$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa File: AS398355.roa (raw, json) Hash identifier: bgc0ZlyL6OAqAslMxm4dwtNwFTLyd5KVna9D/AVoLIE= Subject key identifier: 0D:C8:9A:81:76:DB:FB:3D:F7:56:EC:B5:91:D1:F1:85:A5:03:7F:E2 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1BFCAC9885A273B2A6FB2DBE6293275055E4AC Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa Signing time: Fri 27 Sep 2024 13:48:59 +0000 ROA not before: Fri 27 Sep 2024 13:43:59 +0000 ROA not after: Fri 26 Sep 2025 13:48:59 +0000 asID: 398355 IP address blocks: 104.234.208.0/24 maxlen: 24 104.234.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 13:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fc:ac:98:85:a2:73:b2:a6:fb:2d:be:62:93:27:50:55:e4:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 27 13:43:59 2024 GMT Not After : Sep 26 13:48:59 2025 GMT Subject: CN=0DC89A8176DBFB3DF756ECB591D1F185A5037FE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:ed:47:a9:ac:cf:5c:d5:07:09:41:a9:df: b4:9a:41:35:95:70:0e:dd:a2:3f:21:40:c8:b8:fc: d1:08:12:50:ba:e7:cf:69:f5:b7:b4:79:fb:29:82: 27:71:a2:70:46:7a:55:75:74:e2:bf:5b:bb:a7:54: b3:39:eb:fc:95:02:df:31:1f:f6:e3:63:97:54:68: 5b:96:15:a7:6a:91:b4:43:20:cf:70:8d:b9:10:04: 25:30:1a:03:a5:54:b0:04:f2:9c:89:98:fb:4d:f9: ca:a5:e8:4f:53:9a:5e:3e:78:05:0c:03:f9:06:a3: 0f:5b:11:96:17:25:03:04:c2:c7:3b:cc:6e:3e:e8: d5:bf:09:5a:bc:86:31:a0:6d:94:30:e1:17:5d:26: 25:f0:ea:24:fe:84:b2:b6:e3:bf:fe:cf:b0:7c:47: 08:a3:7f:09:dd:50:d1:34:fd:85:5c:d7:ae:6e:0f: ce:92:97:d8:36:a7:ed:11:13:ff:0a:66:f7:e0:7d: ba:00:b8:6f:6d:d1:35:e4:1a:73:1f:e3:d0:64:1e: 8b:15:70:7f:4c:83:20:5b:72:5b:c1:29:c9:9f:f7: 06:ad:88:e4:06:ed:06:e3:15:54:b6:52:99:ae:7c: 3f:0f:e6:1b:43:12:a0:56:cd:6f:02:bf:a9:c1:93: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:9A:81:76:DB:FB:3D:F7:56:EC:B5:91:D1:F1:85:A5:03:7F:E2 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.208.0/23 Signature Algorithm: sha256WithRSAEncryption 53:c5:02:10:ce:7e:06:98:ca:d7:53:b5:fd:e5:7f:0c:60:b3: 60:1b:75:9c:5d:49:bf:0f:42:ea:04:cf:40:49:9f:92:03:32: 4d:a1:2e:85:94:56:61:76:cb:4a:72:b7:33:f9:09:34:bf:b7: 45:b7:55:01:32:03:2f:5a:ad:db:1b:28:36:76:f1:ff:01:4b: a5:77:36:07:cc:61:a6:70:8b:8c:5d:4a:85:93:a6:a8:fb:59: f5:15:4d:cd:60:d2:4f:37:4d:96:bb:91:dd:69:b3:d6:1e:91: c7:e0:c0:8a:da:76:e2:4a:35:9a:87:fb:89:bf:03:95:e0:22: e7:60:e4:6b:79:e3:0d:1a:67:26:e6:50:2d:aa:6c:db:c9:23: c9:79:9f:f2:f1:0b:01:cd:5f:93:0b:db:61:36:62:9e:7b:e2: 