0f:cd:c5:03:51:d6:7c:5e:7e:56:a2: 68:d8:50:94:00:bb:50:52:a9:eb:a6:46:18:54:da: da:a7:2a:4e:94:19:a7:b4:84:e0:3f:ba:12:20:b4: ec:de:e0:6d:12:14:cb:8d:7e:14:e8:1f:a0:2a:8d: c3:01:1a:65:92:5f:ea:f1:60:49:1b:61:1a:2b:7a: c5:d2:3d:85:6d:07:7e:ae:26:c3:1d:19:7a:1e:16: 69:1e:30:ac:c9:41:6b:19:75:f9:1f:f5:5d:a8:86: 04:ca:4b:85:8b:f2:a1:79:8a:87:63:f9:be:17:06: 6d:96:53:57:16:5e:01:72:5d:03:5d:6d:2e:96:5d: 1c:9e:b1:5b:78:9e:e3:70:c8:e0:aa:67:27:21:8f: 4b:cc:0d:8b:ac:82:0b:46:81:b1:0a:57:a9:75:d9: ad:62:a4:6d:67:e1:f8:7c:df:8c:2c:10:26:c8:e0: 7d:b8:9d:45:94:62:39:97:3f:f3:4c:bf:4e:2c:0c: 8d:8d:1e:d4:be:94:77:38:f2:73:99:0b:53:af:01: 27:18:5f:bc:25:66:fd:e6:eb:56:c0:b9:a6:7a:29: 1e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B5:13:97:4D:3F:2B:91:75:06:ED:1E:14:4C:B9:BA:74:65:A9:D6 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.174.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:9a:f7:2d:a7:36:a5:40:bd:a3:da:18:d3:ee:5e:05:93:d3: 8d:fe:f1:8e:b0:e3:ad:44:ec:9a:fb:10:93:5f:eb:04:ec:fc: 0a:f0:3c:55:b1:50:93:c9:7c:a6:55:bb:1d:cd:92:3c:fa:c3: 2d:49:cc:9b:87:4a:b0:42:40:b4:38:5f:77:cc:df:c4:b5:f2: 7a:57:e8:0f:a1:7a:73:e8:42:1f:9c:6a:43:14:0b:f7:3e:6c: 48:ef:97:fc:d6:59:5b:6c:7a:b7:7c:8d:82:29:ba:c6:f3:8c: 62:fd:57:e8:9e:98:e5:56:09:2a:1a:79:43:69:2d:97:c2:fe: ed:e6:98:56:b9:96:9b:d2:56:52:eb:68:88:06:52:ad:bd:d4: a3:20:90:7e:b8:e7:33:b6:cb:0a:14:59:67:f9:f6:c9:dd:38: f2:5c:da:e6:0d:88:ac:64:a2:d8:0b:e1:95:24:dd:f6:31:97: a0:a7:2d:6e:ce:eb:fc:1b:c7:e6:41:82:25:a3:be:b7:83:b7: 10:47:1a:e5:93:b3:0e:26:a3:ae:39:52:9a:00:ae:38:9b:33: 26:5b:24:ab:4b:49:e7:4b:ed:c4:fd:0f:20:cd:7b:02:58:20: 15:de:45:50:5c:0e:e3:5c:30:b8:9e:5e:ec:fe:3c:a7:e4:e7: bd:50:6d:d9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUPlrYclKQYL4EJ8B4CcZTdNPw21cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMjAyMTIxMzUyWhcNMjUxMjAxMTIxODUy WjAzMTEwLwYDVQQDEygzM0I1MTM5NzREM0YyQjkxNzUwNkVEMUUxNDRDQjlCQTc0 NjVBOUQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDeK1vmyVe5W 5zIxZ4ED5EzNMRkyEOkhEAXAyzcxfKphD83FA1HWfF5+VqJo2FCUALtQUqnrpkYY VNrapypOlBmntITgP7oSILTs3uBtEhTLjX4U6B+gKo3DARplkl/q8WBJG2EaK3rF 0j2FbQd+ribDHRl6HhZpHjCsyUFrGXX5H/VdqIYEykuFi/KheYqHY/m+FwZtllNX Fl4Bcl0DXW0ull0cnrFbeJ7jcMjgqmcnIY9LzA2LrIILRoGxClepddmtYqRtZ+H4 fN+MLBAmyOB9uJ1FlGI5lz/zTL9OLAyNjR7UvpR3OPJzmQtTrwEnGF+8JWb95utW wLmmeikedQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDO1E5dNPyuRdQbtHhRMubp0 ZanWMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNDE3NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqrjANBgkqhkiG9w0BAQsFAAOC AQEAb5r3Lac2pUC9o9oY0+5eBZPTjf7xjrDjrUTsmvsQk1/rBOz8CvA8VbFQk8l8 plW7Hc2SPPrDLUnMm4dKsEJAtDhfd8zfxLXyelfoD6F6c+hCH5xqQxQL9z5sSO+X /NZZW2x6t3yNgim6xvOMYv1X6J6Y5VYJKhp5Q2ktl8L+7eaYVrmWm9JWUutoiAZS rb3UoyCQfrjnM7bLChRZZ/n2yd048lza5g2IrGSi2AvhlSTd9jGXoKctbs7r/BvH 5kGCJaO+t4O3EEca5ZOzDiajrjlSmgCuOJszJlskq0tJ50vtxP0PIM17AlggFd5F UFwO41wwuJ5e7P48p+TnvVBt2Q== -----END CERTIFICATE-----Generated at Wed Feb 5 08:54:38 2025 by rpki-client