$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa File: AS396163.roa (raw, json) Hash identifier: bskl3mf4S5fYxBRZ1njeE2TIdgXbIJCYLXTSd0flsrA= Subject key identifier: BA:8A:3B:FC:E7:D6:A5:CF:32:ED:5D:A1:AD:57:AD:E2:DF:6A:EB:92 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 206254642D7037B8236136CA68735390E72941EB Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa Signing time: Tue 03 Sep 2024 21:48:59 +0000 ROA not before: Tue 03 Sep 2024 21:43:59 +0000 ROA not after: Tue 02 Sep 2025 21:48:59 +0000 asID: 396163 IP address blocks: 104.234.21.0/24 maxlen: 24 104.234.31.0/24 maxlen: 24 104.234.51.0/24 maxlen: 24 104.234.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:62:54:64:2d:70:37:b8:23:61:36:ca:68:73:53:90:e7:29:41:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 3 21:43:59 2024 GMT Not After : Sep 2 21:48:59 2025 GMT Subject: CN=BA8A3BFCE7D6A5CF32ED5DA1AD57ADE2DF6AEB92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:09:b4:5b:de:e2:e9:2a:42:cd:9a:26:13:a3: be:ad:42:0d:7e:a6:be:5b:bd:8e:6b:ce:8d:45:a2: 8e:bb:4e:db:31:2a:4c:6b:6d:08:9d:87:97:67:5b: 35:b2:eb:67:23:73:4d:8f:e4:33:e6:81:15:54:4e: 1f:d9:be:68:f8:0b:c6:55:4e:c4:31:cd:0a:4b:35: b2:d7:47:b7:a3:c3:14:04:b3:0e:e5:02:64:ea:23: 3a:30:b1:46:14:79:8e:ec:d0:59:12:fa:da:0c:a6: f7:1d:24:ab:9c:e8:53:ae:b1:6d:e8:72:50:86:f2: b3:f7:cc:da:af:93:35:73:bc:c3:60:74:74:2b:7e: d2:82:63:9f:da:ff:2d:15:07:78:d4:a6:9c:29:9d: 51:d5:84:32:fe:c7:f3:52:d9:e1:c6:28:e1:4a:50: 9e:7d:83:90:59:4d:f9:5c:a5:b3:18:12:fc:84:76: fc:bd:48:9d:4b:03:4d:0a:9e:03:79:b2:6a:93:83: 2f:6e:2a:11:f7:b2:5b:e4:28:0a:a9:24:4d:58:f2: 2e:f4:46:49:1e:1c:20:ed:0c:22:ca:60:85:66:ce: ee:64:01:09:2b:50:af:ad:eb:1d:06:93:53:a4:62: f1:d2:42:7a:20:39:78:1f:bf:4c:39:e4:ac:ea:bf: 52:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:8A:3B:FC:E7:D6:A5:CF:32:ED:5D:A1:AD:57:AD:E2:DF:6A:EB:92 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.21.0/24 104.234.31.0/24 104.234.51.0/24 104.234.91.0/24 Signature Algorithm: sha256WithRSAEncryption 74:b0:8f:9f:c2:ba:23:bf:88:99:52:2a:1b:71:60:c4:87:07: ad:f4:72:81:0d:13:13:97:14:f4:05:de:35:c2:02:3a:aa:ca: 47:36:8a:8a:51:9a:24:26:98:4c:a7:cd:1f:c6:c2:92:a2:6e: f0:c6:f7:be:49:69:ea:5b:7b:2e:ac:1f:31:f1:29:9c:ea:1f: e8:8b:1c:ce:7f:08:25:a0:f2:29:6c:cb:40:20:fd:db:22:0b: 2a:16:ac:74:7d:bf:5b:5d:b4:be:e5:df:5b:bc:8f:0f:ab:f8: 6c:49:81:b4:bf:1b:a8:bc:07:12:85:a4:81:86:12:8f:44:88: 97:f6:81:f4:63:e8:e7:a5:9d:13:a2:76:19:8a:c8:b3:ec:88: e2:88:a5:7b:88:ba:d9:59:83:95:f9:b3:e6:e2:6d:63:c5:5b: 95:0b:8e:70:33:48:ec:c5:ab:23:ff:74:4c:cf:bf:bc:2f:0e: c9:92:d3:0d:8b:5c:a2:05:b6:e2:80:aa:a0:52:f9:ae:72:27: 6c:e2:6b:59:a6:f4:1e:2f:12:69:58:92:e0:10:a3:9f:8b:af: 1f:c6:a1:3d:cc:93:c9:dd:bf:2c:e8:db:7c:d9:a5:94:00:2a: 00:12:9d:f3:7b:55:ad:f5:10:ea:4b:28:64:88:9a:d1:45:b1: a3:b3:61:c4 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUIGJUZC1wN7gjYTbKaHNTkOcpQeswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwOTAzMjE0MzU5WhcNMjUwOTAyMjE0ODU5 WjAzMTEwLwYDVQQDEyhCQThBM0JGQ0U3RDZBNUNGMzJFRDVEQTFBRDU3QURFMkRG NkFFQjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQm0W97i6SpC zZomE6O+rUINfqa+W72Oa86NRaKOu07bMSpMa20InYeXZ1s1sutnI3NNj+Qz5oEV VE4f2b5o+AvGVU7EMc0KSzWy10e3o8MUBLMO5QJk6iM6MLFGFHmO7NBZEvraDKb3 HSSrnOhTrrFt6HJQhvKz98zar5M1c7zDYHR0K37SgmOf2v8tFQd41KacKZ1R1YQy /sfzUtnhxijhSlCefYOQWU35XKWzGBL8hHb8vUidSwNNCp4DebJqk4MvbioR97Jb 5CgKqSRNWPIu9EZJHhwg7QwiymCFZs7uZAEJK1CvresdBpNTpGLx0kJ6IDl4H79M OeSs6r9SywIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFLqKO/zn1qXPMu1doa1XreLf auuSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NjE2My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqFQMEAGjqHwMEAGjqMwMEAGjq WzANBgkqhkiG9w0BAQsFAAOCAQEAdLCPn8K6I7+ImVIqG3FgxIcHrfRygQ0TE5cU 9AXeNcICOqrKRzaKilGaJCaYTKfNH8bCkqJu8Mb3vklp6lt7LqwfMfEpnOof6Isc zn8IJaDyKWzLQCD92yILKhasdH2/W120vuXfW7yPD6v4bEmBtL8bqLwHEoWkgYYS j0SIl/aB9GPo56WdE6J2GYrIs+yI4oile4i62VmDlfmz5uJtY8VblQuOcDNI7MWr I/90TM+/vC8OyZLTDYtcogW24oCqoFL5rnInbOJrWab0Hi8SaViS4BCjn4uvH8ah PcyTyd2/LOjbfNmllAAqABKd83tVrfUQ6ksoZIia0UWxo7NhxA== -----END CERTIFICATE-----Generated at Mon Nov 25 13:16:14 2024 by rpki-client on console-ams.rpki-client.org