$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395898.roa File: AS395898.roa (raw, json) Hash identifier: ISdR2EIihHvKenAXv0IiAudxEHiFiVeEBFGKRP41ciQ= Subject key identifier: 04:53:57:48:CF:05:F2:95:E3:DE:42:11:37:FB:6E:8D:F0:40:00:1D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 39EBBA1F206B49549725D8DA9EFCC4DCA79DCA Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395898.roa Signing time: Sat 01 Feb 2025 03:28:26 +0000 ROA not before: Sat 01 Feb 2025 03:23:26 +0000 ROA not after: Sat 31 Jan 2026 03:28:26 +0000 asID: 395898 IP address blocks: 104.234.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:eb:ba:1f:20:6b:49:54:97:25:d8:da:9e:fc:c4:dc:a7:9d:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 1 03:23:26 2025 GMT Not After : Jan 31 03:28:26 2026 GMT Subject: CN=04535748CF05F295E3DE421137FB6E8DF040001D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:02:3d:9d:f8:54:19:4a:2f:17:b7:0b:17:b5: 23:6b:4b:ce:53:bb:ef:a9:b9:4e:17:90:0b:5f:13: e1:7a:0c:4f:c4:18:1c:ad:68:51:36:77:17:86:2b: 6f:1a:f1:2a:02:e9:ce:d8:e6:4e:f1:aa:e1:4b:21: 5b:e7:da:9d:29:53:fd:67:92:a2:f7:3c:42:0e:59: 13:83:ae:62:95:ed:62:79:19:0c:ea:ef:47:0e:31: e7:7e:74:e6:f2:00:7b:ec:0c:ce:f0:e2:c4:f1:54: 36:ef:e3:ef:07:1d:1d:79:ed:1c:4d:5c:c4:ae:5b: 19:87:cc:52:e3:4a:1d:3b:22:4b:11:3a:3b:44:96: f9:39:e5:26:5b:b9:ca:93:c6:46:6d:48:f9:f2:c5: 7e:b1:58:73:f7:cb:05:42:d5:0f:5f:ca:37:ec:8a: 2e:18:b8:9c:11:71:97:aa:d8:fd:e8:70:0f:46:b9: 0b:01:aa:e9:61:67:a8:f2:9e:41:5b:92:b0:93:be: 44:31:e8:9e:49:ba:3a:d7:7c:77:6a:b4:ec:30:ee: 53:be:0c:4c:6a:db:25:24:b3:35:c5:82:cc:9e:b0: 45:ca:97:71:2c:58:8d:4f:7d:65:5c:a4:bf:51:2d: b0:b6:0c:be:70:ed:e0:4f:30:d0:06:0f:1c:ae:3a: 8b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:57:48:CF:05:F2:95:E3:DE:42:11:37:FB:6E:8D:F0:40:00:1D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395898.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.119.0/24 Signature Algorithm: sha256WithRSAEncryption aa:56:fb:dc:7b:96:7f:2b:94:8d:64:06:dd:c2:61:32:85:5e: 73:72:ae:5e:4d:58:d6:b9:29:cf:73:b3:9c:5d:e0:a8:5d:d0: c4:6c:96:67:0d:e9:f4:f8:a9:e0:f7:2d:ce:44:39:0e:a8:4c: 88:29:06:bd:9f:71:24:d5:c0:94:01:0e:75:57:89:38:9d:1f: c3:30:77:c4:31:ae:97:7a:a9:79:6b:b9:25:5f:86:8e:37:65: 36:da:b7:38:2f:b1:9b:fc:f7:ca:09:dc:b5:2c:25:0a:a5:e0: 