$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa File: AS399641.roa (raw, json) Hash identifier: oe/2G5aqdKBK3c6a2rmz8TzG1GI2XXPFWSVBlGqaJsg= Subject key identifier: F7:57:57:D4:0D:4D:4A:44:EB:D3:50:7F:61:2F:0E:78:65:69:1A:80 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 65F3A558A8C16A1EB80502E3BF044CFCD1FA4B37 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa Signing time: Fri 04 Oct 2024 20:49:01 +0000 ROA not before: Fri 04 Oct 2024 20:44:01 +0000 ROA not after: Fri 03 Oct 2025 20:49:01 +0000 asID: 399641 IP address blocks: 104.234.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:f3:a5:58:a8:c1:6a:1e:b8:05:02:e3:bf:04:4c:fc:d1:fa:4b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 4 20:44:01 2024 GMT Not After : Oct 3 20:49:01 2025 GMT Subject: CN=F75757D40D4D4A44EBD3507F612F0E7865691A80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:4f:f5:ca:cd:17:70:e3:ab:fa:04:23:9e:cb: 9d:86:16:db:c4:93:b9:5b:c0:bd:7d:ed:3d:ac:4e: 1c:c1:71:0b:3a:e4:4b:a6:38:c8:d9:0b:72:a9:c1: 93:ac:06:ab:1b:3b:b5:0e:7d:b5:95:78:3b:03:14: 97:85:8d:ad:b0:07:0e:79:f2:bb:25:b9:65:9d:d0: a1:66:a0:25:33:7d:b2:75:5b:78:f0:16:42:a7:41: e6:3c:a6:20:53:15:cf:51:f9:b2:1e:a7:00:a9:a0: da:9f:23:46:62:7c:c2:6c:c9:8c:4f:91:8a:cb:99: f7:92:dc:63:cf:d6:15:70:27:80:df:5f:97:60:88: 99:0d:2f:c6:be:ff:30:5e:af:fa:d5:13:49:12:d6: e2:76:9e:c8:12:16:8e:77:92:3c:b0:38:7f:e6:49: 58:2c:20:95:b5:d6:c1:70:1d:20:45:33:06:cc:4b: ca:77:5c:f5:fd:65:ae:65:89:b0:fd:7a:92:29:41: f9:34:3f:f8:77:e9:77:94:2d:2f:d4:53:b2:b0:ab: f4:76:45:06:3d:3e:b7:08:21:13:8d:55:58:42:22: 11:f7:52:00:ef:e3:06:d2:51:23:02:c9:20:2d:70: 9a:70:10:d1:54:4a:40:b8:4e:f7:6f:4d:a0:d6:a7: f1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:57:57:D4:0D:4D:4A:44:EB:D3:50:7F:61:2F:0E:78:65:69:1A:80 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.22.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:83:58:92:2d:ec:b7:b7:4a:b4:86:e7:3e:a6:61:b3:30:50: 35:bc:b6:eb:58:b4:2d:e1:1f:ca:f5:44:9d:f4:04:dc:cd:b7: c6:5a:d6:79:58:bf:4b:6e:79:f9:fa:b8:08:6a:20:ed:9f:4b: 8b:61:9a:87:ec:83:93:cf:98:68:f2:b1:ea:93:25:db:8e:1a: 76:a0:23:3f:dd:94:0f:9b:29:96:43:0d:66:24:1f:c1:ea:f6: b1:04:fa:94:bb:c6:64:c0:8f:8d:e4:f8:85:53:e8:4c:77:c2: d6:d6:ce:fa:1c:d5:51:5f:f6:0a:5b:d3:0f:66:fc:43:3f:f0: bd:99:e6:f7:f0:49:4f:e6:7a:ae:90:88:2e:76:ef:f5:63:5e: 48:54:d8:d0:95:05:61:bf:dc:87:ba:97:37:ec:a1:8a:a4:73: 50:d8:23:bc:ad:bd:5e:ae:94:fe:d4:81:72:dd:85:cf:84:ea: 4a:47:63:2f:83:69:9b:10:24:5f:8b:a6:35:8a:23:6e:f5:3a: 5c:7b:1a:a0:af:bb:6e:b2:43:e3:24:24:7b:31:7e:4d:b6:a3: 19:de:0b:16:5c:d2:16:d3:2c:66:f0:27:67:d0:d4:fc:42:c0: 6a:50:fa:b0:a6:03:8e:2a:07:1c:e0:34:99:49:c6:23:f0:aa: 6b:9f:79:66 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUZfOlWKjBah64BQLjvwRM/NH6SzcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDA0MjA0NDAxWhcNMjUxMDAzMjA0OTAx WjAzMTEwLwYDVQQDEyhGNzU3NTdENDBENEQ0QTQ0RUJEMzUwN0Y2MTJGMEU3ODY1 NjkxQTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjU/1ys0XcOOr +gQjnsudhhbbxJO5W8C9fe09rE4cwXELOuRLpjjI2QtyqcGTrAarGzu1Dn21lXg7 AxSXhY2tsAcOefK7JbllndChZqAlM32ydVt48BZCp0HmPKYgUxXPUfmyHqcAqaDa nyNGYnzCbMmMT5GKy5n3ktxjz9YVcCeA31+XYIiZDS/Gvv8wXq/61RNJEtbidp7I EhaOd5I8sDh/5klYLCCVtdbBcB0gRTMGzEvKd1z1/WWuZYmw/XqSKUH5ND/4d+l3 lC0v1FOysKv0dkUGPT63CCETjVVYQiIR91IA7+MG0lEjAskgLXCacBDRVEpAuE73 b02g1qfxyQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPdXV9QNTUpE69NQf2EvDnhl aRqAMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5OTY0MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqFjANBgkqhkiG9w0BAQsFAAOC AQEATYNYki3st7dKtIbnPqZhszBQNby261i0LeEfyvVEnfQE3M23xlrWeVi/S255 +fq4CGog7Z9Li2Gah+yDk8+YaPKx6pMl244adqAjP92UD5splkMNZiQfwer2sQT6 lLvGZMCPjeT4hVPoTHfC1tbO+hzVUV/2ClvTD2b8Qz/wvZnm9/BJT+Z6rpCILnbv 9WNeSFTY0JUFYb/ch7qXN+yhiqRzUNgjvK29Xq6U/tSBct2Fz4TqSkdjL4NpmxAk X4umNYojbvU6XHsaoK+7brJD4yQkezF+TbajGd4LFlzSFtMsZvAnZ9DU/ELAalD6 sKYDjioHHOA0mUnGI/Cqa595Zg== -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:34 2025 by rpki-client