$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa File: AS396163.roa (raw, json) Hash identifier: voNGtnNbP9r3boSm26jcp0ndP6ogMgnZ6kKJanwGRFM= Subject key identifier: 21:77:66:FE:6C:BA:82:83:9F:04:09:54:15:8F:A4:89:EF:41:1F:72 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 79305D2B635E22AEB1BDBC61D058369CF77D84F2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa Signing time: Tue 03 Oct 2023 21:27:01 +0000 ROA not before: Tue 03 Oct 2023 21:22:01 +0000 ROA not after: Tue 01 Oct 2024 21:27:01 +0000 asID: 396163 IP address blocks: 104.234.21.0/24 maxlen: 24 104.234.31.0/24 maxlen: 24 104.234.51.0/24 maxlen: 24 104.234.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:30:5d:2b:63:5e:22:ae:b1:bd:bc:61:d0:58:36:9c:f7:7d:84:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 3 21:22:01 2023 GMT Not After : Oct 1 21:27:01 2024 GMT Subject: CN=217766FE6CBA82839F040954158FA489EF411F72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:80:eb:85:d3:2a:ac:d8:5f:cc:9f:7b:7c:73: b6:1a:28:50:7e:b7:9a:2a:d2:d4:59:7c:be:b9:5c: ca:f2:b9:b5:67:38:f7:63:f3:4f:18:c6:b3:02:6a: f7:45:c3:db:3a:ee:5e:7d:56:37:47:0a:e5:0a:4f: ee:64:6e:ec:e7:58:c5:50:a9:71:db:11:0f:ac:b1: 27:fa:97:f8:0a:1f:50:72:5e:ac:1c:d6:0d:85:9c: 87:67:1e:97:fa:f2:02:5b:09:2c:a6:31:a1:46:c3: 98:c9:db:32:e7:fc:59:25:f2:61:09:bf:94:a6:77: 22:4d:60:b3:9d:ba:a4:73:2a:0c:ff:5d:82:c5:9f: a9:73:ce:41:40:3a:0e:2b:4b:79:33:8b:6a:47:8a: 30:b2:b9:a1:0b:9a:85:f0:df:7a:19:63:83:10:e5: a7:8c:a7:88:e8:42:ba:63:05:28:95:df:4a:d9:cd: bf:78:c0:b8:68:c1:27:53:2a:b1:53:20:2a:51:70: 2e:a1:c9:b9:03:98:dc:3d:d9:85:03:8b:56:f4:e9: 2f:51:78:cd:06:16:83:aa:c8:f6:55:52:3c:c6:80: d7:b6:4e:14:62:3c:bf:cd:b7:38:c4:45:0c:62:9a: b9:cd:a2:a7:ef:5a:5d:e5:94:74:0b:3c:4c:3b:51: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:77:66:FE:6C:BA:82:83:9F:04:09:54:15:8F:A4:89:EF:41:1F:72 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.21.0/24 104.234.31.0/24 104.234.51.0/24 104.234.91.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:1c:ef:c8:37:e3:37:55:e0:2c:67:ac:7b:82:97:78:60:4d: f1:c7:1b:81:4b:5b:a4:79:73:0a:35:99:86:15:c5:65:87:89: a7:fe:3a:7a:26:e6:7e:6c:47:5d:28:53:53:4b:3c:0d:11:23: 60:75:0e:a4:14:4b:82:2d:04:e8:dc:6a:8a:8b:a3:b6:c3:0f: 3d:cf:22:38:1d:f9:fa:6d:ac:25:0f:42:af:df:46:47:48:35: 11:2b:22:1f:0d:52:77:9c:6d:c7:83:21:0e:dc:87:78:e9:c8: 70:ad:06:9f:80:09:fc:b4:6e:9f:e1:7b:24:4a:4d:2e:d6:53: eb:34:cf:2c:a1:2a:c9:5f:9c:28:4f:13:d4:1e:7d:0f:85:b5: 64:14:5c:ec:5a:ca:28:bd:15:e3:9d:87:85:b5:7e:19:74:e3: ac:6b:d4:1d:4c:71:a5:65:8f:45:5e:49:0f:6b:ee:81:3c:87: e7:ca:bb:fc:76:8c:ed:a9:a9:da:fe:14:73:53:dc:1d:1b:39: 1b:a1:48:39:fe:cd:5d:5a:a6:5a:79:05:cb:db:2c:7f:f3:8b: 14:3f:0c:a8:32:79:45:a6:16:7f:f3:51:21:ea:84:6c:34:c2: cf:d1:61:e4:78:1b:59:af:89:d2:f1:de:50:ea:89:d1:1d:a0: 06:41:df:2b -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUeTBdK2NeIq6xvbxh0Fg2nPd9hPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjMxMDAzMjEyMjAxWhcNMjQxMDAxMjEyNzAx WjAzMTEwLwYDVQQDEygyMTc3NjZGRTZDQkE4MjgzOUYwNDA5NTQxNThGQTQ4OUVG NDExRjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4DrhdMqrNhf zJ97fHO2GihQfreaKtLUWXy+uVzK8rm1Zzj3Y/NPGMazAmr3RcPbOu5efVY3Rwrl Ck/uZG7s51jFUKlx2xEPrLEn+pf4Ch9Qcl6sHNYNhZyHZx6X+vICWwkspjGhRsOY ydsy5/xZJfJhCb+UpnciTWCznbqkcyoM/12CxZ+pc85BQDoOK0t5M4tqR4owsrmh C5qF8N96GWODEOWnjKeI6EK6YwUold9K2c2/eMC4aMEnUyqxUyAqUXAuocm5A5jc PdmFA4tW9OkvUXjNBhaDqsj2VVI8xoDXtk4UYjy/zbc4xEUMYpq5zaKn71pd5ZR0 CzxMO1EuTQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFCF3Zv5suoKDnwQJVBWPpInv QR9yMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NjE2My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqFQMEAGjqHwMEAGjqMwMEAGjq WzANBgkqhkiG9w0BAQsFAAOCAQEAHBzvyDfjN1XgLGese4KXeGBN8ccbgUtbpHlz CjWZhhXFZYeJp/46eibmfmxHXShTU0s8DREjYHUOpBRLgi0E6NxqioujtsMPPc8i OB35+m2sJQ9Cr99GR0g1ESsiHw1Sd5xtx4MhDtyHeOnIcK0Gn4AJ/LRun+F7JEpN LtZT6zTPLKEqyV+cKE8T1B59D4W1ZBRc7FrKKL0V452HhbV+GXTjrGvUHUxxpWWP RV5JD2vugTyH58q7/HaM7amp2v4Uc1PcHRs5G6FIOf7NXVqmWnkFy9ssf/OLFD8M qDJ5RaYWf/NRIeqEbDTCz9Fh5HgbWa+J0vHeUOqJ0R2gBkHfKw== -----END CERTIFICATE-----Generated at Thu May 16 17:50:54 2024 by rpki-client on console-ams.rpki-client.org