$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399300.roa File: AS399300.roa (raw, json) Hash identifier: ZPC7o9P+30QgLdAu/zb2tvE4r3zdwAyZ3otUtHp7qEc= Subject key identifier: F8:39:C6:A7:69:F8:26:D1:35:7F:1D:DE:0F:C8:42:3D:D1:40:87:B9 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 294C245529E6205258F4AD9AAB2CEA73EEC6D7E7 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399300.roa Signing time: Wed 08 Jan 2025 04:28:23 +0000 ROA not before: Wed 08 Jan 2025 04:23:23 +0000 ROA not after: Wed 07 Jan 2026 04:28:23 +0000 asID: 399300 IP address blocks: 104.234.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:4c:24:55:29:e6:20:52:58:f4:ad:9a:ab:2c:ea:73:ee:c6:d7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 8 04:23:23 2025 GMT Not After : Jan 7 04:28:23 2026 GMT Subject: CN=F839C6A769F826D1357F1DDE0FC8423DD14087B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6c:59:5e:04:ee:91:4a:01:de:37:57:73:72: 40:88:1c:34:18:91:c1:1b:91:28:c5:c2:c7:bd:4b: ce:04:96:c3:b3:b9:64:4a:21:85:8f:d0:a1:e1:21: 0e:d2:88:ef:d6:4b:f6:8c:d2:d7:d1:bc:18:bc:d6: a9:4d:5d:eb:34:de:6b:92:db:cb:e3:ea:3a:78:35: 06:d4:e6:10:f2:04:4e:75:a2:45:61:26:bb:c9:53: 6f:f1:53:72:79:cd:ff:4a:31:15:f5:cb:a6:4a:54: a6:69:4f:b7:1d:54:16:ac:d9:01:d0:4d:fa:9a:1c: b6:4a:83:9d:26:88:f8:dd:65:37:6b:5c:40:0d:d8: 94:5f:9a:cd:ef:26:ed:7b:b9:b9:1a:4e:3f:d4:d2: c7:0f:60:31:25:fa:af:c5:7a:3f:f4:f6:fc:6b:be: 50:b6:f4:c9:1c:05:45:b6:a5:25:03:a2:f9:08:2f: 6f:d2:b4:c4:7e:e8:bb:e0:43:14:9b:07:6a:2a:14: 21:a5:33:af:f0:4a:a6:0e:f2:cf:b9:ed:ec:b6:43: 49:e8:04:f5:fd:72:20:2f:df:d3:f4:76:61:78:40: ae:40:6f:35:a6:85:40:74:5d:d9:89:1b:bd:d1:8b: e9:a5:2d:1d:ad:ae:44:6c:39:5a:2b:92:30:b5:02: ca:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:39:C6:A7:69:F8:26:D1:35:7F:1D:DE:0F:C8:42:3D:D1:40:87:B9 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399300.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.35.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:44:bf:fc:76:a8:d5:d6:21:3a:3a:fe:06:55:b6:7a:c1:ef: bc:e2:fb:b8:33:d9:36:5c:7a:57:fe:85:14:2d:19:5c:d8:14: 98:2c:4a:14:6a:08:d5:be:db:26:7f:ee:ee:55:2f:8c:05:f1: e4:dd:25:90:4e:14:81:84:16:a1:b7:92:3a:10:6f:94:f9:cc: 6f:7f:dd:87:2f:88:97:ce:5a:0c:78:28:3e:a4:6f:b1:84:2a: b7:22:36:15:0c:69:0b:71:16:29:30:2f:37:e9:51:ae:92:a8: f2:79:e4:37:9c:21:8b:86:7c:ee:e2:9f:be:04:02:5f:d2:e5: b1:de:1e:47:3e:d0:85:68:ac:8e:bc:8f:70:22:6e:a5:bc:53: bd:e2:87:58:63:91:58:7c:9e:73:70:7c:85:80:0c:43:43:c2: a3:09:17:d0:53:da:2a:0b:4a:35:14:25:c3:cc:35:0c:d8:e6: 8a:82:a5:f8:75:46:1c:3e:83:92:40:c8:ac:df:18:59:46:54: 5c:07:d3:cc:1a:85:3f:28:45:06:ef:72:e0:d0:07:5a:22:47: 32:a9:ec:ea:74:81:fa:a0:30:53:6b:c3:b4:2b:88:15:3e:31: 2a:35:94:e9:22:57:3c:d8:31:ae:34:3d:55:9b:48:e5:61:bb: d0:7f:1f:37 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUKUwkVSnmIFJY9K2aqyzqc+7G1+cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA4MDQyMzIzWhcNMjYwMTA3MDQyODIz WjAzMTEwLwYDVQQDEyhGODM5QzZBNzY5RjgyNkQxMzU3RjFEREUwRkM4NDIzREQx NDA4N0I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGxZXgTukUoB 3jdXc3JAiBw0GJHBG5EoxcLHvUvOBJbDs7lkSiGFj9Ch4SEO0ojv1kv2jNLX0bwY vNapTV3rNN5rktvL4+o6eDUG1OYQ8gROdaJFYSa7yVNv8VNyec3/SjEV9cumSlSm aU+3HVQWrNkB0E36mhy2SoOdJoj43WU3a1xADdiUX5rN7ybte7m5Gk4/1NLHD2Ax JfqvxXo/9Pb8a75QtvTJHAVFtqUlA6L5CC9v0rTEfui74EMUmwdqKhQhpTOv8Eqm DvLPue3stkNJ6AT1/XIgL9/T9HZheECuQG81poVAdF3ZiRu90YvppS0dra5EbDla K5IwtQLKxQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPg5xqdp+CbRNX8d3g/IQj3R QIe5MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5OTMwMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqIzANBgkqhkiG9w0BAQsFAAOC AQEAj0S//Hao1dYhOjr+BlW2esHvvOL7uDPZNlx6V/6FFC0ZXNgUmCxKFGoI1b7b Jn/u7lUvjAXx5N0lkE4UgYQWobeSOhBvlPnMb3/dhy+Il85aDHgoPqRvsYQqtyI2 FQxpC3EWKTAvN+lRrpKo8nnkN5whi4Z87uKfvgQCX9Llsd4eRz7QhWisjryPcCJu pbxTveKHWGORWHyec3B8hYAMQ0PCowkX0FPaKgtKNRQlw8w1DNjmioKl+HVGHD6D kkDIrN8YWUZUXAfTzBqFPyhFBu9y4NAHWiJHMqns6nSB+qAwU2vDtCuIFT4xKjWU 6SJXPNgxrjQ9VZtI5WG70H8fNw== -----END CERTIFICATE-----Generated at Sat Apr 5 19:09:06 2025 by rpki-client