$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64267.roa File: AS64267.roa (raw, json) Hash identifier: gEve9eVUark5LDzemNBp3h9c9V2Zzik3g0AZ9+jSufI= Subject key identifier: 58:EC:EB:26:34:BF:D9:92:87:01:2F:76:38:6E:F3:D9:CA:C1:F7:3F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 56515FD96627B1AE6432B55DA7DF7E5CD9722C78 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64267.roa Signing time: Sun 31 Mar 2024 00:01:57 +0000 ROA not before: Sat 30 Mar 2024 23:56:57 +0000 ROA not after: Sun 30 Mar 2025 00:01:57 +0000 asID: 64267 IP address blocks: 104.234.81.0/24 maxlen: 24 104.234.122.0/24 maxlen: 24 104.234.133.0/24 maxlen: 24 104.234.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 May 2024 18:54:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:51:5f:d9:66:27:b1:ae:64:32:b5:5d:a7:df:7e:5c:d9:72:2c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 30 23:56:57 2024 GMT Not After : Mar 30 00:01:57 2025 GMT Subject: CN=58ECEB2634BFD99287012F76386EF3D9CAC1F73F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:61:70:f5:79:80:a9:24:c2:80:00:86:33: c4:b2:34:90:ea:fc:14:81:cf:b2:f7:41:6e:1f:b2: 09:fe:49:d9:f0:0c:f3:d8:aa:cc:b3:34:8c:05:4d: a2:00:39:f5:11:28:3d:34:ec:24:05:02:cd:5d:ae: 7e:68:96:58:05:ae:39:ec:1f:c8:05:f1:24:bb:43: ae:a1:6d:16:54:5c:28:6f:2d:2e:bd:96:5f:f3:80: e0:01:7b:2f:d2:d8:00:41:07:68:8f:88:25:de:5b: d7:96:a5:15:72:95:11:c4:0b:96:d3:cc:78:f8:30: 85:43:40:03:7d:86:eb:69:d8:ef:8f:ab:2b:b4:5c: 16:6c:3c:87:c3:25:09:6e:2e:5c:37:10:8b:3f:90: a3:c3:5e:dc:2a:a3:6c:80:2b:ad:f0:13:15:ee:49: c5:92:15:70:41:a5:66:fe:78:75:54:8e:56:05:30: 12:93:c9:03:94:7b:39:d8:d0:e5:1b:f9:0b:4d:13: 93:ce:79:98:1e:dd:48:ae:b4:a4:0b:44:6a:fd:2c: 4d:89:b8:12:20:60:7b:25:fa:00:5a:03:40:cd:7c: 54:d7:38:88:8f:b0:da:3d:3f:bf:50:e2:a8:ce:af: 33:5c:4f:9c:00:a3:b2:05:9b:ad:c7:c6:89:04:a2: 62:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:EC:EB:26:34:BF:D9:92:87:01:2F:76:38:6E:F3:D9:CA:C1:F7:3F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.81.0/24 104.234.122.0/24 104.234.133.0/24 104.234.138.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:cf:f5:6d:7e:a1:9e:cf:01:07:fc:02:a7:0c:be:a0:cf:bb: 92:75:fd:1c:67:46:7a:34:78:07:ce:41:ca:34:f5:84:9b:83: 89:ca:8c:ff:3c:37:1a:ea:a9:8c:0b:85:d6:0d:22:58:48:ff: 9a:17:67:40:9a:b9:dd:03:c7:a4:9a:92:97:30:d9:1e:84:15: ef:72:4c:b5:e5:70:79:60:43:2e:ed:00:b6:ad:be:4c:1b:cf: 78:91:e7:bd:55:67:fd:5c:fd:61:d4:7f:35:fc:49:46:44:c2: 5b:2a:b4:d4:fc:26:be:70:9c:f4:92:f8:6e:81:c1:be:f9:8c: 1c:23:ab:84:3a:c5:da:f9:cb:b1:04:27:d7:8e:67:99:4c:87: 7c:68:1a:91:a0:5b:8b:61:03:89:9a:59:ae:6c:96:37:f4:43: 5b:3d:64:9e:49:92:59:ec:dd:54:4b:3e:e0:67:af:0f:d9:16: 88:6d:42:48:b1:a9:80:62:bc:2f:37:2f:fc:7c:1f:eb:bd:76: b3:1e:c4:79:75:cf:f0:ac:65:f2:c6:d2:a6:30:4a:4f:cd:57: 11:8a:0f:ce:db:fa:fd:fc:85:37:3e:58:0a:ce:1d:9e:7d:5a: e4:d8:b6:5c:b6:dc:4f:92:b8:2b:40:09:0a:12:4a:ed:1b:ec: 09:4d:8c:16 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUVlFf2WYnsa5kMrVdp99+XNlyLHgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQwMzMwMjM1NjU3WhcNMjUwMzMwMDAwMTU3 WjAzMTEwLwYDVQQDEyg1OEVDRUIyNjM0QkZEOTkyODcwMTJGNzYzODZFRjNEOUNB QzFGNzNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzVhcPV5gKkk woAAhjPEsjSQ6vwUgc+y90FuH7IJ/knZ8Azz2KrMszSMBU2iADn1ESg9NOwkBQLN Xa5+aJZYBa457B/IBfEku0OuoW0WVFwoby0uvZZf84DgAXsv0tgAQQdoj4gl3lvX lqUVcpURxAuW08x4+DCFQ0ADfYbradjvj6srtFwWbDyHwyUJbi5cNxCLP5Cjw17c KqNsgCut8BMV7knFkhVwQaVm/nh1VI5WBTASk8kDlHs52NDlG/kLTROTznmYHt1I rrSkC0Rq/SxNibgSIGB7JfoAWgNAzXxU1ziIj7DaPT+/UOKozq8zXE+cAKOyBZut x8aJBKJiaQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFFjs6yY0v9mShwEvdjhu89nK wfc/MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAaOpRAwQAaOp6AwQAaOqFAwQAaOqK MA0GCSqGSIb3DQEBCwUAA4IBAQBrz/VtfqGezwEH/AKnDL6gz7uSdf0cZ0Z6NHgH zkHKNPWEm4OJyoz/PDca6qmMC4XWDSJYSP+aF2dAmrndA8ekmpKXMNkehBXvcky1 5XB5YEMu7QC2rb5MG894kee9VWf9XP1h1H81/ElGRMJbKrTU/Ca+cJz0kvhugcG+ +YwcI6uEOsXa+cuxBCfXjmeZTId8aBqRoFuLYQOJmlmubJY39ENbPWSeSZJZ7N1U Sz7gZ68P2RaIbUJIsamAYrwvNy/8fB/rvXazHsR5dc/wrGXyxtKmMEpPzVcRig/O 2/r9/IU3PlgKzh2efVrk2LZcttxPkrgrQAkKEkrtG+wJTYwW -----END CERTIFICATE-----Generated at Thu May 16 18:25:40 2024 by rpki-client on console-fra.rpki-client.org