$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa File: AS25369.roa (raw, json) Hash identifier: 1CVcX+aMDKJxQ0Cz86erTIBPvWaEJhS2JjTrnoWocg0= Subject key identifier: 84:5D:13:ED:72:BB:D3:A6:F3:03:DA:26:87:B9:32:A1:B4:AB:5C:07 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2E86AFB2D6901B0DE3EF22AC5C45A2535F8FB9C4 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa Signing time: Fri 15 Nov 2024 23:49:21 +0000 ROA not before: Fri 15 Nov 2024 23:44:21 +0000 ROA not after: Fri 14 Nov 2025 23:49:21 +0000 asID: 25369 IP address blocks: 104.234.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 22:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:86:af:b2:d6:90:1b:0d:e3:ef:22:ac:5c:45:a2:53:5f:8f:b9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 15 23:44:21 2024 GMT Not After : Nov 14 23:49:21 2025 GMT Subject: CN=845D13ED72BBD3A6F303DA2687B932A1B4AB5C07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4f:ff:69:96:71:d7:c8:4f:47:88:8e:6e:47: c2:0b:77:95:b5:c8:40:e1:c2:ec:7f:5d:b1:0d:0f: e4:ca:80:26:dd:d6:db:77:f9:30:55:d5:ac:0f:d5: 33:35:90:b0:73:ea:9e:a5:83:84:9d:69:76:63:dc: 12:09:4c:f5:68:67:8f:4f:b2:96:af:ef:61:28:38: 62:81:46:f1:79:44:0f:7b:54:27:ea:41:61:be:af: 86:3f:9e:7f:7a:ee:d3:c5:9e:d7:0e:1f:2b:6e:1e: 98:4a:15:48:13:41:a3:ad:d0:7f:a8:f0:9f:b2:fc: 3a:65:a7:4f:a4:75:b3:2d:79:df:9e:46:f6:9f:e5: c3:d0:94:c7:c7:be:52:2f:a0:5c:88:6b:b8:47:52: f2:d4:50:49:ce:ff:56:36:96:26:a3:71:08:cd:9a: 22:bd:c6:1c:41:0f:ad:6b:56:d6:ec:a9:7f:42:c1: 75:4b:61:57:b2:44:1a:94:48:45:b6:34:0d:92:21: aa:cb:05:35:50:80:63:8d:0c:ec:ed:57:5b:7a:fe: 99:82:3f:f4:6c:b8:73:9f:9a:51:be:2b:55:f9:44: 40:ec:a1:e4:9d:9f:bd:9a:9f:c9:44:96:3f:fa:c0: 7a:99:18:d1:ef:b9:04:c2:71:39:43:60:53:f1:07: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5D:13:ED:72:BB:D3:A6:F3:03:DA:26:87:B9:32:A1:B4:AB:5C:07 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25369.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.56.0/24 Signature Algorithm: sha256WithRSAEncryption b2:aa:aa:64:85:e0:8c:46:73:ed:96:7c:a9:f2:9c:ba:e3:86: 05:50:11:80:de:bd:d6:c0:bb:b3:c7:2f:0d:94:de:c7:1a:de: f5:e7:b8:b8:b9:ab:7f:5f:c8:a9:69:4f:72:ba:f4:b4:87:ed: 76:33:b7:0d:4f:0f:9b:a6:58:88:92:e2:cb:5c:a6:bf:e6:61: fd:32:ea:41:a9:99:ba:98:89:8b:73:5e:2a:8b:60:fd:37:7a: 5a:12:93:47:3f:a7:30:2d:93:38:de:6e:46:cb:a2:32:f0:47: 26:3b:9f:54:06:59:02:a8:52:42:c6:9e:70:d4:de:d9:bb:fd: b8:5c:3f:35:ac:fa:c9:32:f2:66:f4:22:04:8b:25:db:4b:ea: 1a:71:96:2a:ee:4a:a5:b2:b5:1a:33:ff:47:b0:6c:21:22:2d: 37:b4:bd:eb:53:9a:09:28:1b:3b:d1:28:89:12:fd:64:d5:62: eb:43:4b:15:67:43:3c:4b:55:6d:b5:39:72:61:95:4c:3f:3a: 62:1c:c1:06:0e:40:a2:06:f2:61:47:e3:96:a5:e1:75:3d:93: f1:bb:51:9b:1f:2a:ac:2d:37:f2:bf:dd:63:05:9d:2a:0e:20: 4b:67:8d:dd:72:ed:a7:d2:c2:d3:c9:ab:d3:53:74:30:ab:e9: c8:f5:b4:07 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIULoavstaQGw3j7yKsXEWiU1+PucQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTE1MjM0NDIxWhcNMjUxMTE0MjM0OTIx WjAzMTEwLwYDVQQDEyg4NDVEMTNFRDcyQkJEM0E2RjMwM0RBMjY4N0I5MzJBMUI0 QUI1QzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArk//aZZx18hP R4iObkfCC3eVtchA4cLsf12xDQ/kyoAm3dbbd/kwVdWsD9UzNZCwc+qepYOEnWl2 Y9wSCUz1aGePT7KWr+9hKDhigUbxeUQPe1Qn6kFhvq+GP55/eu7TxZ7XDh8rbh6Y ShVIE0GjrdB/qPCfsvw6ZadPpHWzLXnfnkb2n+XD0JTHx75SL6BciGu4R1Ly1FBJ zv9WNpYmo3EIzZoivcYcQQ+ta1bW7Kl/QsF1S2FXskQalEhFtjQNkiGqywU1UIBj jQzs7Vdbev6Zgj/0bLhzn5pRvitV+URA7KHknZ+9mp/JRJY/+sB6mRjR77kEwnE5 Q2BT8Qd8ewIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIRdE+1yu9Om8wPaJoe5MqG0 q1wHMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI1MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOo4MA0GCSqGSIb3DQEBCwUAA4IB AQCyqqpkheCMRnPtlnyp8py644YFUBGA3r3WwLuzxy8NlN7HGt7157i4uat/X8ip aU9yuvS0h+12M7cNTw+bpliIkuLLXKa/5mH9MupBqZm6mImLc14qi2D9N3paEpNH P6cwLZM43m5Gy6Iy8EcmO59UBlkCqFJCxp5w1N7Zu/24XD81rPrJMvJm9CIEiyXb S+oacZYq7kqlsrUaM/9HsGwhIi03tL3rU5oJKBs70SiJEv1k1WLrQ0sVZ0M8S1Vt tTlyYZVMPzpiHMEGDkCiBvJhR+OWpeF1PZPxu1GbHyqsLTfyv91jBZ0qDiBLZ43d cu2n0sLTyavTU3Qwq+nI9bQH -----END CERTIFICATE-----Generated at Thu Nov 21 21:03:20 2024 by rpki-client on console-fra.rpki-client.org