3c:a8:7d:26:50:45:3a:b5:13:a1:95:92:b7:50:4e:22:44:f3: b3:52:45:5b:11:e1:ea:b1:42:17:35:d4:dd:ed:d7:47:9f:9f: 21:19:51:93:14:6e:8f:53:51:b3:28:06:d2:c0:ca:55:c3:5a: 4f:5b:a3:92:04:53:c0:de:c0:3f:38:06:dc:c5:87:03:ec:33: 4d:34:9c:a9:26:95:f5:50:7a:c1:3b:2a:e5:4e:97:09:67:1d: 8d:30:0c:91:c6:87:7e:51:74:7b:00:61:a2:5b:70:8d:4a:bd: 8a:30:c9:32:c5:50:80:94:a7:d8:f4:b0:85:b7:14:44:ad:39: ab:0e:14:0f:2f:99:3a:ea:3c:b5:ff:5a:11:28:af:6f:b2:c0: 1e:45:d1:96 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgITOeu6HyBrSVSXJdjanvzE3KedyjANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI3MmNjMWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBj YmJmMTIzZjNjMGIxZjdmOTAeFw0yNTAyMDEwMzIzMjZaFw0yNjAxMzEwMzI4MjZa MDMxMTAvBgNVBAMTKDA0NTM1NzQ4Q0YwNUYyOTVFM0RFNDIxMTM3RkI2RThERjA0 MDAwMUQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaAj2d+FQZSi8X twsXtSNrS85Tu++puU4XkAtfE+F6DE/EGBytaFE2dxeGK28a8SoC6c7Y5k7xquFL IVvn2p0pU/1nkqL3PEIOWRODrmKV7WJ5GQzq70cOMed+dObyAHvsDM7w4sTxVDbv 4+8HHR157RxNXMSuWxmHzFLjSh07IksROjtElvk55SZbucqTxkZtSPnyxX6xWHP3 ywVC1Q9fyjfsii4YuJwRcZeq2P3ocA9GuQsBqulhZ6jynkFbkrCTvkQx6J5JujrX fHdqtOww7lO+DExq2yUkszXFgsyesEXKl3EsWI1PfWVcpL9RLbC2DL5w7eBPMNAG DxyuOoudAgMBAAGjggJ/MIICezAdBgNVHQ4EFgQUBFNXSM8F8pXj3kIRN/tujfBA AB0wHwYDVR0jBBgwFoAUq1yvqVcGM3M4k9ke5LBaHw7M0GswDgYDVR0PAQH/BAQD AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0 L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJjYjJiYWMvMC9B QjVDQUZBOTU3MDYzMzczMzg5M0Q5MUVFNEIwNUExRjBFQ0NEMDZCLmNybDCB8wYI KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw Yjg0MTUvM2Y1ZTJlNWItYzczMS00ZGI4LTliODctYWY5ZjhlNThhMWM2LzcyY2Mx ZmQyOGQ0YTA0Yzg0NzNjM2FjMGIxOTk0MDI3MGNiYmYxMjNmM2MwYjFmN2Y5LmNl cjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1ODdmYTIwMDE4NWM1Y2I5YmNi MmJhYy8wL0FTMzk1ODk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp3MA0GCSqGSIb3DQEBCwUAA4IB AQCqVvvce5Z/K5SNZAbdwmEyhV5zcq5eTVjWuSnPc7OcXeCoXdDEbJZnDen0+Kng 9y3ORDkOqEyIKQa9n3Ek1cCUAQ51V4k4nR/DMHfEMa6Xeql5a7klX4aON2U22rc4 L7Gb/PfKCdy1LCUKpeA8qH0mUEU6tROhlZK3UE4iRPOzUkVbEeHqsUIXNdTd7ddH n58hGVGTFG6PU1GzKAbSwMpVw1pPW6OSBFPA3sA/OAbcxYcD7DNNNJypJpX1UHrB OyrlTpcJZx2NMAyRxod+UXR7AGGiW3CNSr2KMMkyxVCAlKfY9LCFtxRErTmrDhQP L5k66jy1/1oRKK9vssAeRdGW -----END CERTIFICATE-----Generated at Sun Feb 16 20:15:17 2025 by rpki-client