$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa File: AS43350.roa (raw, json) Hash identifier: KqcSYNRoSNnWTQ6y2DTdsKsqMl+zj1/+Hi2mL5FYYtI= Subject key identifier: 1C:35:0A:43:59:FA:F7:5A:F8:A6:75:55:1F:0C:7D:79:D7:7C:88:86 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 18DB3A4440DA82CF5AF1DD8507E54BC5F6567666 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa Signing time: Wed 29 Jan 2025 11:28:26 +0000 ROA not before: Wed 29 Jan 2025 11:23:26 +0000 ROA not after: Wed 28 Jan 2026 11:28:26 +0000 asID: 43350 IP address blocks: 104.234.1.0/24 maxlen: 24 104.234.46.0/24 maxlen: 24 104.234.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 15:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:db:3a:44:40:da:82:cf:5a:f1:dd:85:07:e5:4b:c5:f6:56:76:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 29 11:23:26 2025 GMT Not After : Jan 28 11:28:26 2026 GMT Subject: CN=1C350A4359FAF75AF8A675551F0C7D79D77C8886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:66:13:68:ed:ba:89:76:de:9a:0f:42:65:64: dc:41:56:9c:ec:ab:b0:e8:18:cc:e4:11:5e:0a:4f: fb:84:5e:77:bf:6d:9a:1a:00:02:4a:ce:b3:57:0c: 3e:02:7d:b8:bd:1f:84:46:2f:5d:e7:ed:86:6e:c1: a0:ed:31:92:f7:f5:17:f9:0f:58:52:09:53:e2:aa: c1:07:cc:06:23:be:05:19:37:fb:af:f7:35:61:51: 66:1b:78:f3:12:96:b0:06:96:ef:58:01:9c:a6:b3: 3b:15:7e:7f:65:a0:8c:e3:a6:f7:ea:3e:58:8e:c3: 08:80:88:30:96:49:07:14:6b:29:d5:aa:54:34:d3: 60:0d:e4:b6:4d:7f:7a:f0:a9:4f:43:32:44:63:42: 36:15:d4:b4:05:8c:65:7d:74:10:8c:66:2f:7d:8a: 1a:46:a2:41:40:2d:20:8c:e1:0a:c9:33:0f:b0:4b: 73:58:10:18:d2:a4:6a:c6:de:9c:0c:d7:76:5c:74: 0d:8d:f5:c5:9f:b3:dd:55:dd:ae:85:15:e2:80:da: c3:31:fb:b5:de:07:30:f5:3b:99:0b:f1:2e:26:90: cb:0f:4b:a6:1a:06:8e:ca:b5:26:21:97:c0:3b:72: ed:00:b1:db:2d:7f:b4:9c:8d:98:71:ff:47:2e:74: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:35:0A:43:59:FA:F7:5A:F8:A6:75:55:1F:0C:7D:79:D7:7C:88:86 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS43350.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.1.0/24 104.234.46.0/24 104.234.196.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:8d:7b:d3:89:32:84:ba:2c:50:40:ac:c2:89:e8:25:45:9d: 49:01:fe:e5:01:91:0c:d9:5b:0f:50:5f:4b:9e:ae:40:ed:49: bc:ee:45:a7:26:0c:67:b4:bf:63:2e:de:a3:e1:23:34:b8:bc: 8a:c7:a4:e6:bd:36:d2:70:04:e6:a3:90:04:42:9d:50:65:15: fe:2c:56:aa:9d:5c:66:86:89:c7:cb:79:5d:82:03:10:1d:39: 9d:83:cc:55:4e:d5:7a:e1:22:c5:fa:67:89:f5:c1:ab:69:2d: dc:b8:40:2b:b3:76:9d:b2:91:0e:f3:dd:4f:f6:14:e2:3b:c3: 86:3c:c0:54:ef:55:3f:1d:7e:4c:94:e9:db:2e:dc:cc:33:f4: 1f:3c:f9:a5:d0:c5:64:74:e1:f9:e9:ea:c8:ed:88:c9:76:00: 01:d3:42:34:09:e0:4a:fc:09:04:9c:1b:8b:79:22:b4:3f:f2: e7:82:12:2e:2d:d8:86:ac:b9:4b:c2:9f:27:30:a4:4b:d1:bc: 76:81:cf:f7:47:c5:ee:d4:23:2b:91:fd:09:92:31:54:2d:16: d0:42:2d:61:2a:9c:58:92:25:a5:42:ba:20:e2:eb:7b:e9:79: bd:bd:9e:00:2d:1c:81:c3:e2:0b:5e:eb:fe:24:7c:1c:d1:b6: a6:7b:78:cf -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGNs6REDags9a8d2FB+VLxfZWdmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTI5MTEyMzI2WhcNMjYwMTI4MTEyODI2 WjAzMTEwLwYDVQQDEygxQzM1MEE0MzU5RkFGNzVBRjhBNjc1NTUxRjBDN0Q3OUQ3 N0M4ODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGYTaO26iXbe mg9CZWTcQVac7Kuw6BjM5BFeCk/7hF53v22aGgACSs6zVww+An24vR+ERi9d5+2G bsGg7TGS9/UX+Q9YUglT4qrBB8wGI74FGTf7r/c1YVFmG3jzEpawBpbvWAGcprM7 FX5/ZaCM46b36j5YjsMIgIgwlkkHFGsp1apUNNNgDeS2TX968KlPQzJEY0I2FdS0 BYxlfXQQjGYvfYoaRqJBQC0gjOEKyTMPsEtzWBAY0qRqxt6cDNd2XHQNjfXFn7Pd Vd2uhRXigNrDMfu13gcw9TuZC/EuJpDLD0umGgaOyrUmIZfAO3LtALHbLX+0nI2Y cf9HLnRLLwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFBw1CkNZ+vda+KZ1VR8MfXnX fIiGMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQzMzUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOoBAwQAaOouAwQAaOrEMA0GCSqG SIb3DQEBCwUAA4IBAQBfjXvTiTKEuixQQKzCieglRZ1JAf7lAZEM2VsPUF9Lnq5A 7Um87kWnJgxntL9jLt6j4SM0uLyKx6TmvTbScATmo5AEQp1QZRX+LFaqnVxmhonH y3ldggMQHTmdg8xVTtV64SLF+meJ9cGraS3cuEArs3adspEO891P9hTiO8OGPMBU 71U/HX5MlOnbLtzMM/QfPPml0MVkdOH56erI7YjJdgAB00I0CeBK/AkEnBuLeSK0 P/LnghIuLdiGrLlLwp8nMKRL0bx2gc/3R8Xu1CMrkf0JkjFULRbQQi1hKpxYkiWl Qrog4ut76Xm9vZ4ALRyBw+ILXuv+JHwc0bame3jP -----END CERTIFICATE-----Generated at Fri Jun 6 13:24:14 2025 by rpki-client