$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS60117.roa File: AS60117.roa (raw, json) Hash identifier: VyuU+xxCjw5Fd5VwYWJlPk3rwZdDYcemescNYMAPLuA= Subject key identifier: AC:14:34:AA:BC:38:43:EE:50:3F:FB:8D:AF:6F:A8:B0:89:B9:A9:83 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0F115F158CBE85682F65A937166DA9C039E85259 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS60117.roa Signing time: Tue 10 Dec 2024 14:01:40 +0000 ROA not before: Tue 10 Dec 2024 13:56:40 +0000 ROA not after: Tue 09 Dec 2025 14:01:40 +0000 asID: 60117 IP address blocks: 104.234.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Feb 2025 09:29:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:11:5f:15:8c:be:85:68:2f:65:a9:37:16:6d:a9:c0:39:e8:52:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Dec 10 13:56:40 2024 GMT Not After : Dec 9 14:01:40 2025 GMT Subject: CN=AC1434AABC3843EE503FFB8DAF6FA8B089B9A983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ec:a0:03:24:46:cb:3e:8d:f5:9a:a6:5d:2a: bc:1d:de:ea:70:c5:d3:d4:b2:86:4c:81:e6:90:6f: 9a:15:6e:d5:04:29:0e:ea:ec:68:93:07:ff:03:a7: 90:70:d7:2f:a0:e0:3d:42:6d:90:e9:57:78:51:53: 5a:97:dd:34:62:99:09:92:eb:0c:76:b1:b6:db:91: 6d:47:06:ef:c2:e7:69:6c:8d:b9:53:61:28:94:eb: a2:e8:4a:e4:24:57:df:22:cc:f3:c4:f6:f6:6e:c6: 61:56:b4:ae:89:40:ef:2f:3a:d7:fb:33:95:d2:ef: 1f:c9:1e:85:02:e8:62:45:f9:51:84:ce:79:8a:d8: 65:4d:cd:d8:67:fc:d0:ea:54:4e:30:03:20:af:83: 5e:b7:b1:ef:3e:ee:27:bc:e6:b8:7b:61:65:29:fc: 92:2c:c5:ff:cd:d4:9b:d2:28:63:bf:70:2f:7e:51: bd:ff:ba:8f:de:3c:1d:5d:5f:a2:87:b4:e5:a1:7f: 17:82:d8:e0:74:c8:b4:7e:42:f2:7e:45:9c:64:44: 31:8c:ba:2d:b9:db:0d:af:52:e2:71:74:0b:0e:55: 13:6b:24:c8:c8:d7:50:3b:74:87:36:78:d6:06:63: 39:a6:41:0f:22:dc:23:02:55:1b:3b:c9:83:77:9c: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:14:34:AA:BC:38:43:EE:50:3F:FB:8D:AF:6F:A8:B0:89:B9:A9:83 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS60117.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.3.0/24 Signature Algorithm: sha256WithRSAEncryption 32:96:1c:83:88:3a:4b:9a:9b:af:40:29:e8:2a:28:43:04:c9: 13:87:b0:74:1c:7c:cc:55:b9:dc:09:2e:78:54:f5:07:11:af: 40:84:f4:1e:e7:c6:a9:e6:b7:a2:96:be:d5:19:5f:29:82:0b: df:6b:60:28:c7:14:b0:8d:6d:ef:f2:9e:a8:d6:5f:a6:1f:55: 70:c1:fa:8b:1c:fa:81:3e:2a:21:07:e1:d0:13:cc:17:91:59: fa:f2:92:02:8e:9d:25:14:03:fb:e1:ad:52:f6:4f:1d:50:d5: 53:6e:3d:89:8a:ea:d8:8d:f9:79:b3:03:4b:5e:bf:a9:0b:02: 3c:59:e3:c4:f5:89:5b:0a:45:84:5e:59:6a:6b:3f:87:25:c2: f0:c0:af:10:fe:01:dd:09:fb:43:d7:28:bd:6e:1b:04:ea:3f: d5:84:e5:0a:63:f0:20:87:79:ca:6d:c2:89:0c:7c:6a:bb:bc: bb:a0:94:5d:3f:c2:50:ea:4d:17:4b:49:b1:2c:ce:ed:49:c5: 7f:76:c4:61:75:33:e2:82:b7:7a:98:46:3b:b0:9c:bf:06:99: a0:57:a7:f6:30:35:f8:22:c9:72:f7:47:3f:15:cd:dc:de:93: 79:50:eb:dc:78:6c:43:0e:1e:0c:6d:c9:9c:6c:5b:cf:fc:64: 73:a3:91:5d -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUDxFfFYy+hWgvZak3Fm2pwDnoUlkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMjEwMTM1NjQwWhcNMjUxMjA5MTQwMTQw WjAzMTEwLwYDVQQDEyhBQzE0MzRBQUJDMzg0M0VFNTAzRkZCOERBRjZGQThCMDg5 QjlBOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eygAyRGyz6N 9ZqmXSq8Hd7qcMXT1LKGTIHmkG+aFW7VBCkO6uxokwf/A6eQcNcvoOA9Qm2Q6Vd4 UVNal900YpkJkusMdrG225FtRwbvwudpbI25U2EolOui6ErkJFffIszzxPb2bsZh VrSuiUDvLzrX+zOV0u8fyR6FAuhiRflRhM55ithlTc3YZ/zQ6lROMAMgr4Net7Hv Pu4nvOa4e2FlKfySLMX/zdSb0ihjv3AvflG9/7qP3jwdXV+ih7TloX8XgtjgdMi0 fkLyfkWcZEQxjLotudsNr1LicXQLDlUTayTIyNdQO3SHNnjWBmM5pkEPItwjAlUb O8mDd5zTmwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKwUNKq8OEPuUD/7ja9vqLCJ uamDMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzYwMTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOoDMA0GCSqGSIb3DQEBCwUAA4IB AQAylhyDiDpLmpuvQCnoKihDBMkTh7B0HHzMVbncCS54VPUHEa9AhPQe58ap5rei lr7VGV8pggvfa2AoxxSwjW3v8p6o1l+mH1VwwfqLHPqBPiohB+HQE8wXkVn68pIC jp0lFAP74a1S9k8dUNVTbj2JiurYjfl5swNLXr+pCwI8WePE9YlbCkWEXllqaz+H JcLwwK8Q/gHdCftD1yi9bhsE6j/VhOUKY/Agh3nKbcKJDHxqu7y7oJRdP8JQ6k0X S0mxLM7tScV/dsRhdTPigrd6mEY7sJy/BpmgV6f2MDX4Isly90c/Fc3c3pN5UOvc eGxDDh4MbcmcbFvP/GRzo5Fd -----END CERTIFICATE-----Generated at Wed Feb 5 08:46:58 2025 by rpki-client