$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa File: AS398355.roa (raw, json) Hash identifier: CzWBX4DNmq1dR8I1FjvxZwqcWizpgJZCc33ai29eJhQ= Subject key identifier: 8A:03:81:F8:3B:78:0D:58:63:00:1E:84:14:EF:E7:AA:F9:54:23:8A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3471DB3ACDA41DB2BD043C958DC2DF50EAEFF123 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa Signing time: Sun 05 Jan 2025 00:00:08 +0000 ROA not before: Sat 04 Jan 2025 23:55:08 +0000 ROA not after: Sun 04 Jan 2026 00:00:08 +0000 asID: 398355 IP address blocks: 104.234.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:71:db:3a:cd:a4:1d:b2:bd:04:3c:95:8d:c2:df:50:ea:ef:f1:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 4 23:55:08 2025 GMT Not After : Jan 4 00:00:08 2026 GMT Subject: CN=8A0381F83B780D5863001E8414EFE7AAF954238A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ae:16:c0:5a:48:17:17:98:2f:8a:59:3b:55: a8:83:e6:3e:57:f1:01:39:93:7c:c3:00:ee:c2:ae: 4d:21:c0:b3:43:ce:83:f7:dd:3f:2e:c8:40:d0:96: 39:42:44:1b:e3:95:d4:e3:22:3e:a3:e1:ee:35:8e: 42:05:2c:7e:6a:c9:ad:f0:1d:13:80:e0:3f:94:17: 39:da:64:85:fc:7c:95:3c:68:bd:2f:20:fe:4a:09: aa:2f:64:54:90:e3:93:69:b7:8a:1d:3e:78:3c:23: 24:56:69:e6:5c:93:dc:ac:01:9f:db:72:cd:83:de: f9:14:e4:22:d7:7d:ff:96:67:9f:31:5d:89:57:f0: 02:5c:df:c4:b7:8d:ca:2e:d1:1e:9c:8b:ea:65:f0: eb:14:b8:1e:7b:b2:d8:7f:f6:05:2e:26:06:92:9b: 5b:1d:bd:8f:c1:42:59:94:f1:c1:30:20:47:9e:12: 79:a2:c5:94:37:c8:e4:5a:f0:5d:a7:a8:62:e3:e3: ff:ec:b5:a0:05:6b:ff:8d:0d:77:2d:b4:84:68:17: 42:fb:8a:49:02:7e:06:5b:d1:a2:01:e5:15:7a:f4: b6:55:a5:81:21:17:cc:9c:2c:bc:00:67:15:d3:68: 92:90:7f:28:83:d4:c4:dd:fb:89:94:a9:c4:f5:50: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:81:F8:3B:78:0D:58:63:00:1E:84:14:EF:E7:AA:F9:54:23:8A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398355.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.208.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:65:46:0a:e4:c0:60:16:4f:c3:6d:53:72:7c:d7:0c:ef:51: 86:f6:24:34:f8:cc:1c:5a:99:1f:f9:71:3d:ab:a3:72:e6:99: c6:ec:b8:bd:45:cb:16:8d:4b:62:f6:62:48:f9:18:40:13:f8: 52:e2:94:78:b5:50:e2:f1:6d:d5:d8:b2:a9:4b:63:b9:d5:24: c2:ea:1d:7e:e9:e8:e7:43:08:aa:37:72:45:3a:8b:20:c0:0c: a3:fb:11:a0:a2:30:a3:36:5c:09:d4:08:60:76:6b:34:35:06: df:3d:6c:73:c8:43:b4:50:2d:f8:2e:7a:36:6e:47:8f:f7:f6: 78:d6:09:bd:b0:a9:2e:5f:c6:05:1b:98:25:f9:dc:4e:fe:0a: c7:b1:60:a8:c3:5d:9d:87:8e:17:10:de:3d:cb:98:18:60:c8: 49:5d:06:23:eb:98:19:d5:4c:5b:12:f7:87:99:b2:b7:57:7e: 37:29:58:d4:69:6f:cb:88:bf:9e:43:21:14:de:8a:6c:51:7f: fb:c4:01:ac:9d:df:7a:3e:58:40:f8:ee:0b:ee:2f:d3:fa:48: 29:b1:85:43:f1:76:91:49:7e:c0:f4:04:50:ee:66:ff:ee:cf: 68:34:c0:27:37:9c:1b:b9:23:2e:2b:65:c2:1f:ba:63:75:aa: 42:ca:1c:f9 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUNHHbOs2kHbK9BDyVjcLfUOrv8SMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA0MjM1NTA4WhcNMjYwMTA0MDAwMDA4 WjAzMTEwLwYDVQQDEyg4QTAzODFGODNCNzgwRDU4NjMwMDFFODQxNEVGRTdBQUY5 NTQyMzhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAta4WwFpIFxeY L4pZO1Wog+Y+V/EBOZN8wwDuwq5NIcCzQ86D990/LshA0JY5QkQb45XU4yI+o+Hu NY5CBSx+asmt8B0TgOA/lBc52mSF/HyVPGi9LyD+SgmqL2RUkOOTabeKHT54PCMk VmnmXJPcrAGf23LNg975FOQi133/lmefMV2JV/ACXN/Et43KLtEenIvqZfDrFLge e7LYf/YFLiYGkptbHb2PwUJZlPHBMCBHnhJ5osWUN8jkWvBdp6hi4+P/7LWgBWv/ jQ13LbSEaBdC+4pJAn4GW9GiAeUVevS2VaWBIRfMnCy8AGcV02iSkH8og9TE3fuJ lKnE9VAY7wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIoDgfg7eA1YYwAehBTv56r5 VCOKMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5ODM1NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq0DANBgkqhkiG9w0BAQsFAAOC AQEAD2VGCuTAYBZPw21TcnzXDO9RhvYkNPjMHFqZH/lxPaujcuaZxuy4vUXLFo1L YvZiSPkYQBP4UuKUeLVQ4vFt1diyqUtjudUkwuodfuno50MIqjdyRTqLIMAMo/sR oKIwozZcCdQIYHZrNDUG3z1sc8hDtFAt+C56Nm5Hj/f2eNYJvbCpLl/GBRuYJfnc Tv4Kx7FgqMNdnYeOFxDePcuYGGDISV0GI+uYGdVMWxL3h5myt1d+NylY1Glvy4i/ nkMhFN6KbFF/+8QBrJ3fej5YQPjuC+4v0/pIKbGFQ/F2kUl+wPQEUO5m/+7PaDTA JzecG7kjLitlwh+6Y3WqQsoc+Q== -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:23 2025 by rpki-client