$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: fPh55mYcj9PGDrPvL2HtmVTwDOi0QLw2dA0B6sN9mu0= Subject key identifier: 58:B2:A9:B5:61:47:D0:C5:7F:24:38:5A:6C:E9:E7:CC:8A:D0:02:95 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 07478BA248AC67A51216D0B4392646D4BB900319 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa Signing time: Sun 22 Dec 2024 12:25:09 +0000 ROA not before: Sun 22 Dec 2024 12:20:09 +0000 ROA not after: Sun 21 Dec 2025 12:25:09 +0000 asID: 397423 IP address blocks: 104.234.99.0/24 maxlen: 24 104.234.195.0/24 maxlen: 24 104.234.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:47:8b:a2:48:ac:67:a5:12:16:d0:b4:39:26:46:d4:bb:90:03:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 22 12:20:09 2024 GMT Not After : Dec 21 12:25:09 2025 GMT Subject: CN=58B2A9B56147D0C57F24385A6CE9E7CC8AD00295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:62:34:6e:c8:fb:5a:a6:07:a5:4b:22:4a: 16:6e:27:ac:89:45:99:0f:5b:8b:d0:12:31:2a:62: 58:a1:31:a0:45:99:58:f5:1d:f0:4e:e5:99:89:17: 8e:d0:b8:d5:9d:df:81:8f:a0:1d:38:91:f6:14:7c: d3:a5:1e:ab:9a:d8:55:b9:e5:45:33:92:0a:04:31: dc:57:b7:3d:28:c3:fc:3b:bd:8f:e2:b8:4a:40:05: 89:89:85:21:2d:5e:d6:9b:44:5a:6e:25:42:c5:17: 17:0a:9b:b2:dd:71:be:60:c1:4c:8c:11:05:83:e4: 18:80:bc:18:38:5e:6b:17:84:fd:b3:8e:d6:94:2a: 97:0d:dd:a4:eb:da:8d:7f:dc:4f:2f:43:7a:b9:87: bc:8f:a3:03:a9:6b:78:84:82:fd:9f:78:9c:0f:63: 57:18:62:e3:ea:c7:70:4d:85:47:e7:a1:97:63:89: 57:db:6a:6f:43:9e:2b:04:47:d8:a8:ad:78:8f:2c: 9f:ad:0b:02:b7:51:3d:10:6b:bc:29:cb:8a:9f:c2: c2:79:9e:f5:14:f3:9d:3f:82:80:d8:ff:35:63:83: d5:3a:92:d4:b8:46:11:b0:d5:fa:73:24:19:bf:63: 6e:b5:24:16:d7:06:cc:1a:76:93:b1:7e:9e:84:37: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:A9:B5:61:47:D0:C5:7F:24:38:5A:6C:E9:E7:CC:8A:D0:02:95 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.99.0/24 104.234.195.0/24 104.234.217.0/24 Signature Algorithm: sha256WithRSAEncryption ad:32:c8:0a:01:1d:0b:6c:20:f6:c1:fc:b8:af:c1:75:1e:b8: a1:b1:e4:0c:38:5b:fc:c8:d2:d8:2b:18:e5:b6:33:ec:77:e9: 48:1a:9d:51:0b:6c:9b:19:60:71:c0:87:10:21:a3:ae:db:cf: 73:96:86:84:54:34:8a:8f:51:82:71:9a:06:a3:38:26:e5:a0: 8d:b4:a8:32:7c:71:b6:f7:91:b3:1a:d2:24:1e:fb:59:49:4f: fb:7b:c7:a2:bc:0c:32:18:21:1f:45:92:76:ea:49:32:ee:cf: 84:38:e5:7a:22:6b:16:d1:3e:d0:69:0d:29:b5:a5:f5:ba:15: ae:53:5f:1d:3f:48:25:58:ed:cd:c0:f5:3d:ca:d9:1f:39:ee: 11:e7:44:00:6f:ac:8f:a0:7f:d7:8b:1a:d6:66:88:f4:23:7e: a3:41:aa:f6:41:e3:05:8a:3c:92:ef:d9:af:14:55:91:6e:ac: c0:6b:0a:31:06:14:c2:5d:0f:99:b6:e9:06:2b:70:17:c2:9d: 3c:19:e2:77:19:9e:5a:90:7d:b8:6e:08:09:94:fc:2f:3e:18: 76:49:a3:b5:65:57:90:5b:eb:87:18:49:1d:1a:ae:e1:3c:db: ce:ba:70:35:57:d0:a9:d3:dd:44:e2:8e:63:14:95:ea:1b:e7: 30:32:64:11 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUB0eLokisZ6USFtC0OSZG1LuQAxkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMjIyMTIyMDA5WhcNMjUxMjIxMTIyNTA5 WjAzMTEwLwYDVQQDEyg1OEIyQTlCNTYxNDdEMEM1N0YyNDM4NUE2Q0U5RTdDQzhB RDAwMjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oBiNG7I+1qm B6VLIkoWbiesiUWZD1uL0BIxKmJYoTGgRZlY9R3wTuWZiReO0LjVnd+Bj6AdOJH2 FHzTpR6rmthVueVFM5IKBDHcV7c9KMP8O72P4rhKQAWJiYUhLV7Wm0RabiVCxRcX Cpuy3XG+YMFMjBEFg+QYgLwYOF5rF4T9s47WlCqXDd2k69qNf9xPL0N6uYe8j6MD qWt4hIL9n3icD2NXGGLj6sdwTYVH56GXY4lX22pvQ54rBEfYqK14jyyfrQsCt1E9 EGu8KcuKn8LCeZ71FPOdP4KA2P81Y4PVOpLUuEYRsNX6cyQZv2NutSQW1wbMGnaT sX6ehDcIawIDAQABo4ICizCCAocwHQYDVR0OBBYEFFiyqbVhR9DFfyQ4Wmzp58yK 0AKVMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqYwMEAGjqwwMEAGjq2TANBgkq hkiG9w0BAQsFAAOCAQEArTLICgEdC2wg9sH8uK/BdR64obHkDDhb/MjS2CsY5bYz 7HfpSBqdUQtsmxlgccCHECGjrtvPc5aGhFQ0io9RgnGaBqM4JuWgjbSoMnxxtveR sxrSJB77WUlP+3vHorwMMhghH0WSdupJMu7PhDjleiJrFtE+0GkNKbWl9boVrlNf HT9IJVjtzcD1PcrZHznuEedEAG+sj6B/14sa1maI9CN+o0Gq9kHjBYo8ku/ZrxRV kW6swGsKMQYUwl0PmbbpBitwF8KdPBnidxmeWpB9uG4ICZT8Lz4YdkmjtWVXkFvr hxhJHRqu4TzbzrpwNVfQqdPdROKOYxSV6hvnMDJkEQ== -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:49 2025 by rpki-client