$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: 9hED1g//5bhi5ykx4J0bDGWplVtEN8IFeIWC8XdDG9s= Subject key identifier: CB:BA:E0:46:D2:90:7B:12:BC:96:ED:0D:88:F1:BA:93:93:BC:82:81 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 17184E2A2F7BE89894E417CD535504FFA59CFFC8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa Signing time: Sun 05 Jan 2025 00:02:02 +0000 ROA not before: Sat 04 Jan 2025 23:57:02 +0000 ROA not after: Sun 04 Jan 2026 00:02:02 +0000 asID: 23470 IP address blocks: 104.234.114.0/24 maxlen: 24 104.234.139.0/24 maxlen: 24 104.234.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:18:4e:2a:2f:7b:e8:98:94:e4:17:cd:53:55:04:ff:a5:9c:ff:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 4 23:57:02 2025 GMT Not After : Jan 4 00:02:02 2026 GMT Subject: CN=CBBAE046D2907B12BC96ED0D88F1BA9393BC8281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:03:1b:8b:cf:ef:3b:38:6c:b0:79:d5:d6: 2e:2e:85:10:b2:90:b3:bb:72:c4:b7:cf:62:45:56: d5:b2:05:08:01:ab:57:89:f2:a8:aa:9e:03:96:c0: 69:b8:03:84:11:6e:49:bf:ee:9a:a4:32:9e:5b:ab: 23:cd:8d:c5:ac:3b:48:35:f8:91:15:ee:af:4c:07: 6b:48:da:28:27:fb:bf:00:9e:35:f8:92:a7:64:a9: e9:95:5f:f6:17:a9:f7:67:8b:6d:71:4a:db:b2:e0: 7a:59:cc:c6:1b:c0:e8:5b:b1:9a:04:e8:92:17:25: 44:c6:bb:f2:d1:27:49:13:72:2c:4c:c5:75:40:1c: 22:19:ec:ea:99:6b:85:61:f1:19:9a:07:f8:d4:07: 16:aa:25:43:b3:d5:95:56:2c:f6:cd:67:9e:e2:65: c8:4c:ae:da:aa:16:0f:4c:92:a3:d8:dc:7c:94:c8: 16:6f:b0:69:0f:66:9b:f4:4b:29:8f:e3:8a:c3:47: 29:81:a6:f7:68:be:5b:9e:9f:5d:a3:9c:d8:12:13: 80:e0:44:00:ab:fc:86:90:13:93:a5:66:3a:90:fe: c8:93:64:d5:ce:f3:9c:c7:0c:05:2c:fd:70:2d:2b: d7:73:5d:08:c1:75:90:30:ae:4b:53:e0:56:e3:0d: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BA:E0:46:D2:90:7B:12:BC:96:ED:0D:88:F1:BA:93:93:BC:82:81 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.114.0/24 104.234.139.0/24 104.234.142.0/24 Signature Algorithm: sha256WithRSAEncryption bc:da:c3:6a:25:10:c5:3c:76:8e:7e:47:b0:c9:65:2b:79:78: 4f:f9:67:e6:81:90:f2:02:74:6a:ef:85:dd:8b:70:51:a7:02: 59:0a:11:fc:08:a0:c7:fa:4d:4a:1c:72:23:27:dc:1b:40:e2: a0:6e:66:d5:a1:8d:11:4d:31:89:62:3b:5e:f2:88:2c:4f:aa: 5d:5c:1d:f0:c7:b1:f9:c0:58:d3:07:b4:ef:91:2b:14:d1:c0: 1c:8f:be:6b:f6:b3:d3:a0:94:3b:a0:cd:4d:33:1d:fb:88:7c: c3:76:2f:06:3c:1d:9c:36:56:d6:39:36:36:15:eb:34:92:98: 3d:11:e6:2d:8d:ba:cc:18:99:08:9a:3b:9f:2b:26:c0:0e:cf: 08:36:0d:ff:b6:33:f0:be:89:a2:2f:ab:80:01:26:94:21:ce: e9:85:b9:d0:51:53:88:3b:6f:6a:0c:cf:a9:1d:87:97:fb:e6: 72:9b:56:e2:71:42:8b:00:9e:59:64:9a:b6:bd:27:53:b8:45: 07:15:aa:0a:02:c4:b5:97:9e:eb:f3:37:93:ba:cb:64:ff:8b: 58:b3:24:e6:4e:9c:22:36:51:9c:4e:3e:2c:53:e1:d2:8b:00: 2f:11:31:00:b5:b9:fd:83:a6:ee:37:61:7c:78:3e:52:bc:a6: f7:41:c9:97 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUFxhOKi976JiU5BfNU1UE/6Wc/8gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA0MjM1NzAyWhcNMjYwMTA0MDAwMjAy WjAzMTEwLwYDVQQDEyhDQkJBRTA0NkQyOTA3QjEyQkM5NkVEMEQ4OEYxQkE5Mzkz QkM4MjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo8DG4vP7zs4 bLB51dYuLoUQspCzu3LEt89iRVbVsgUIAatXifKoqp4DlsBpuAOEEW5Jv+6apDKe W6sjzY3FrDtINfiRFe6vTAdrSNooJ/u/AJ41+JKnZKnplV/2F6n3Z4ttcUrbsuB6 WczGG8DoW7GaBOiSFyVExrvy0SdJE3IsTMV1QBwiGezqmWuFYfEZmgf41AcWqiVD s9WVViz2zWee4mXITK7aqhYPTJKj2Nx8lMgWb7BpD2ab9Espj+OKw0cpgab3aL5b np9do5zYEhOA4EQAq/yGkBOTpWY6kP7Ik2TVzvOcxwwFLP1wLSvXc10IwXWQMK5L U+BW4w1ToQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFMu64EbSkHsSvJbtDYjxupOT vIKBMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOpyAwQAaOqLAwQAaOqOMA0GCSqG SIb3DQEBCwUAA4IBAQC82sNqJRDFPHaOfkewyWUreXhP+WfmgZDyAnRq74Xdi3BR pwJZChH8CKDH+k1KHHIjJ9wbQOKgbmbVoY0RTTGJYjte8ogsT6pdXB3wx7H5wFjT B7TvkSsU0cAcj75r9rPToJQ7oM1NMx37iHzDdi8GPB2cNlbWOTY2Fes0kpg9EeYt jbrMGJkImjufKybADs8INg3/tjPwvomiL6uAASaUIc7phbnQUVOIO29qDM+pHYeX ++Zym1bicUKLAJ5ZZJq2vSdTuEUHFaoKAsS1l57r8zeTustk/4tYsyTmTpwiNlGc Tj4sU+HSiwAvETEAtbn9g6buN2F8eD5SvKb3QcmX -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:41 2025 by rpki-client