$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa File: AS395111.roa (raw, json) Hash identifier: 6YSI8oR8PGPj4vAp8miMJtXNEqK4UHZZyLpWBBHnmqY= Subject key identifier: B7:18:F6:48:09:7B:0B:86:FF:A2:93:BE:51:A7:01:77:96:BD:9E:29 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2562BA3835331F626A447F26F83A94E62741F092 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa Signing time: Wed 20 Nov 2024 18:49:21 +0000 ROA not before: Wed 20 Nov 2024 18:44:21 +0000 ROA not after: Wed 19 Nov 2025 18:49:21 +0000 asID: 395111 IP address blocks: 104.234.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:62:ba:38:35:33:1f:62:6a:44:7f:26:f8:3a:94:e6:27:41:f0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 20 18:44:21 2024 GMT Not After : Nov 19 18:49:21 2025 GMT Subject: CN=B718F648097B0B86FFA293BE51A7017796BD9E29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:2b:48:70:88:ba:4c:be:c7:d6:2b:56:fe: 1f:14:7f:41:d4:9c:00:2d:7a:29:b3:c9:0f:69:8a: e6:53:48:42:8c:af:8b:f3:8d:49:37:d5:1b:c9:71: 67:e3:0a:39:5e:04:5c:a1:8d:c3:82:e7:df:24:82: 9b:31:ef:62:26:4e:dd:61:60:b1:4c:99:98:fe:be: 47:72:39:93:00:98:17:8b:2c:14:3e:07:86:ae:6b: ef:e9:2c:f8:24:2b:a1:a8:76:55:a0:5f:87:ea:0b: e7:12:f9:bb:92:fa:2f:94:f0:e6:6d:93:d5:39:ec: df:e8:63:5b:8a:e9:81:5a:4c:5e:a0:5a:b3:2a:ec: 12:c5:8c:b0:25:c0:02:08:ee:9b:50:bf:65:59:c2: fa:ff:8d:43:71:71:1e:a4:a1:d3:68:91:d3:c9:cd: 7e:16:6c:b5:2c:a9:e9:b2:1d:8f:22:68:b0:2f:d9: f6:59:12:97:eb:f8:f8:19:fc:0e:7c:de:d7:43:76: 8c:29:2b:aa:33:c0:05:79:99:be:5c:76:d5:6b:a3: bd:d9:f1:41:0b:81:49:1d:75:c8:41:dd:b9:42:92: 6c:b5:1f:a0:7f:63:b2:1e:d3:c1:a2:1c:12:d0:9c: c0:b9:d2:5d:bf:3f:ad:3e:98:b7:12:c3:da:12:2d: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:18:F6:48:09:7B:0B:86:FF:A2:93:BE:51:A7:01:77:96:BD:9E:29 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.171.0/24 Signature Algorithm: sha256WithRSAEncryption bb:8a:c3:36:f2:4c:70:b6:7e:8d:61:25:c3:4c:c8:9a:2f:ff: df:da:c5:d6:82:93:6b:0d:cf:94:8a:12:97:65:77:05:64:8b: ed:8e:be:d0:1b:21:79:f0:cc:43:37:11:af:57:f1:9c:33:e7: 18:2b:8c:08:a2:66:53:06:4e:71:22:af:c4:3c:d4:90:6d:19: 39:8f:3a:a7:12:7c:f2:ac:d5:ae:98:ec:3c:01:a5:57:78:ad: 20:71:88:f1:74:c9:3d:3f:2c:38:55:6c:ce:7e:eb:bd:20:61: d8:07:76:f2:dc:87:79:77:3a:10:0e:cc:e2:2f:63:a1:c0:b7: 25:63:07:85:2c:04:6f:45:42:c3:17:cd:df:d1:41:ec:ce:53: 9e:0c:12:5e:0d:2e:ba:23:5e:48:80:42:13:6e:a6:c5:00:73: 78:87:f6:36:3b:fa:58:63:d7:93:85:77:bc:ea:72:a4:bc:ac: b2:26:b0:9e:87:20:0c:49:44:d3:a6:96:c8:44:22:4a:64:d8: a4:b0:09:84:67:49:01:c5:0d:55:6b:46:8f:25:12:39:0d:cd: 02:88:92:77:66:d2:5a:dd:11:63:b0:a1:a3:91:a0:dd:35:ec: 60:fa:79:3d:ee:50:64:86:6e:4b:e5:86:35:d8:b1:93:8e:39: 49:41:e5:02 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUJWK6ODUzH2JqRH8m+DqU5idB8JIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTIwMTg0NDIxWhcNMjUxMTE5MTg0OTIx WjAzMTEwLwYDVQQDEyhCNzE4RjY0ODA5N0IwQjg2RkZBMjkzQkU1MUE3MDE3Nzk2 QkQ5RTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr4rSHCIuky+ x9YrVv4fFH9B1JwALXops8kPaYrmU0hCjK+L841JN9UbyXFn4wo5XgRcoY3Dguff JIKbMe9iJk7dYWCxTJmY/r5HcjmTAJgXiywUPgeGrmvv6Sz4JCuhqHZVoF+H6gvn Evm7kvovlPDmbZPVOezf6GNbiumBWkxeoFqzKuwSxYywJcACCO6bUL9lWcL6/41D cXEepKHTaJHTyc1+Fmy1LKnpsh2PImiwL9n2WRKX6/j4GfwOfN7XQ3aMKSuqM8AF eZm+XHbVa6O92fFBC4FJHXXIQd25QpJstR+gf2OyHtPBohwS0JzAudJdvz+tPpi3 EsPaEi3H+QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFLcY9kgJewuG/6KTvlGnAXeW vZ4pMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NTExMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqqzANBgkqhkiG9w0BAQsFAAOC AQEAu4rDNvJMcLZ+jWElw0zImi//39rF1oKTaw3PlIoSl2V3BWSL7Y6+0BshefDM QzcRr1fxnDPnGCuMCKJmUwZOcSKvxDzUkG0ZOY86pxJ88qzVrpjsPAGlV3itIHGI 8XTJPT8sOFVszn7rvSBh2Ad28tyHeXc6EA7M4i9jocC3JWMHhSwEb0VCwxfN39FB 7M5TngwSXg0uuiNeSIBCE26mxQBzeIf2Njv6WGPXk4V3vOpypLyssiawnocgDElE 06aWyEQiSmTYpLAJhGdJAcUNVWtGjyUSOQ3NAoiSd2bSWt0RY7Cho5Gg3TXsYPp5 Pe5QZIZuS+WGNdixk445SUHlAg== -----END CERTIFICATE-----Generated at Mon Nov 25 13:16:14 2024 by rpki-client on console-ams.rpki-client.org