$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: pfdZKmljyLl5sVmJ8yRUL7Ak35erCo+k7s2IlwFf+KU= Subject key identifier: 61:76:DC:14:3F:12:09:35:C9:8B:40:A5:4D:03:C4:A6:6F:5C:17:99 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 730ECCBB606DA50D4D0E9893631F80698DC6E401 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa Signing time: Mon 01 Jan 2024 16:40:14 +0000 ROA not before: Mon 01 Jan 2024 16:35:14 +0000 ROA not after: Mon 30 Dec 2024 16:40:14 +0000 asID: 400909 IP address blocks: 104.234.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0e:cc:bb:60:6d:a5:0d:4d:0e:98:93:63:1f:80:69:8d:c6:e4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 1 16:35:14 2024 GMT Not After : Dec 30 16:40:14 2024 GMT Subject: CN=6176DC143F120935C98B40A54D03C4A66F5C1799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6a:6b:60:0b:99:c4:c7:65:13:3f:38:19:49: 5d:29:28:b6:c0:e2:11:07:02:9f:66:a4:69:ca:3f: dc:bd:ad:ad:32:96:d3:a5:d6:db:83:c8:e0:4c:de: d6:d9:d2:04:49:a6:6f:a9:9f:bd:30:73:b7:f4:d4: 54:af:70:4b:5b:34:2f:1a:c6:fa:23:eb:e4:e0:25: 90:75:ca:d4:2f:37:06:ba:6d:14:f3:23:ff:55:a0: 86:4b:89:83:10:ed:8e:b6:35:ee:c3:a4:c2:99:0d: 4f:49:22:0d:3a:a6:2d:e4:3f:db:ef:b9:b9:cb:f2: 50:f8:38:0a:e3:70:d3:fe:f4:a2:7c:60:97:8a:ee: aa:a7:69:79:8b:03:e0:e5:72:e4:44:8b:aa:19:12: 7c:24:58:71:86:af:43:8d:1e:a5:bd:8e:d9:03:02: 64:eb:ef:56:98:36:1b:81:f6:8e:0e:4c:5e:89:0f: b4:40:5d:08:7d:3f:bb:f5:0b:02:5d:4d:ed:66:57: 22:c5:36:07:68:37:ea:bc:33:8b:33:ff:10:56:6f: e5:28:9a:89:e7:5c:c5:d5:cb:10:5f:b7:ce:c8:3c: 06:52:83:83:a7:3d:de:cb:3a:b9:71:22:bf:1b:3d: c1:1e:eb:05:02:40:7d:d8:45:a0:f6:6d:74:11:87: 7f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:76:DC:14:3F:12:09:35:C9:8B:40:A5:4D:03:C4:A6:6F:5C:17:99 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.127.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:62:38:19:53:a1:d9:71:de:7e:f5:cd:2e:0d:db:df:58:a4: 2f:06:e7:fe:65:50:1d:75:2b:e0:6a:89:c4:66:47:f9:98:90: ee:64:82:65:1e:4d:0d:b4:62:fc:c7:a3:05:7c:b3:7d:61:c3: bc:e6:9a:b9:7b:cb:d8:3a:51:48:da:75:a2:d8:01:00:bc:e7: 6a:2b:7a:97:7e:ed:ae:6a:3c:00:ab:c4:09:83:a8:1b:4c:9e: f7:44:0a:0b:16:d1:9e:77:21:3e:7b:1c:25:c3:6d:24:2f:ee: 63:41:cd:22:02:01:c7:48:d1:ec:47:e6:fb:96:fc:86:54:45: 68:0a:b9:5d:bb:b0:1f:42:81:6a:05:dc:e8:f0:eb:79:8e:31: 58:91:c5:44:a2:97:22:fd:28:2d:ef:59:26:5c:2d:a0:67:11: 6f:0a:b7:02:1b:ad:be:88:13:87:59:f6:cd:e6:79:b0:8b:33: 01:e9:0c:aa:f7:f1:1e:b0:b4:22:ec:4d:49:5b:58:b2:5d:40: 1f:c1:65:68:e6:df:c7:42:0f:ec:53:4b:dc:1f:34:00:4f:62: df:99:96:60:7e:9a:a3:41:b3:5a:3c:ff:69:49:e1:63:46:17: b5:a5:1f:b9:46:2a:2f:0f:a6:0f:5e:d5:16:5b:c9:de:5c:a7: bf:a7:a6:12 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUcw7Mu2BtpQ1NDpiTYx+AaY3G5AEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMTAxMTYzNTE0WhcNMjQxMjMwMTY0MDE0 WjAzMTEwLwYDVQQDEyg2MTc2REMxNDNGMTIwOTM1Qzk4QjQwQTU0RDAzQzRBNjZG NUMxNzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWprYAuZxMdl Ez84GUldKSi2wOIRBwKfZqRpyj/cva2tMpbTpdbbg8jgTN7W2dIESaZvqZ+9MHO3 9NRUr3BLWzQvGsb6I+vk4CWQdcrULzcGum0U8yP/VaCGS4mDEO2OtjXuw6TCmQ1P SSINOqYt5D/b77m5y/JQ+DgK43DT/vSifGCXiu6qp2l5iwPg5XLkRIuqGRJ8JFhx hq9DjR6lvY7ZAwJk6+9WmDYbgfaODkxeiQ+0QF0IfT+79QsCXU3tZlcixTYHaDfq vDOLM/8QVm/lKJqJ51zF1csQX7fOyDwGUoODpz3eyzq5cSK/Gz3BHusFAkB92EWg 9m10EYd/QwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGF23BQ/Egk1yYtApU0DxKZv XBeZMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqfzANBgkqhkiG9w0BAQsFAAOC AQEATGI4GVOh2XHefvXNLg3b31ikLwbn/mVQHXUr4GqJxGZH+ZiQ7mSCZR5NDbRi /MejBXyzfWHDvOaauXvL2DpRSNp1otgBALznait6l37trmo8AKvECYOoG0ye90QK CxbRnnchPnscJcNtJC/uY0HNIgIBx0jR7Efm+5b8hlRFaAq5XbuwH0KBagXc6PDr eY4xWJHFRKKXIv0oLe9ZJlwtoGcRbwq3AhutvogTh1n2zeZ5sIszAekMqvfxHrC0 IuxNSVtYsl1AH8FlaObfx0IP7FNL3B80AE9i35mWYH6ao0GzWjz/aUnhY0YXtaUf uUYqLw+mD17VFlvJ3lynv6emEg== -----END CERTIFICATE-----Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org