$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa File: AS32267.roa (raw, json) Hash identifier: Vd12jW63DeYTG6TkV4xpHuMI5xrUsWHckMLLzvpJk9w= Subject key identifier: B1:8E:3A:83:04:10:24:B8:32:BA:52:99:29:A3:7C:98:2F:66:B2:DF Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0B3D55C2C0183FD5EEDDEB263313E880685A8FCB Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa Signing time: Wed 20 Nov 2024 18:49:21 +0000 ROA not before: Wed 20 Nov 2024 18:44:21 +0000 ROA not after: Wed 19 Nov 2025 18:49:21 +0000 asID: 32267 IP address blocks: 104.234.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3d:55:c2:c0:18:3f:d5:ee:dd:eb:26:33:13:e8:80:68:5a:8f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 20 18:44:21 2024 GMT Not After : Nov 19 18:49:21 2025 GMT Subject: CN=B18E3A83041024B832BA529929A37C982F66B2DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:cb:57:7c:e9:c1:f3:78:d4:a9:89:9b:cd: 19:92:52:f3:21:4a:a6:63:73:20:3b:6f:0d:84:16: e0:ef:47:b3:c9:3c:87:c7:77:38:ea:9c:f9:13:06: ca:24:0b:48:1e:c3:ad:35:b0:fb:4d:bd:c7:4a:f4: 9a:45:6a:5a:72:d8:50:20:2a:e5:0f:1a:f4:b9:d2: fb:d4:0c:26:75:85:27:4e:ab:37:11:da:ac:dc:bc: 24:5c:7d:16:22:4e:91:47:ae:fa:d5:17:12:25:b2: fb:6d:1b:f9:46:36:58:6c:65:de:70:31:6d:53:a9: 0f:6f:63:6b:62:f9:15:9c:5d:2d:2e:05:b5:01:6d: f5:69:6a:7a:a6:af:39:a8:fa:22:1d:6e:b7:14:3a: fb:8c:2a:19:5c:f0:52:cd:3f:c4:7e:1b:b9:1d:46: 53:a4:63:1a:ce:c8:6c:17:f3:bc:8e:d9:14:46:2c: 66:49:1f:f2:0d:40:97:81:2e:ca:1c:c5:ca:df:e7: 15:47:3a:a7:15:71:e7:fd:6f:40:d4:a3:4e:7b:83: 52:32:60:13:9a:ca:cc:07:d4:14:93:a0:ab:b9:d3: 5b:7e:d1:ce:cc:26:dd:d3:ad:fe:e9:36:cc:6c:fe: 98:27:ba:08:7f:8d:fd:09:d4:fa:74:78:ee:d2:83: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:8E:3A:83:04:10:24:B8:32:BA:52:99:29:A3:7C:98:2F:66:B2:DF X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS32267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.38.0/23 Signature Algorithm: sha256WithRSAEncryption 56:66:76:18:9e:1c:47:c4:1e:d3:01:9a:f7:48:68:a8:de:87: 19:77:9b:8b:55:4b:1e:84:1d:a5:a6:f3:46:f7:75:01:0d:8a: 0b:a5:68:38:10:3f:5a:49:f5:90:0f:0c:8f:32:82:14:a4:ad: 55:4e:9b:18:07:af:68:6f:40:71:ec:cc:68:dc:ab:0f:6c:59: 67:fa:6a:bf:33:f3:9a:3e:e4:da:03:c2:2d:6c:b8:02:56:c1: 34:c8:c7:b8:64:19:2d:5c:e3:8f:12:19:09:02:76:90:bd:6a: 1d:f8:4b:ac:75:12:0d:f8:9f:39:44:87:cf:f1:cb:54:af:08: ca:46:7b:15:cf:d9:db:66:93:7c:b6:27:9e:d4:41:b0:fd:ac: e8:d5:93:41:ed:79:8a:e6:81:4a:8b:f2:63:bf:48:48:4c:29: b2:ec:43:02:bf:ae:a6:69:e7:cf:35:d6:0b:85:40:43:0b:de: a4:b6:82:d9:80:d5:01:07:61:94:15:70:26:26:14:96:e2:23: 49:17:2b:44:4f:39:3c:32:22:95:fe:53:66:7e:de:23:c7:39: 7b:67:29:75:39:52:74:22:4a:25:fd:b0:2e:96:98:66:ce:b7: d5:34:af:cb:10:f3:0c:22:ae:ed:74:97:a3:38:d0:ec:93:b0: 8b:25:a7:c3 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUCz1VwsAYP9Xu3esmMxPogGhaj8swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTIwMTg0NDIxWhcNMjUxMTE5MTg0OTIx WjAzMTEwLwYDVQQDEyhCMThFM0E4MzA0MTAyNEI4MzJCQTUyOTkyOUEzN0M5ODJG NjZCMkRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLfLV3zpwfN4 1KmJm80ZklLzIUqmY3MgO28NhBbg70ezyTyHx3c46pz5EwbKJAtIHsOtNbD7Tb3H SvSaRWpacthQICrlDxr0udL71AwmdYUnTqs3Edqs3LwkXH0WIk6RR6761RcSJbL7 bRv5RjZYbGXecDFtU6kPb2NrYvkVnF0tLgW1AW31aWp6pq85qPoiHW63FDr7jCoZ XPBSzT/Efhu5HUZTpGMazshsF/O8jtkURixmSR/yDUCXgS7KHMXK3+cVRzqnFXHn /W9A1KNOe4NSMmATmsrMB9QUk6CrudNbftHOzCbd063+6TbMbP6YJ7oIf439CdT6 dHju0oNxpwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLGOOoMEECS4MrpSmSmjfJgv ZrLfMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzMyMjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOomMA0GCSqGSIb3DQEBCwUAA4IB AQBWZnYYnhxHxB7TAZr3SGio3ocZd5uLVUsehB2lpvNG93UBDYoLpWg4ED9aSfWQ DwyPMoIUpK1VTpsYB69ob0Bx7Mxo3KsPbFln+mq/M/OaPuTaA8ItbLgCVsE0yMe4 ZBktXOOPEhkJAnaQvWod+EusdRIN+J85RIfP8ctUrwjKRnsVz9nbZpN8tiee1EGw /azo1ZNB7XmK5oFKi/Jjv0hITCmy7EMCv66maefPNdYLhUBDC96ktoLZgNUBB2GU FXAmJhSW4iNJFytETzk8MiKV/lNmft4jxzl7Zyl1OVJ0Ikol/bAulphmzrfVNK/L EPMMIq7tdJejONDsk7CLJafD -----END CERTIFICATE-----Generated at Sun Feb 16 20:27:19 2025 by rpki-client