$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa File: AS401104.roa (raw, json) Hash identifier: AhrIONkU+9uaF4P1TGoDXSTgoPPkPhSjqz1E1wbpri8= Subject key identifier: DB:DC:95:0E:3D:1A:11:03:2A:61:F0:FF:D6:41:AA:CD:23:A4:27:E1 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 02ADB6A80C1173BD38301EA0443D621B32D9FA34 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa Signing time: Sun 05 Jan 2025 00:00:08 +0000 ROA not before: Sat 04 Jan 2025 23:55:08 +0000 ROA not after: Sun 04 Jan 2026 00:00:08 +0000 asID: 401104 IP address blocks: 104.234.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ad:b6:a8:0c:11:73:bd:38:30:1e:a0:44:3d:62:1b:32:d9:fa:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 4 23:55:08 2025 GMT Not After : Jan 4 00:00:08 2026 GMT Subject: CN=DBDC950E3D1A11032A61F0FFD641AACD23A427E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ce:9a:e7:f6:76:8b:10:53:ad:b7:13:07:fe: e0:36:7b:54:13:4f:f4:7e:fc:f0:f5:2d:44:ea:21: 49:0d:e5:30:f5:99:83:b4:d3:fb:03:f8:2b:be:03: 98:c6:47:e1:ef:22:74:95:50:82:98:dc:89:75:92: 5c:28:b6:6e:62:2a:23:4f:24:2e:7b:79:56:2b:07: ca:32:66:63:68:ba:1d:3b:43:18:72:7e:69:55:1d: 13:70:28:e9:28:63:3c:fe:91:c8:b8:c6:d1:7f:fe: 72:fc:e3:18:89:8f:f2:5c:7a:3e:8a:67:ee:4c:87: 3a:64:0b:69:92:f2:51:f2:5e:45:70:6c:af:cc:53: 82:01:9e:dd:41:72:82:17:59:21:b7:f0:76:51:ed: e5:b5:a9:eb:50:05:22:44:78:15:8d:d0:38:73:13: 5b:73:8d:e5:92:9f:ac:54:3a:33:a4:2f:11:6f:28: 54:af:79:9f:5b:0d:42:08:34:7e:99:1c:1a:33:ac: 02:f2:74:83:57:d9:6a:cf:31:22:80:48:ec:54:b6: 5d:89:31:bf:fc:d8:3e:2a:3d:b0:5c:b6:8a:97:67: ac:6f:34:28:23:7e:bb:da:98:6a:4a:f8:c2:5a:9c: 03:f1:ac:1e:79:39:c8:88:da:39:47:5c:af:05:69: e8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DC:95:0E:3D:1A:11:03:2A:61:F0:FF:D6:41:AA:CD:23:A4:27:E1 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401104.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.208.0/24 Signature Algorithm: sha256WithRSAEncryption bf:dd:67:cf:db:fc:7f:fb:32:1b:32:2b:ae:56:07:a1:2e:b3: 22:ee:28:80:99:ef:c9:f7:d2:9b:23:77:85:69:75:73:f9:7c: 4f:46:8e:ea:65:13:30:20:ef:e3:be:62:2f:c7:72:c3:90:ab: 47:40:51:ea:35:f9:ec:07:bd:f9:53:55:a1:1f:36:b7:aa:fb: 18:33:0f:a4:0d:74:47:08:25:7c:09:24:90:7e:5b:0b:1a:a5: 54:2e:34:c6:c8:b1:90:ed:14:2b:b2:1a:3b:d1:cf:e8:81:f6: 7a:e5:d0:9d:37:e6:84:1a:ab:21:d3:d8:2f:45:8d:71:98:f7: 77:2a:c1:74:54:b7:60:f9:52:1d:f3:5a:1f:94:c0:69:27:b5: 78:79:d6:91:d4:76:db:eb:5f:08:ca:23:6c:46:43:db:04:65: bd:18:22:6e:42:26:6b:0a:3f:9b:0e:17:a4:c7:24:1e:6d:65: 26:c3:32:c8:13:c2:79:b2:e8:4f:65:7c:62:2f:6c:27:f2:b4: 69:04:f1:be:05:99:05:63:ac:b3:05:66:62:db:cd:73:de:5c: 70:66:f1:22:07:4f:ee:7b:6b:c7:1f:81:44:3c:b3:8d:aa:5d: d4:b7:54:d4:19:8b:5f:cc:c2:2a:0b:9c:e0:68:0e:52:0e:5a: 9b:aa:15:cf -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUAq22qAwRc704MB6gRD1iGzLZ+jQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA0MjM1NTA4WhcNMjYwMTA0MDAwMDA4 WjAzMTEwLwYDVQQDEyhEQkRDOTUwRTNEMUExMTAzMkE2MUYwRkZENjQxQUFDRDIz QTQyN0UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs6a5/Z2ixBT rbcTB/7gNntUE0/0fvzw9S1E6iFJDeUw9ZmDtNP7A/grvgOYxkfh7yJ0lVCCmNyJ dZJcKLZuYiojTyQue3lWKwfKMmZjaLodO0MYcn5pVR0TcCjpKGM8/pHIuMbRf/5y /OMYiY/yXHo+imfuTIc6ZAtpkvJR8l5FcGyvzFOCAZ7dQXKCF1kht/B2Ue3ltanr UAUiRHgVjdA4cxNbc43lkp+sVDozpC8RbyhUr3mfWw1CCDR+mRwaM6wC8nSDV9lq zzEigEjsVLZdiTG//Ng+Kj2wXLaKl2esbzQoI3672phqSvjCWpwD8aweeTnIiNo5 R1yvBWno0QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFNvclQ49GhEDKmHw/9ZBqs0j pCfhMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTEwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq0DANBgkqhkiG9w0BAQsFAAOC AQEAv91nz9v8f/syGzIrrlYHoS6zIu4ogJnvyffSmyN3hWl1c/l8T0aO6mUTMCDv 475iL8dyw5CrR0BR6jX57Ae9+VNVoR82t6r7GDMPpA10RwglfAkkkH5bCxqlVC40 xsixkO0UK7IaO9HP6IH2euXQnTfmhBqrIdPYL0WNcZj3dyrBdFS3YPlSHfNaH5TA aSe1eHnWkdR22+tfCMojbEZD2wRlvRgibkImawo/mw4XpMckHm1lJsMyyBPCebLo T2V8Yi9sJ/K0aQTxvgWZBWOsswVmYtvNc95ccGbxIgdP7ntrxx+BRDyzjapd1LdU 1BmLX8zCKguc4GgOUg5am6oVzw== -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:13 2025 by rpki-client