$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa File: AS400529.roa (raw, json) Hash identifier: KYfpKA8T39BvvvD9oAjSyNJk6Qj+IJSVKlSgcrjhUSA= Subject key identifier: 45:7D:75:D5:34:59:AF:E2:0E:FD:5A:D5:A8:A1:C4:93:9E:29:E3:40 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1CE297B9CA70CDCA2042DDBE3915227893E9B67D Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa Signing time: Mon 03 Mar 2025 11:11:52 +0000 ROA not before: Mon 03 Mar 2025 11:06:52 +0000 ROA not after: Mon 02 Mar 2026 11:11:52 +0000 asID: 400529 IP address blocks: 104.234.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e2:97:b9:ca:70:cd:ca:20:42:dd:be:39:15:22:78:93:e9:b6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 3 11:06:52 2025 GMT Not After : Mar 2 11:11:52 2026 GMT Subject: CN=457D75D53459AFE20EFD5AD5A8A1C4939E29E340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:df:c0:dc:8c:5c:3e:bd:68:ce:f7:38:54: 7a:7d:a7:85:e7:9c:9d:80:ce:1d:10:e2:7b:6f:42: 72:3e:49:b7:f8:6f:70:b8:af:e4:9e:bf:0c:ba:2b: b6:d4:45:cc:ea:f9:84:78:1b:43:37:5a:92:9f:e1: 56:ff:b3:6f:35:7a:de:9d:6d:f0:5a:79:06:a3:cf: c8:48:39:c3:39:e7:13:3a:e9:e2:80:3e:71:da:55: 58:32:29:58:1c:9f:5f:57:23:30:de:5a:6c:67:82: d2:ec:fc:d3:aa:28:ac:11:0c:c3:94:77:fe:2a:9e: 94:8e:a8:3f:fa:81:71:0e:4d:8b:a7:67:f4:78:f9: 17:48:53:93:22:7d:b7:57:7c:28:64:fa:0c:d9:43: 02:49:f6:51:2b:03:a1:03:6e:ac:45:78:10:d2:b0: 60:6d:b9:bb:55:f1:be:df:3c:01:09:15:fe:5a:16: f8:06:1f:e4:ab:1b:99:d5:70:6e:1f:86:8e:91:e6: 1e:d6:dc:2d:89:09:24:1a:96:6e:e2:b6:7d:9e:c8: b2:33:94:28:2d:31:08:bd:b8:5e:ea:d1:ef:97:07: 34:4d:61:14:c1:89:1f:e0:7c:aa:46:f3:e0:9b:19: 01:f6:e0:0d:fe:3b:cd:b3:25:ea:23:ea:0f:fb:0e: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7D:75:D5:34:59:AF:E2:0E:FD:5A:D5:A8:A1:C4:93:9E:29:E3:40 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.220.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:be:f7:d4:71:1c:13:1e:15:b4:45:e7:0a:c3:2e:c3:82:59: b7:5f:10:98:3c:4d:1a:a5:02:4f:b9:9b:a3:35:51:50:db:94: 24:57:5c:69:0b:46:c2:e2:81:d0:c1:73:60:f3:62:f4:e6:8d: 20:e9:53:fe:96:a5:60:1f:5e:b8:42:43:44:6d:88:d2:f8:f5: 5e:8f:51:ee:5b:dd:61:f6:b9:58:99:2f:bf:be:8a:eb:8e:55: 37:76:63:5f:bd:c3:da:22:67:3a:ad:0c:3d:cd:10:6c:48:30: fd:38:7c:f5:cc:45:73:c7:c1:ab:91:02:05:2e:34:5b:ae:34: d9:dc:6c:f9:79:ad:8c:95:1c:a8:6f:4c:dc:7f:6d:2d:84:ab: 70:d8:e8:ae:3b:71:33:21:bb:b4:69:12:1f:19:9e:f8:06:b7: a9:f2:c9:12:72:11:ce:10:91:50:8f:4a:c0:72:7d:be:fa:c3: e1:28:2a:6b:41:b1:87:23:eb:7d:3f:d2:9c:b6:23:ae:da:e4: 34:8f:94:c3:b2:1f:ea:8f:12:68:42:c5:0a:1f:52:5a:18:d3: a5:57:c9:c5:93:c7:e5:26:90:ea:92:dd:4d:e3:ac:e9:a9:9b: 14:0b:02:c8:c8:1e:71:26:c5:a5:e6:82:dd:71:5e:cd:91:61: 6c:e2:78:7b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUHOKXucpwzcogQt2+ORUieJPptn0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzAzMTEwNjUyWhcNMjYwMzAyMTExMTUy WjAzMTEwLwYDVQQDEyg0NTdENzVENTM0NTlBRkUyMEVGRDVBRDVBOEExQzQ5MzlF MjlFMzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/fwNyMXD69 aM73OFR6faeF55ydgM4dEOJ7b0JyPkm3+G9wuK/knr8Muiu21EXM6vmEeBtDN1qS n+FW/7NvNXrenW3wWnkGo8/ISDnDOecTOunigD5x2lVYMilYHJ9fVyMw3lpsZ4LS 7PzTqiisEQzDlHf+Kp6Ujqg/+oFxDk2Lp2f0ePkXSFOTIn23V3woZPoM2UMCSfZR KwOhA26sRXgQ0rBgbbm7VfG+3zwBCRX+Whb4Bh/kqxuZ1XBuH4aOkeYe1twtiQkk GpZu4rZ9nsiyM5QoLTEIvbhe6tHvlwc0TWEUwYkf4HyqRvPgmxkB9uAN/jvNsyXq I+oP+w516QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFEV9ddU0Wa/iDv1a1aihxJOe KeNAMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq3DANBgkqhkiG9w0BAQsFAAOC AQEAD7731HEcEx4VtEXnCsMuw4JZt18QmDxNGqUCT7mbozVRUNuUJFdcaQtGwuKB 0MFzYPNi9OaNIOlT/palYB9euEJDRG2I0vj1Xo9R7lvdYfa5WJkvv76K645VN3Zj X73D2iJnOq0MPc0QbEgw/Th89cxFc8fBq5ECBS40W6402dxs+XmtjJUcqG9M3H9t LYSrcNjorjtxMyG7tGkSHxme+Aa3qfLJEnIRzhCRUI9KwHJ9vvrD4Sgqa0GxhyPr fT/SnLYjrtrkNI+Uw7If6o8SaELFCh9SWhjTpVfJxZPH5SaQ6pLdTeOs6ambFAsC yMgecSbFpeaC3XFezZFhbOJ4ew== -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:13 2025 by rpki-client