$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400944.roa File: AS400944.roa (raw, json) Hash identifier: nW5IY86wn7bIMD3ZZpEA8BeoYwmOz/yJ0Ov439IEqKE= Subject key identifier: D3:A7:EE:6D:9A:36:CC:19:0D:86:11:C4:FE:7E:82:14:36:2B:11:40 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 61EE60ACD661962D0C10D2A61AB0FAA92F33CB61 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400944.roa Signing time: Mon 22 Apr 2024 11:30:42 +0000 ROA not before: Mon 22 Apr 2024 11:25:42 +0000 ROA not after: Mon 21 Apr 2025 11:30:42 +0000 asID: 400944 IP address blocks: 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ee:60:ac:d6:61:96:2d:0c:10:d2:a6:1a:b0:fa:a9:2f:33:cb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 22 11:25:42 2024 GMT Not After : Apr 21 11:30:42 2025 GMT Subject: CN=D3A7EE6D9A36CC190D8611C4FE7E8214362B1140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cc:c9:ab:c8:bc:da:e5:91:ce:3b:98:df:8d: f4:25:6f:57:e2:5e:03:da:a4:4d:fa:05:9a:45:5e: 97:dc:14:b7:ac:b7:59:a5:08:85:13:19:bd:2a:54: 93:14:e9:50:85:a9:ed:71:a0:7c:00:5f:0e:12:6a: 3c:dc:30:b0:40:3a:6d:85:1d:2a:a2:f9:64:e5:e0: 5c:22:f9:16:45:a9:e6:24:70:5e:16:93:b0:d1:9f: cb:4c:f9:6b:cf:6b:c7:9e:6d:ee:6b:fa:53:df:43: 1f:33:b0:53:dd:d9:22:e9:7e:f8:63:84:e6:6f:9d: 30:87:6f:cd:3a:cd:d1:c1:d6:ba:19:97:62:98:2a: 6d:94:c7:2a:62:da:ca:60:e8:5b:b1:4e:41:f3:87: 1e:13:ff:0d:6e:ce:e2:60:9b:01:ab:fd:06:d4:2f: 44:50:3b:f4:71:68:8b:64:cd:31:d5:1b:aa:ba:00: b3:a7:a8:23:d5:2f:9e:bf:3a:04:90:70:34:12:07: fb:6c:c6:b2:3b:1a:80:44:e5:e0:86:bb:99:0e:90: 28:d4:92:6e:26:46:e5:c9:e7:e9:0e:de:48:92:ac: cf:b3:57:94:23:0b:34:12:f8:45:22:a9:a5:c9:3e: 2c:d5:93:f9:8a:79:74:a5:8e:db:ec:a9:44:e4:ef: ac:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:EE:6D:9A:36:CC:19:0D:86:11:C4:FE:7E:82:14:36:2B:11:40 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.137.0/24 104.234.141.0/24 Signature Algorithm: sha256WithRSAEncryption 94:d8:99:fa:6f:5e:85:68:aa:9b:32:ba:0f:09:23:33:f5:e3: e1:8a:f4:cf:20:26:70:fe:45:f1:49:9a:61:90:e1:37:ec:70: c6:18:3c:37:4a:a0:a2:ac:35:31:fe:58:18:2a:f6:43:6b:20: 98:eb:ce:5b:cf:8e:a9:78:21:70:db:78:54:5f:8d:ba:07:ce: ab:15:81:10:b0:8d:b3:7d:1c:f4:58:9f:43:83:c0:3e:eb:56: 5a:28:59:f8:49:64:2e:63:bb:6d:62:12:03:4b:cc:5f:fd:09: 13:26:a1:c2:ca:96:6b:c5:27:92:3d:90:7f:ed:3c:80:73:ac: 15:ec:75:fc:1d:e0:1e:5e:39:6f:83:5f:66:0d:75:fe:12:0f: 07:05:48:6d:14:72:46:54:24:4f:e3:41:09:30:3b:64:3d:25: 2e:14:54:2a:2a:ef:ec:79:8e:7f:3b:b9:ff:22:6d:74:c7:1f: d2:ac:a5:1b:bb:e0:fe:3c:69:43:73:4b:aa:d5:da:30:17:90: 03:db:df:2e:7c:af:21:02:69:1b:6a:f1:1f:2c:b0:1f:ff:c8: 84:e4:5e:cc:02:50:73:43:88:20:d7:cc:8e:77:d0:50:09:94: 69:13:6e:a3:30:b4:f8:80:bc:2c:1a:a0:1e:7f:dc:5c:f6:14: 2f:70:5c:bf -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUYe5grNZhli0MENKmGrD6qS8zy2EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwNDIyMTEyNTQyWhcNMjUwNDIxMTEzMDQy WjAzMTEwLwYDVQQDEyhEM0E3RUU2RDlBMzZDQzE5MEQ4NjExQzRGRTdFODIxNDM2 MkIxMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8zJq8i82uWR zjuY3430JW9X4l4D2qRN+gWaRV6X3BS3rLdZpQiFExm9KlSTFOlQhantcaB8AF8O Emo83DCwQDpthR0qovlk5eBcIvkWRanmJHBeFpOw0Z/LTPlrz2vHnm3ua/pT30Mf M7BT3dki6X74Y4Tmb50wh2/NOs3Rwda6GZdimCptlMcqYtrKYOhbsU5B84ceE/8N bs7iYJsBq/0G1C9EUDv0cWiLZM0x1RuqugCzp6gj1S+evzoEkHA0Egf7bMayOxqA ROXghruZDpAo1JJuJkblyefpDt5IkqzPs1eUIws0EvhFIqmlyT4s1ZP5inl0pY7b 7KlE5O+sKQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFNOn7m2aNswZDYYRxP5+ghQ2 KxFAMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDk0NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqiQMEAGjqjTANBgkqhkiG9w0B AQsFAAOCAQEAlNiZ+m9ehWiqmzK6DwkjM/Xj4Yr0zyAmcP5F8UmaYZDhN+xwxhg8 N0qgoqw1Mf5YGCr2Q2sgmOvOW8+OqXghcNt4VF+NugfOqxWBELCNs30c9FifQ4PA PutWWihZ+ElkLmO7bWISA0vMX/0JEyahwsqWa8Unkj2Qf+08gHOsFex1/B3gHl45 b4NfZg11/hIPBwVIbRRyRlQkT+NBCTA7ZD0lLhRUKirv7HmOfzu5/yJtdMcf0qyl G7vg/jxpQ3NLqtXaMBeQA9vfLnyvIQJpG2rxHyywH//IhORezAJQc0OIINfMjnfQ UAmUaRNuozC0+IC8LBqgHn/cXPYUL3Bcvw== -----END CERTIFICATE-----Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org