$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400944.roa File: AS400944.roa (raw, json) Hash identifier: D6/hs+qLQSOvei31I+N4bVY313KQSZ1hACrrUftgJhA= Subject key identifier: 70:A6:3F:2E:E7:D5:5C:9D:8C:49:4B:D7:3A:B8:E8:23:A6:C1:B8:21 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 559CAE0A50BB17B3935402A76371FB79E5909DA2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400944.roa Signing time: Mon 24 Mar 2025 12:28:26 +0000 ROA not before: Mon 24 Mar 2025 12:23:26 +0000 ROA not after: Mon 23 Mar 2026 12:28:26 +0000 asID: 400944 IP address blocks: 104.234.137.0/24 maxlen: 24 104.234.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:9c:ae:0a:50:bb:17:b3:93:54:02:a7:63:71:fb:79:e5:90:9d:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 24 12:23:26 2025 GMT Not After : Mar 23 12:28:26 2026 GMT Subject: CN=70A63F2EE7D55C9D8C494BD73AB8E823A6C1B821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:63:23:f7:90:98:1d:55:66:02:f1:af:51:71: 35:9e:1d:59:e9:ca:35:05:43:46:d6:44:4c:ea:03: 9f:d1:ac:e7:01:5e:62:06:e2:77:57:ec:e3:02:91: f6:b5:cc:30:01:47:12:9a:0d:b0:62:97:7c:cb:74: bd:f5:e4:5c:8c:b5:ab:3c:7a:cf:57:6d:c0:eb:b5: 68:e2:55:c1:3d:d0:16:ec:84:b4:3c:8e:53:ba:ef: b1:85:f2:71:7e:a7:7a:b7:11:7f:89:16:75:75:5a: 84:cc:25:cf:3c:01:82:dd:ce:4a:5a:47:47:9e:99: ae:3a:9a:f4:51:40:0c:b6:6c:e1:ad:c1:ad:3d:67: ad:27:e9:9b:8f:43:e5:73:50:2d:8c:64:d0:68:b5: bd:1e:a9:6a:85:83:e3:c8:38:8f:69:bb:5f:f1:8f: 3b:05:fb:a5:51:c7:15:f5:e4:c6:4a:38:a3:87:cc: 07:3d:46:b5:ea:82:55:79:56:3e:27:ae:33:5e:7d: 9e:20:9c:13:05:aa:28:5f:17:ef:42:9f:aa:60:e9: 6c:b4:c0:c2:ac:b5:77:11:f6:e2:e1:63:d2:ea:ff: 2e:d6:6e:5d:d8:fe:de:f9:02:c3:60:b8:c8:8f:cf: e8:ed:57:bb:d9:db:88:5e:8a:73:e2:16:72:b0:b9: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A6:3F:2E:E7:D5:5C:9D:8C:49:4B:D7:3A:B8:E8:23:A6:C1:B8:21 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400944.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.137.0/24 104.234.141.0/24 Signature Algorithm: sha256WithRSAEncryption 39:13:8a:d4:03:ed:3d:fd:e6:ab:64:c7:13:d4:3b:00:43:3f: 65:a1:08:9f:ba:07:b7:b2:ea:b6:58:6b:8e:41:8c:f5:5c:c3: 5e:ca:da:0e:63:1f:4d:08:54:dd:a7:ad:35:3e:62:67:27:5f: 00:52:5c:b3:ef:79:28:0d:83:05:5b:f4:09:54:1c:d0:6b:8e: 79:ac:f1:b1:ac:a7:c5:3c:71:12:22:85:ea:06:eb:da:ed:29: 87:35:ea:c8:ad:f1:41:18:0d:fb:2e:94:b0:74:75:e9:34:07: 5a:f0:5d:84:d5:d2:01:7f:71:24:60:83:dc:8b:b4:e6:ea:09: 6a:09:b6:06:02:a7:1a:bd:37:44:f0:a4:48:35:f0:5d:f4:d3: c2:61:65:db:02:9b:fb:d2:08:70:78:5a:f4:67:38:af:cc:02: 77:a4:bd:8f:65:a8:17:7a:f4:59:ee:05:ba:4d:43:8e:a7:b4: 65:4b:86:a1:68:44:59:ef:0b:db:ab:dd:15:bc:c8:ec:53:58: b2:e3:68:b4:fc:d2:37:aa:67:9b:9b:76:d8:c4:8b:88:0a:f8: 99:8a:1d:cf:3e:ee:42:15:b4:5e:dd:8a:eb:3d:41:92:ab:1f: b4:a9:93:68:b2:76:d4:6b:34:c1:08:c6:30:b3:cb:ba:e4:57: 6a:00:ce:d4 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUVZyuClC7F7OTVAKnY3H7eeWQnaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzI0MTIyMzI2WhcNMjYwMzIzMTIyODI2 WjAzMTEwLwYDVQQDEyg3MEE2M0YyRUU3RDU1QzlEOEM0OTRCRDczQUI4RTgyM0E2 QzFCODIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmMj95CYHVVm AvGvUXE1nh1Z6co1BUNG1kRM6gOf0aznAV5iBuJ3V+zjApH2tcwwAUcSmg2wYpd8 y3S99eRcjLWrPHrPV23A67Vo4lXBPdAW7IS0PI5Tuu+xhfJxfqd6txF/iRZ1dVqE zCXPPAGC3c5KWkdHnpmuOpr0UUAMtmzhrcGtPWetJ+mbj0Plc1AtjGTQaLW9Hqlq hYPjyDiPabtf8Y87BfulUccV9eTGSjijh8wHPUa16oJVeVY+J64zXn2eIJwTBaoo XxfvQp+qYOlstMDCrLV3Efbi4WPS6v8u1m5d2P7e+QLDYLjIj8/o7Ve72duIXopz 4hZysLm1SwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFHCmPy7n1VydjElL1zq46COm wbghMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDk0NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqiQMEAGjqjTANBgkqhkiG9w0B AQsFAAOCAQEAOROK1APtPf3mq2THE9Q7AEM/ZaEIn7oHt7LqtlhrjkGM9VzDXsra DmMfTQhU3aetNT5iZydfAFJcs+95KA2DBVv0CVQc0GuOeazxsaynxTxxEiKF6gbr 2u0phzXqyK3xQRgN+y6UsHR16TQHWvBdhNXSAX9xJGCD3Iu05uoJagm2BgKnGr03 RPCkSDXwXfTTwmFl2wKb+9IIcHha9Gc4r8wCd6S9j2WoF3r0We4Fuk1Djqe0ZUuG oWhEWe8L26vdFbzI7FNYsuNotPzSN6pnm5t22MSLiAr4mYodzz7uQhW0Xt2K6z1B kqsftKmTaLJ21Gs0wQjGMLPLuuRXagDO1A== -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:33 2025 by rpki-client