$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: sqIq6fEydd4WCTbQwS15Db44/qNWwTKrhqMe6TzjtB4= Subject key identifier: 68:46:AD:C2:45:AD:8A:E0:60:6D:27:DD:EE:78:91:29:2E:AF:C6:5D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5539A4783ADA4A902B8614D3C713F63FACA26E9E Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa Signing time: Sat 28 Sep 2024 22:27:19 +0000 ROA not before: Sat 28 Sep 2024 22:22:19 +0000 ROA not after: Sat 27 Sep 2025 22:27:19 +0000 asID: 23470 IP address blocks: 98.142.250.0/24 maxlen: 24 104.234.114.0/24 maxlen: 24 104.234.139.0/24 maxlen: 24 104.234.142.0/24 maxlen: 24 104.234.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:39:a4:78:3a:da:4a:90:2b:86:14:d3:c7:13:f6:3f:ac:a2:6e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 28 22:22:19 2024 GMT Not After : Sep 27 22:27:19 2025 GMT Subject: CN=6846ADC245AD8AE0606D27DDEE7891292EAFC65D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:17:de:1f:21:77:86:5e:62:b0:34:9e:67: 7f:61:c8:d9:cb:5d:3f:58:b2:46:8c:95:ec:18:10: 98:36:05:af:25:16:af:17:65:26:9e:72:35:a3:1d: 2d:f7:1b:7f:fe:01:36:2b:3c:29:c3:df:90:4c:26: db:6c:a8:e8:b4:fc:79:43:3c:14:fb:9e:1e:a2:21: 69:d6:4e:3e:5b:40:16:13:f6:69:1a:8d:72:80:bd: f6:fb:c0:f6:e3:40:d6:1c:46:50:c2:34:9e:e5:e3: 63:d8:14:92:28:82:09:b3:4d:f6:0e:79:09:02:3f: 83:76:95:12:c2:d1:c5:5e:11:a3:04:b7:5d:6e:a8: d8:df:82:f2:13:b6:94:91:c9:4d:66:69:6b:90:9b: 30:77:b5:a2:3f:7e:c6:2d:1f:b7:65:59:d2:81:d8: a1:33:d7:56:e6:61:f2:5b:80:3e:3e:55:23:49:82: 49:ea:a4:b3:92:35:4d:7c:a5:2d:cf:57:b2:73:ab: e1:fd:89:c0:8d:08:05:3f:21:11:b0:24:03:c8:32: 26:da:ec:44:db:9b:89:b8:2f:e8:4f:75:9e:e0:ca: e8:72:33:dd:f2:74:eb:6a:ae:1e:27:c6:24:5c:75: 0b:86:13:ba:8b:5f:f3:b3:c8:e3:e8:30:12:d1:ed: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:46:AD:C2:45:AD:8A:E0:60:6D:27:DD:EE:78:91:29:2E:AF:C6:5D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.250.0/24 104.234.114.0/24 104.234.139.0/24 104.234.142.0/24 104.234.160.0/24 Signature Algorithm: sha256WithRSAEncryption 52:29:3c:c6:3b:20:b7:db:2c:1c:9d:2f:44:3b:bc:54:25:d1: e4:92:21:3e:24:de:88:a3:9f:b4:59:78:a6:60:4f:8a:4d:b7: 73:d5:72:da:bf:bb:f4:3e:b1:ba:eb:d2:8b:dc:c4:5d:92:a1: e9:cb:aa:0a:3f:08:ba:57:0a:90:9f:d1:fc:34:1f:ff:3d:14: 66:8f:9c:d7:cf:d9:c4:63:8d:28:d8:d4:67:d0:e1:86:af:1c: 57:b4:ed:bf:20:8f:00:dd:7d:07:bc:02:dd:de:16:46:d0:47: 87:7b:18:9f:a1:b9:7a:2b:4b:f6:4e:4e:15:10:ce:b8:64:98: 86:f5:0c:14:eb:25:c0:27:f9:37:a6:d6:0a:c4:7e:e6:cc:e7: 35:17:58:de:f3:19:0d:22:5e:0d:75:15:b4:fd:65:7b:c8:6f: 4f:e9:9b:e1:30:3f:bb:62:ef:7a:91:4f:c6:2c:94:ae:87:82: 21:76:b1:c0:9f:91:e1:db:37:fb:e0:65:b5:6a:7a:98:55:b8: df:4d:7e:a4:52:b5:8c:e0:c7:26:be:85:0b:3a:4b:56:3c:cd: 18:62:fd:3b:bb:8c:d9:52:5a:04:c0:3d:bd:9b:e7:0b:83:73: c4:7e:b3:b2:cb:b0:8f:fe:6e:78:27:66:94:13:e2:0c:2f:69: 0f:64:4d:e1 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUVTmkeDraSpArhhTTxxP2P6yibp4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwOTI4MjIyMjE5WhcNMjUwOTI3MjIyNzE5 WjAzMTEwLwYDVQQDEyg2ODQ2QURDMjQ1QUQ4QUUwNjA2RDI3RERFRTc4OTEyOTJF QUZDNjVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlygX3h8hd4Ze YrA0nmd/YcjZy10/WLJGjJXsGBCYNgWvJRavF2UmnnI1ox0t9xt//gE2Kzwpw9+Q TCbbbKjotPx5QzwU+54eoiFp1k4+W0AWE/ZpGo1ygL32+8D240DWHEZQwjSe5eNj 2BSSKIIJs032DnkJAj+DdpUSwtHFXhGjBLddbqjY34LyE7aUkclNZmlrkJswd7Wi P37GLR+3ZVnSgdihM9dW5mHyW4A+PlUjSYJJ6qSzkjVNfKUtz1eyc6vh/YnAjQgF PyERsCQDyDIm2uxE25uJuC/oT3We4MrocjPd8nTraq4eJ8YkXHULhhO6i1/zs8jj 6DAS0e0YYQIDAQABo4ICljCCApIwHQYDVR0OBBYEFGhGrcJFrYrgYG0n3e54kSku r8ZdMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAYo76AwQAaOpyAwQAaOqLAwQAaOqO AwQAaOqgMA0GCSqGSIb3DQEBCwUAA4IBAQBSKTzGOyC32ywcnS9EO7xUJdHkkiE+ JN6Io5+0WXimYE+KTbdz1XLav7v0PrG669KL3MRdkqHpy6oKPwi6VwqQn9H8NB// PRRmj5zXz9nEY40o2NRn0OGGrxxXtO2/II8A3X0HvALd3hZG0EeHexifobl6K0v2 Tk4VEM64ZJiG9QwU6yXAJ/k3ptYKxH7mzOc1F1je8xkNIl4NdRW0/WV7yG9P6Zvh MD+7Yu96kU/GLJSuh4IhdrHAn5Hh2zf74GW1anqYVbjfTX6kUrWM4McmvoULOktW PM0YYv07u4zZUloEwD29m+cLg3PEfrOyy7CP/m54J2aUE+IML2kPZE3h -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:20 2024 by rpki-client on console-fra.rpki-client.org