$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398395.roa File: AS398395.roa (raw, json) Hash identifier: 9krIUo3PbxZdIoYIXDcrEdY15y3NTbeIjt681yMdr1o= Subject key identifier: D7:60:28:60:EB:CA:A7:4B:21:D2:D1:89:84:17:53:4C:FF:AF:56:68 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 69782DCB8FFF94FFAD0A789E3549C83EDE81AF45 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398395.roa Signing time: Tue 26 Mar 2024 11:01:15 +0000 ROA not before: Tue 26 Mar 2024 10:56:15 +0000 ROA not after: Tue 25 Mar 2025 11:01:15 +0000 asID: 398395 IP address blocks: 104.234.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 14:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:78:2d:cb:8f:ff:94:ff:ad:0a:78:9e:35:49:c8:3e:de:81:af:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 26 10:56:15 2024 GMT Not After : Mar 25 11:01:15 2025 GMT Subject: CN=D7602860EBCAA74B21D2D1898417534CFFAF5668 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d2:17:c4:49:94:69:99:56:de:73:3a:82:c8: 9c:b7:40:db:42:ef:f8:07:58:3e:91:82:73:7c:55: 54:13:38:54:b9:2d:cc:1f:7d:ab:8a:6d:e7:f6:44: 1d:68:ce:8e:36:0d:76:8c:c8:3f:7f:2a:40:72:5a: cc:c1:62:60:17:3b:84:78:4a:c2:23:30:87:19:f0: 2f:13:0a:33:27:1d:71:3c:bf:79:cb:39:c7:5a:a4: 7e:df:10:8c:ff:8d:ca:49:9e:5c:19:a6:7b:3b:63: c0:27:9e:72:c7:4a:18:42:07:ef:3e:aa:be:5d:61: fd:f1:84:23:d7:14:a3:57:32:bf:a3:26:d7:91:99: 1f:3a:c3:eb:bc:ef:3e:00:f9:cb:be:13:5d:f5:3f: 9a:a7:6b:0a:bd:ca:a1:2e:ac:59:ef:1e:bc:94:bf: d2:df:15:4f:5b:db:66:bb:2d:67:df:4c:13:8a:ae: da:0c:d7:d2:19:ff:99:f5:34:4b:d2:bc:18:11:94: 82:48:20:9a:cd:17:d2:c2:7b:91:15:75:59:f3:67: 0b:04:e7:62:c3:05:96:f6:7f:28:1f:7a:01:8d:fb: 04:d8:3f:bf:e5:1f:cf:5d:52:cd:db:ca:fd:70:35: 1b:2b:8c:d2:7c:39:06:2d:48:da:96:cb:17:da:2b: 8d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:60:28:60:EB:CA:A7:4B:21:D2:D1:89:84:17:53:4C:FF:AF:56:68 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS398395.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.229.0/24 Signature Algorithm: sha256WithRSAEncryption ad:84:31:fe:9c:d3:c8:73:c7:86:cf:ab:32:c9:02:e2:05:18: 65:6e:f6:f0:0c:4a:92:1a:15:2a:57:db:ab:0a:24:d1:36:bb: d7:da:e6:7d:64:88:77:fc:9b:58:32:07:bd:e4:2f:23:16:fd: 29:36:5f:82:e5:cc:8b:da:a4:46:16:0a:22:17:aa:c8:52:c0: 77:86:20:ec:89:f8:35:a4:55:bc:9b:b3:a5:72:c2:92:b0:de: b7:a0:9d:95:19:28:48:5d:02:55:90:a1:37:9d:8b:55:5b:5f: 41:fe:26:be:39:86:ed:6e:4f:ce:96:f3:38:43:1d:26:fd:4e: 19:5a:48:d5:ab:8a:72:50:73:7d:37:ea:e6:04:a1:7d:df:cc: 5e:01:81:c7:3b:eb:b6:6c:f9:38:9c:f6:52:af:39:a7:53:c2: bf:94:bb:a7:e7:66:72:86:db:06:06:03:3e:6e:7c:11:f5:7c: 61:70:88:38:9a:da:e9:70:5e:2e:ea:32:47:36:7d:fd:aa:8c: 92:58:02:28:a3:6e:45:67:04:29:c8:6a:d7:ea:6b:d4:24:93: 70:23:7c:a6:50:f4:d7:10:75:6e:46:ef:25:f0:5d:12:06:8c: 15:c8:46:c2:36:01:72:af:0a:0c:7a:3c:07:84:c6:75:09:0e: 5b:5d:e9:f1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUaXgty4//lP+tCnieNUnIPt6Br0UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMzI2MTA1NjE1WhcNMjUwMzI1MTEwMTE1 WjAzMTEwLwYDVQQDEyhENzYwMjg2MEVCQ0FBNzRCMjFEMkQxODk4NDE3NTM0Q0ZG QUY1NjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdIXxEmUaZlW 3nM6gsict0DbQu/4B1g+kYJzfFVUEzhUuS3MH32rim3n9kQdaM6ONg12jMg/fypA clrMwWJgFzuEeErCIzCHGfAvEwozJx1xPL95yznHWqR+3xCM/43KSZ5cGaZ7O2PA J55yx0oYQgfvPqq+XWH98YQj1xSjVzK/oybXkZkfOsPrvO8+APnLvhNd9T+ap2sK vcqhLqxZ7x68lL/S3xVPW9tmuy1n30wTiq7aDNfSGf+Z9TRL0rwYEZSCSCCazRfS wnuRFXVZ82cLBOdiwwWW9n8oH3oBjfsE2D+/5R/PXVLN28r9cDUbK4zSfDkGLUja lssX2iuNKQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNdgKGDryqdLIdLRiYQXU0z/ r1ZoMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5ODM5NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq5TANBgkqhkiG9w0BAQsFAAOC AQEArYQx/pzTyHPHhs+rMskC4gUYZW728AxKkhoVKlfbqwok0Ta719rmfWSId/yb WDIHveQvIxb9KTZfguXMi9qkRhYKIheqyFLAd4Yg7In4NaRVvJuzpXLCkrDet6Cd lRkoSF0CVZChN52LVVtfQf4mvjmG7W5PzpbzOEMdJv1OGVpI1auKclBzfTfq5gSh fd/MXgGBxzvrtmz5OJz2Uq85p1PCv5S7p+dmcobbBgYDPm58EfV8YXCIOJra6XBe LuoyRzZ9/aqMklgCKKNuRWcEKchq1+pr1CSTcCN8plD01xB1bkbvJfBdEgaMFchG wjYBcq8KDHo8B4TGdQkOW13p8Q== -----END CERTIFICATE-----Generated at Fri May 3 15:16:28 2024 by rpki-client on console-ams.rpki-client.org