$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400890.roa File: AS400890.roa (raw, json) Hash identifier: DGkw3GwwLxa0Bz6kPekbqdotHJ8Ht82/Og8/3+vMXN4= Subject key identifier: 76:97:DB:E4:52:6A:69:3A:1D:4C:B3:14:3A:F8:84:74:EF:8A:11:EF Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 127DF681F523241744EDEBD186CBECBD882D72BA Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400890.roa Signing time: Sun 28 Apr 2024 00:00:20 +0000 ROA not before: Sat 27 Apr 2024 23:55:20 +0000 ROA not after: Sun 27 Apr 2025 00:00:20 +0000 asID: 400890 IP address blocks: 104.234.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:7d:f6:81:f5:23:24:17:44:ed:eb:d1:86:cb:ec:bd:88:2d:72:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 27 23:55:20 2024 GMT Not After : Apr 27 00:00:20 2025 GMT Subject: CN=7697DBE4526A693A1D4CB3143AF88474EF8A11EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:84:f5:53:26:54:d2:00:87:78:dc:f5:3e: de:2a:3d:8a:15:c4:5b:40:e2:09:cc:67:6a:16:77: 2c:ed:63:ca:81:09:47:88:bc:49:10:c0:60:eb:3b: 77:68:4d:c6:67:59:b8:0c:4c:04:79:9f:21:95:65: 1c:22:55:5a:22:75:29:09:64:c0:b5:8d:ff:34:4a: af:fc:67:4f:76:c5:f5:41:1d:5c:48:46:50:95:49: 55:31:cd:cf:76:b3:e5:22:3b:0d:b2:09:57:92:8f: 59:b0:1e:c1:e3:48:b0:af:d3:50:24:f4:62:84:1f: 09:6b:87:ed:27:be:da:b1:43:ff:ed:5f:df:80:50: 2e:99:dc:f7:d7:83:dc:f5:16:2d:a9:76:02:ea:2b: 31:3d:f3:7f:9f:fe:c9:f8:13:6b:58:64:d5:6e:24: 05:e6:57:8d:67:d4:51:c8:c8:66:e4:fe:4f:35:2a: db:a0:b8:ca:af:8c:b0:98:6c:b8:09:c0:44:ff:43: 4f:e6:12:95:86:94:a5:fa:b9:8d:f7:6e:34:42:02: 42:1f:ab:16:78:04:8c:39:47:ec:b9:38:66:88:5f: e5:b5:c0:2c:1d:ae:1d:57:71:cb:7f:0e:56:f7:fc: dd:22:de:88:69:75:b5:48:07:d6:83:5f:86:29:d6: 5d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:97:DB:E4:52:6A:69:3A:1D:4C:B3:14:3A:F8:84:74:EF:8A:11:EF X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400890.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.157.0/24 Signature Algorithm: sha256WithRSAEncryption 28:88:69:f7:da:a0:e9:71:d2:1d:b4:89:08:b1:7a:c4:c1:df: 9b:5e:9d:d7:19:e1:27:20:53:a4:99:95:4e:1f:4a:e4:12:b7: 90:82:93:94:94:af:4f:12:42:ea:a9:c1:bd:7a:f0:e8:db:6a: 15:05:47:01:66:ef:3d:41:2c:77:2c:e2:76:42:30:44:74:a4: 32:e2:d3:e4:7f:8c:06:ea:cf:57:9b:05:df:e8:ee:3f:7b:df: 42:40:1e:d1:52:52:94:94:20:ee:fc:5b:fb:43:09:9e:f3:c6: fb:01:90:2c:19:12:af:50:32:57:af:41:e9:19:02:ca:16:35: 3d:a7:b0:43:ce:e3:06:60:c8:80:73:bd:8f:ca:77:cc:40:6d: ad:e1:df:35:53:4a:75:31:a0:01:93:5f:4b:28:96:2e:f0:11: 03:77:1c:a4:c9:95:10:c8:b4:6c:0c:db:e4:51:40:d2:d2:e4: e6:30:21:1a:f0:f0:80:13:6e:cd:d5:b5:46:7b:58:62:82:67: d6:a0:14:bf:89:15:08:0e:4e:56:80:0e:b9:92:f1:3c:07:79: fe:e8:51:b2:89:9d:75:8f:be:1c:89:f6:ab:de:b7:97:c5:6f: 75:a4:ab:ea:a4:23:d4:31:1b:8c:0b:e2:cd:7c:3e:65:2e:4f: 33:67:08:aa -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUEn32gfUjJBdE7evRhsvsvYgtcrowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNDI3MjM1NTIwWhcNMjUwNDI3MDAwMDIw WjAzMTEwLwYDVQQDEyg3Njk3REJFNDUyNkE2OTNBMUQ0Q0IzMTQzQUY4ODQ3NEVG OEExMUVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXOE9VMmVNIA h3jc9T7eKj2KFcRbQOIJzGdqFncs7WPKgQlHiLxJEMBg6zt3aE3GZ1m4DEwEeZ8h lWUcIlVaInUpCWTAtY3/NEqv/GdPdsX1QR1cSEZQlUlVMc3PdrPlIjsNsglXko9Z sB7B40iwr9NQJPRihB8Ja4ftJ77asUP/7V/fgFAumdz314Pc9RYtqXYC6isxPfN/ n/7J+BNrWGTVbiQF5leNZ9RRyMhm5P5PNSrboLjKr4ywmGy4CcBE/0NP5hKVhpSl +rmN9240QgJCH6sWeASMOUfsuThmiF/ltcAsHa4dV3HLfw5W9/zdIt6IaXW1SAfW g1+GKdZdkQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFHaX2+RSamk6HUyzFDr4hHTv ihHvMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDg5MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqnTANBgkqhkiG9w0BAQsFAAOC AQEAKIhp99qg6XHSHbSJCLF6xMHfm16d1xnhJyBTpJmVTh9K5BK3kIKTlJSvTxJC 6qnBvXrw6NtqFQVHAWbvPUEsdyzidkIwRHSkMuLT5H+MBurPV5sF3+juP3vfQkAe 0VJSlJQg7vxb+0MJnvPG+wGQLBkSr1AyV69B6RkCyhY1PaewQ87jBmDIgHO9j8p3 zEBtreHfNVNKdTGgAZNfSyiWLvARA3ccpMmVEMi0bAzb5FFA0tLk5jAhGvDwgBNu zdW1RntYYoJn1qAUv4kVCA5OVoAOuZLxPAd5/uhRsomddY++HIn2q963l8VvdaSr 6qQj1DEbjAvizXw+ZS5PM2cIqg== -----END CERTIFICATE-----Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org