$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa File: AS400529.roa (raw, json) Hash identifier: rWxQm0Qr36ZPOAzYTXkyVw9i9xMsWTuTp8Rb0gVPFFc= Subject key identifier: 5B:0D:6B:B6:75:60:CC:18:CB:D3:8C:29:E3:FA:7A:4D:DD:D8:28:9D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5C1E96014ADE9F9F7078F3FB9E993FA91E1D635B Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa Signing time: Wed 20 Nov 2024 18:49:21 +0000 ROA not before: Wed 20 Nov 2024 18:44:21 +0000 ROA not after: Wed 19 Nov 2025 18:49:21 +0000 asID: 400529 IP address blocks: 104.234.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1e:96:01:4a:de:9f:9f:70:78:f3:fb:9e:99:3f:a9:1e:1d:63:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 20 18:44:21 2024 GMT Not After : Nov 19 18:49:21 2025 GMT Subject: CN=5B0D6BB67560CC18CBD38C29E3FA7A4DDDD8289D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:43:68:19:a5:ff:c0:db:20:89:55:d5:3c:fb: b1:02:62:17:1f:e6:f1:0a:93:63:33:07:40:21:c1: 82:ea:f3:7d:6e:27:ee:1d:eb:08:6b:a9:ac:18:15: f8:62:8c:43:4d:85:13:3a:1f:e0:5b:ee:ec:cf:a4: b0:f3:c1:99:e0:12:fe:e1:42:2b:4e:6f:ad:87:9b: 69:ab:69:6e:88:ca:a5:55:02:84:27:3a:d5:e5:f6: 0d:44:8f:72:2f:0e:2f:7a:61:3b:87:dc:53:4e:cf: 68:60:80:fe:7d:57:e1:34:46:2e:44:59:f1:7d:0a: 77:44:06:8c:ba:45:d2:2b:f5:2b:a3:10:ad:cb:a2: 91:f5:84:7d:6d:ba:fb:2d:33:76:e5:40:7d:3f:88: 17:a6:4b:ae:93:92:73:b2:db:2a:10:d9:be:02:6a: 18:a7:99:fe:42:62:33:6f:bc:1e:2c:36:3b:a6:41: ab:d0:73:4a:e5:9a:c2:ce:25:dc:1b:6f:af:5a:29: 34:88:a7:43:01:5b:b8:7a:62:c0:41:09:46:e9:63: de:59:15:84:cc:0d:10:20:5c:fa:1c:94:35:fc:8f: f7:7c:b2:4e:8e:9e:97:64:b9:09:07:ce:b9:05:e6: dd:e0:4a:4b:e2:4c:5c:f9:1b:b6:b5:16:fb:ee:71: 31:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0D:6B:B6:75:60:CC:18:CB:D3:8C:29:E3:FA:7A:4D:DD:D8:28:9D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.220.0/24 Signature Algorithm: sha256WithRSAEncryption b0:54:97:c0:80:2e:e6:3c:02:58:3d:ad:df:a4:d2:4a:28:31: 3d:20:29:d2:66:f9:e6:79:18:cb:c5:b1:8b:e2:59:32:f7:60: 09:d7:44:bd:3b:a2:06:b4:c9:cd:cb:d7:f5:b8:7b:ec:ae:0e: 1c:03:7e:93:c6:35:db:7d:84:26:62:9b:bd:e8:53:b7:98:31: 5e:fd:e4:d1:42:43:52:10:7d:88:04:f4:4c:bb:72:32:a9:6d: 7d:68:4e:63:7b:57:f9:18:09:e8:74:7d:a5:42:3a:9c:8e:af: 4c:f6:0c:b8:29:4c:ec:5f:ef:66:27:c1:01:a7:21:eb:bc:6f: 4c:f8:dd:70:a5:69:0d:92:0f:4f:3d:33:b5:e1:ff:04:96:7e: b3:b7:14:cd:2e:3a:0f:e4:93:38:9d:03:ec:a0:2d:58:73:3b: 26:1a:f1:b8:89:dd:46:8a:b7:97:16:89:5c:29:dd:4f:2f:94: a1:0c:5e:b3:6b:d3:b1:c8:6f:82:cf:de:da:a2:83:8e:36:f2: 45:f2:b5:41:66:da:e2:93:a6:56:a8:d1:7d:99:e4:24:08:8c: 15:b3:ad:f3:6e:78:b2:58:73:6f:db:cd:6b:8f:e0:5a:f7:6e: bf:f6:75:46:97:e3:96:5d:65:64:6a:0e:bc:32:12:fa:70:ee: 79:eb:a9:35 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUXB6WAUren59wePP7npk/qR4dY1swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMTIwMTg0NDIxWhcNMjUxMTE5MTg0OTIx WjAzMTEwLwYDVQQDEyg1QjBENkJCNjc1NjBDQzE4Q0JEMzhDMjlFM0ZBN0E0RERE RDgyODlEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUNoGaX/wNsg iVXVPPuxAmIXH+bxCpNjMwdAIcGC6vN9bifuHesIa6msGBX4YoxDTYUTOh/gW+7s z6Sw88GZ4BL+4UIrTm+th5tpq2luiMqlVQKEJzrV5fYNRI9yLw4vemE7h9xTTs9o YID+fVfhNEYuRFnxfQp3RAaMukXSK/UroxCty6KR9YR9bbr7LTN25UB9P4gXpkuu k5JzstsqENm+AmoYp5n+QmIzb7weLDY7pkGr0HNK5ZrCziXcG2+vWik0iKdDAVu4 emLAQQlG6WPeWRWEzA0QIFz6HJQ1/I/3fLJOjp6XZLkJB865Bebd4EpL4kxc+Ru2 tRb77nExvwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFsNa7Z1YMwYy9OMKeP6ek3d 2CidMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq3DANBgkqhkiG9w0BAQsFAAOC AQEAsFSXwIAu5jwCWD2t36TSSigxPSAp0mb55nkYy8Wxi+JZMvdgCddEvTuiBrTJ zcvX9bh77K4OHAN+k8Y1232EJmKbvehTt5gxXv3k0UJDUhB9iAT0TLtyMqltfWhO Y3tX+RgJ6HR9pUI6nI6vTPYMuClM7F/vZifBAach67xvTPjdcKVpDZIPTz0zteH/ BJZ+s7cUzS46D+STOJ0D7KAtWHM7JhrxuIndRoq3lxaJXCndTy+UoQxes2vTschv gs/e2qKDjjbyRfK1QWba4pOmVqjRfZnkJAiMFbOt8254slhzb9vNa4/gWvduv/Z1 Rpfjll1lZGoOvDIS+nDueeupNQ== -----END CERTIFICATE-----Generated at Fri Nov 22 06:35:48 2024 by rpki-client on console-ams.rpki-client.org