2d:1d:cc:54:21:ff:be:29:de:02:26:66:2a:ed:33:dc:17:d4: 0a:b9:23:de:4d:03:94:f8:f5:68:f9:64:6f:84:ad:38:7a:94: 2e:ed:8f:15:b2:c9:f0:aa:f7:fb:36:8f:eb:c8:fb:5b:e6:e5: b6:56:ae:33:6c:f8:3d:59:59:b3:57:5c:91:dd:29:76:06:38: c0:dd:81:fd:f4:54:44:4a:59:21:63:b8:c9:3e:86:df:d9:43: d6:b8:d0:08 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgITG/ysmIWic7Km+y2+YpMnUFXkrDANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzI3MmNjMWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBj YmJmMTIzZjNjMGIxZjdmOTAeFw0yNDA5MjcxMzQzNTlaFw0yNTA5MjYxMzQ4NTla MDMxMTAvBgNVBAMTKDBEQzg5QTgxNzZEQkZCM0RGNzU2RUNCNTkxRDFGMTg1QTUw MzdGRTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxCu1HqazPXNUH CUGp37SaQTWVcA7doj8hQMi4/NEIElC6589p9be0efspgidxonBGelV1dOK/W7un VLM56/yVAt8xH/bjY5dUaFuWFadqkbRDIM9wjbkQBCUwGgOlVLAE8pyJmPtN+cql 6E9Tml4+eAUMA/kGow9bEZYXJQMEwsc7zG4+6NW/CVq8hjGgbZQw4RddJiXw6iT+ hLK247/+z7B8RwijfwndUNE0/YVc165uD86Sl9g2p+0RE/8KZvfgfboAuG9t0TXk GnMf49BkHosVcH9MgyBbclvBKcmf9watiOQG7QbjFVS2UpmufD8P5htDEqBWzW8C v6nBk/KDAgMBAAGjggJ/MIICezAdBgNVHQ4EFgQUDciagXbb+z33Vuy1kdHxhaUD f+IwHwYDVR0jBBgwFoAUq1yvqVcGM3M4k9ke5LBaHw7M0GswDgYDVR0PAQH/BAQD AgeAMIGFBgNVHR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0 L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJjYjJiYWMvMC9B QjVDQUZBOTU3MDYzMzczMzg5M0Q5MUVFNEIwNUExRjBFQ0NEMDZCLmNybDCB8wYI KwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6Ly9ycGtpLmFyaW4u bmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1i MDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1kMzUyLTQ5OTQtOGY2Yy1kNmM5MWIw Yjg0MTUvM2Y1ZTJlNWItYzczMS00ZGI4LTliODctYWY5ZjhlNThhMWM2LzcyY2Mx ZmQyOGQ0YTA0Yzg0NzNjM2FjMGIxOTk0MDI3MGNiYmYxMjNmM2MwYjFmN2Y5LmNl cjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMu YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1ODdmYTIwMDE4NWM1Y2I5YmNi MmJhYy8wL0FTMzk4MzU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOrQMA0GCSqGSIb3DQEBCwUAA4IB AQBTxQIQzn4GmMrXU7X95X8MYLNgG3WcXUm/D0LqBM9ASZ+SAzJNoS6FlFZhdstK crcz+Qk0v7dFt1UBMgMvWq3bGyg2dvH/AUuldzYHzGGmcIuMXUqFk6ao+1n1FU3N YNJPN02Wu5HdabPWHpHH4MCK2nbiSjWah/uJvwOV4CLnYORreeMNGmcm5lAtqmzb ySPJeZ/y8QsBzV+TC9thNmKee+ItHcxUIf++Kd4CJmYq7TPcF9QKuSPeTQOU+PVo +WRvhK04epQu7Y8Vssnwqvf7No/ryPtb5uW2Vq4zbPg9WVmzV1yR3Sl2BjjA3YH9 9FRESlkhY7jJPobf2UPWuNAI -----END CERTIFICATE-----Generated at Mon Nov 25 13:03:47 2024 by rpki-client on console-fra.rpki-client.org