$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa File: AS22653.roa (raw, json) Hash identifier: zZYXMLwYcwqADnkSHt4oyifEvon1alSJDlVPPEzzu1o= Subject key identifier: 87:7B:F9:7A:97:EE:E3:6A:49:FF:FE:E7:F3:CB:E5:D9:6D:DF:67:94 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 34F934A292CDE3B23010539A2C85434AD932EEF0 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa Signing time: Wed 31 Jan 2024 11:01:13 +0000 ROA not before: Wed 31 Jan 2024 10:56:13 +0000 ROA not after: Wed 29 Jan 2025 11:01:13 +0000 asID: 22653 IP address blocks: 104.234.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:f9:34:a2:92:cd:e3:b2:30:10:53:9a:2c:85:43:4a:d9:32:ee:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 31 10:56:13 2024 GMT Not After : Jan 29 11:01:13 2025 GMT Subject: CN=877BF97A97EEE36A49FFFEE7F3CBE5D96DDF6794 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:b4:1b:62:62:9f:b6:f6:88:6a:ca:03:ef:49: 9e:94:df:bb:aa:86:25:9b:1b:cb:da:aa:cc:4b:be: e5:12:fc:6d:8d:d5:6a:97:8e:6d:53:e2:78:15:bf: cf:70:da:d8:d8:3d:dd:06:55:ad:89:fd:dd:c4:4a: ac:fb:b9:7e:d2:10:0d:0b:dc:e3:f7:92:8c:cf:3d: 37:cc:c8:08:e0:a4:5d:2c:c5:c6:bd:28:4d:0d:91: 8f:57:32:ca:2c:bb:7d:ea:1e:97:fc:08:a3:1a:8f: 9c:1d:10:96:5a:50:44:0b:20:a7:0c:a7:99:07:df: c2:7c:82:a3:97:2d:4a:85:03:41:13:67:2b:e4:d8: ab:7d:0f:06:13:f4:0c:c5:55:cc:64:5e:b4:5b:5d: 97:12:d8:79:62:08:27:93:50:7d:57:1c:22:e2:4f: b9:42:c9:c2:ca:80:5e:bc:8b:de:a4:c7:ce:fa:73: d7:78:ef:bf:16:3c:73:e0:7f:42:74:27:b3:44:4d: f9:34:51:28:50:11:a8:6a:fd:a8:28:a9:7c:2f:81: dc:85:18:0d:bb:17:8a:df:6e:43:ca:f3:d2:b0:94: 9f:6e:e7:79:2d:b1:02:5b:eb:60:46:a1:49:c1:0c: 5f:62:d7:bc:3c:e5:76:3d:9b:34:54:7f:33:9c:a3: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7B:F9:7A:97:EE:E3:6A:49:FF:FE:E7:F3:CB:E5:D9:6D:DF:67:94 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.75.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:71:40:e0:3c:22:97:c3:f8:62:38:9a:1c:b1:f4:13:e1:f7: 09:3d:c7:85:68:c3:26:e1:bb:9b:11:72:4f:51:d1:0b:0e:f2: ca:5d:3b:e2:0f:a0:8f:56:ea:b9:30:f3:39:52:b4:b7:17:92: 6c:62:72:e7:88:ec:c7:3a:93:a1:a3:f0:11:10:db:ee:f9:d4: b6:86:aa:4c:c4:3e:54:28:d9:93:24:95:4a:c9:b8:fc:69:17: 40:9e:61:a1:fd:d3:6b:5b:ca:03:05:44:e4:85:c0:fb:c8:b2: c3:30:15:4e:be:bc:7f:db:ac:fc:67:a3:50:b2:47:c0:0e:8e: a8:f3:bf:f0:04:fe:2f:09:d5:2f:ba:db:8c:aa:5e:4e:8f:76: 0f:ff:2a:9c:5e:35:af:29:61:96:b4:40:e6:0a:22:5b:8f:cc: 4e:3f:11:84:db:84:a8:50:0a:17:9a:9f:52:e0:cc:c8:1c:49: 9b:60:1b:64:8d:7e:17:cb:72:14:23:a2:ae:03:94:f2:c5:90: f5:fb:17:bf:8a:6d:54:57:7e:54:bd:6d:a9:d0:7f:6d:ba:fc: 32:00:78:9a:f7:36:b0:48:bb:d6:d4:31:d9:bb:66:d0:39:88: ec:f6:4d:d0:3e:00:09:bf:34:06:8e:8f:4f:8c:72:49:e8:8a: ce:e4:7b:1c -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUNPk0opLN47IwEFOaLIVDStky7vAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMTMxMTA1NjEzWhcNMjUwMTI5MTEwMTEz WjAzMTEwLwYDVQQDEyg4NzdCRjk3QTk3RUVFMzZBNDlGRkZFRTdGM0NCRTVEOTZE REY2Nzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrQbYmKftvaI asoD70melN+7qoYlmxvL2qrMS77lEvxtjdVql45tU+J4Fb/PcNrY2D3dBlWtif3d xEqs+7l+0hANC9zj95KMzz03zMgI4KRdLMXGvShNDZGPVzLKLLt96h6X/AijGo+c HRCWWlBECyCnDKeZB9/CfIKjly1KhQNBE2cr5NirfQ8GE/QMxVXMZF60W12XEth5 Yggnk1B9Vxwi4k+5QsnCyoBevIvepMfO+nPXeO+/Fjxz4H9CdCezRE35NFEoUBGo av2oKKl8L4HchRgNuxeK325DyvPSsJSfbud5LbECW+tgRqFJwQxfYte8POV2PZs0 VH8znKPldQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFId7+XqX7uNqSf/+5/PL5dlt 32eUMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIyNjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpLMA0GCSqGSIb3DQEBCwUAA4IB AQB+cUDgPCKXw/hiOJocsfQT4fcJPceFaMMm4bubEXJPUdELDvLKXTviD6CPVuq5 MPM5UrS3F5JsYnLniOzHOpOho/ARENvu+dS2hqpMxD5UKNmTJJVKybj8aRdAnmGh /dNrW8oDBUTkhcD7yLLDMBVOvrx/26z8Z6NQskfADo6o87/wBP4vCdUvutuMql5O j3YP/yqcXjWvKWGWtEDmCiJbj8xOPxGE24SoUAoXmp9S4MzIHEmbYBtkjX4Xy3IU I6KuA5TyxZD1+xe/im1UV35UvW2p0H9tuvwyAHia9zawSLvW1DHZu2bQOYjs9k3Q PgAJvzQGjo9PjHJJ6IrO5Hsc -----END CERTIFICATE-----Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org