$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: SGK8mtiQRkRrDPO4j3ctiSjqe/PZKGfxvp2AzBPKV58= Subject key identifier: ED:23:C5:38:A5:52:AE:C3:90:36:8C:69:70:DA:1C:7E:CF:49:D4:75 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6B74DC365E07431B21C22197D412AEA5BCBDA040 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa Signing time: Mon 02 Dec 2024 16:49:22 +0000 ROA not before: Mon 02 Dec 2024 16:44:22 +0000 ROA not after: Mon 01 Dec 2025 16:49:22 +0000 asID: 400909 IP address blocks: 104.234.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:74:dc:36:5e:07:43:1b:21:c2:21:97:d4:12:ae:a5:bc:bd:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 2 16:44:22 2024 GMT Not After : Dec 1 16:49:22 2025 GMT Subject: CN=ED23C538A552AEC390368C6970DA1C7ECF49D475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:57:9c:2b:d4:7f:91:27:25:75:ec:f3:11:7b: 5a:9e:10:8b:1b:fa:6a:5d:a0:18:dc:08:15:c7:dd: 63:c5:e7:bb:97:89:73:4d:3c:5a:ea:72:c7:97:99: 2f:16:db:b1:1f:b9:61:f4:68:46:24:ae:81:09:9b: 67:2e:29:75:87:77:c0:7d:60:06:14:b0:b4:57:2c: d9:b7:f5:75:92:ab:2a:b3:8e:de:0f:22:de:fa:64: a1:4d:aa:82:6c:50:ed:03:ff:5b:3d:8b:7d:73:35: 55:d0:e5:d9:6f:7a:3b:1a:51:4b:79:ea:be:f7:a6: 9f:25:b8:7a:a7:6d:39:29:9e:37:29:0d:22:87:26: c3:0b:11:49:85:cf:bd:7d:b0:49:3d:4c:f6:a9:04: 6c:28:93:9d:e1:85:d7:f8:0b:bf:36:cd:43:99:c8: 6c:b4:7f:79:81:b1:eb:60:7f:cf:71:0e:84:2f:41: 8d:16:10:3c:19:6c:c7:a0:70:6a:03:a5:ea:49:d5: fd:5d:69:65:09:48:ac:35:3d:99:b9:7d:23:8f:73: 5d:06:b0:5f:9a:dd:97:44:fb:54:a0:ca:0b:96:cf: 57:57:e7:ff:bc:49:43:bd:f6:41:a7:cd:b1:4c:f7: e9:d0:6f:c1:87:9a:45:5f:aa:64:80:64:5a:71:0c: cf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:23:C5:38:A5:52:AE:C3:90:36:8C:69:70:DA:1C:7E:CF:49:D4:75 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.127.0/24 Signature Algorithm: sha256WithRSAEncryption 30:6f:d5:81:de:a1:2d:11:f0:0b:98:66:9d:94:e3:e5:39:27: 3f:8c:3b:45:b1:11:21:82:02:3c:d4:93:f5:7f:46:4e:ed:b9: 5e:09:0a:37:60:c3:19:48:89:96:a6:f0:db:27:17:5b:1a:80: 8c:a7:d0:9f:ad:f7:f7:2a:09:97:fa:ef:8a:e9:62:63:bd:aa: 9d:25:69:a0:19:ec:6b:1a:0b:74:92:6e:db:1c:ce:54:b4:74: 3e:25:e5:89:67:38:68:23:47:54:d7:fe:18:17:73:df:50:79: 26:3b:67:b7:2a:b8:93:57:09:fb:42:4b:92:6e:29:c3:e5:45: c2:8e:d0:83:b8:70:cd:2b:64:be:78:b6:16:ec:97:17:2e:56: dc:db:72:0b:8a:5a:67:b2:5f:f9:34:bd:0a:5e:ae:24:6d:2f: 75:15:bf:d8:d1:a3:94:75:6b:7c:c7:49:e4:5a:80:42:18:8a: ef:6b:ea:d2:7c:fa:6a:4c:13:63:d7:c2:a2:33:6c:f5:8c:c4: a7:db:22:25:e8:a2:ed:30:df:ce:22:39:6f:87:ff:63:88:4a: 07:29:85:f8:9f:90:82:01:ca:69:2f:74:85:5c:b5:57:73:60: b5:a2:af:d3:5d:91:f4:f3:12:39:bb:16:86:a9:8b:50:78:2b: f9:26:d9:72 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUa3TcNl4HQxshwiGX1BKupby9oEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMjAyMTY0NDIyWhcNMjUxMjAxMTY0OTIy WjAzMTEwLwYDVQQDEyhFRDIzQzUzOEE1NTJBRUMzOTAzNjhDNjk3MERBMUM3RUNG NDlENDc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlecK9R/kScl dezzEXtanhCLG/pqXaAY3AgVx91jxee7l4lzTTxa6nLHl5kvFtuxH7lh9GhGJK6B CZtnLil1h3fAfWAGFLC0VyzZt/V1kqsqs47eDyLe+mShTaqCbFDtA/9bPYt9czVV 0OXZb3o7GlFLeeq+96afJbh6p205KZ43KQ0ihybDCxFJhc+9fbBJPUz2qQRsKJOd 4YXX+Au/Ns1DmchstH95gbHrYH/PcQ6EL0GNFhA8GWzHoHBqA6XqSdX9XWllCUis NT2ZuX0jj3NdBrBfmt2XRPtUoMoLls9XV+f/vElDvfZBp82xTPfp0G/Bh5pFX6pk gGRacQzPHwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFO0jxTilUq7DkDaMaXDaHH7P SdR1MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqfzANBgkqhkiG9w0BAQsFAAOC AQEAMG/Vgd6hLRHwC5hmnZTj5TknP4w7RbERIYICPNST9X9GTu25XgkKN2DDGUiJ lqbw2ycXWxqAjKfQn6339yoJl/rviuliY72qnSVpoBnsaxoLdJJu2xzOVLR0PiXl iWc4aCNHVNf+GBdz31B5Jjtntyq4k1cJ+0JLkm4pw+VFwo7Qg7hwzStkvni2FuyX Fy5W3NtyC4paZ7Jf+TS9Cl6uJG0vdRW/2NGjlHVrfMdJ5FqAQhiK72vq0nz6akwT Y9fCojNs9YzEp9siJeii7TDfziI5b4f/Y4hKBymF+J+QggHKaS90hVy1V3NgtaKv 012R9PMSObsWhqmLUHgr+SbZcg== -----END CERTIFICATE-----Generated at Sat Apr 5 19:09:06 2025 by rpki-client