$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7203.roa File: AS7203.roa (raw, json) Hash identifier: OuOqPmp8F5YwSBFdXajkPzAy0+/U4tbF4itTxmGfrCM= Subject key identifier: 8B:29:07:B6:1B:24:9A:B6:17:19:0A:E1:11:69:70:5A:BA:96:F0:E1 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 620CE1CF33F71C7D4B233F8696EFD779F763FD0F Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7203.roa Signing time: Tue 29 Oct 2024 11:49:02 +0000 ROA not before: Tue 29 Oct 2024 11:44:02 +0000 ROA not after: Tue 28 Oct 2025 11:49:02 +0000 asID: 7203 IP address blocks: 104.234.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 04:47:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0c:e1:cf:33:f7:1c:7d:4b:23:3f:86:96:ef:d7:79:f7:63:fd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 29 11:44:02 2024 GMT Not After : Oct 28 11:49:02 2025 GMT Subject: CN=8B2907B61B249AB617190AE11169705ABA96F0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:83:38:9e:23:aa:e5:93:24:7d:c1:fb:a3: d6:cc:b2:45:b3:e3:15:2c:63:a5:e8:0c:70:5f:a1: d4:63:78:ee:74:84:10:5a:47:66:3f:94:c8:27:ff: 24:6a:59:02:93:42:4f:75:56:15:a1:69:46:c3:4d: 85:a8:2f:e1:92:11:0d:d5:2b:fa:a3:68:4a:f9:0f: 2e:20:7d:a9:3e:f4:ea:da:ca:6a:61:1c:c5:b1:10: fe:66:6f:aa:5e:a0:4f:3f:bd:8a:df:fb:a8:e5:a6: 6d:98:11:98:df:ce:a9:0b:9d:e3:93:7c:55:52:23: 77:e4:49:82:f7:55:a1:58:4b:aa:07:1b:98:dd:be: 6a:08:c3:f4:cb:2c:e2:9b:43:47:53:ac:74:16:2e: 41:2d:6c:6a:c0:33:09:87:fa:e1:c6:af:8f:7e:39: 7f:67:13:2d:b1:8c:71:32:c0:f4:40:89:aa:ed:19: 79:d2:7d:40:d2:cb:10:4e:d8:d6:b6:01:d0:c0:5e: 79:da:ab:05:91:da:92:86:9c:6b:79:30:97:56:b2: 2a:97:98:58:ac:f3:19:b7:f9:a5:1f:e1:d9:c0:f2: ac:e2:bb:14:75:75:3c:24:48:00:77:7d:f1:9a:1e: 54:6a:a6:31:04:a4:a5:45:e4:ac:24:8b:74:e6:8c: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:29:07:B6:1B:24:9A:B6:17:19:0A:E1:11:69:70:5A:BA:96:F0:E1 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS7203.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.124.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:7d:06:02:39:18:41:03:21:b2:4d:8f:27:c4:9d:4d:d5:74: 42:53:24:41:5d:c6:94:86:e7:22:19:5c:85:de:b8:ff:11:45: d0:c1:24:3c:ff:10:a1:c2:dd:f0:0a:f1:95:d4:15:32:65:df: d5:1d:ed:81:1e:61:67:98:e1:bb:3e:4a:1c:e8:d5:ae:a8:c6: ea:3b:2f:48:9e:f4:8d:54:34:27:72:b7:c1:5e:04:86:3a:1e: bb:01:4d:7c:09:70:4d:0c:ee:15:66:2f:48:e5:b1:2d:44:c6: 72:cd:84:47:7a:00:e9:c7:81:05:78:2b:20:62:0d:a8:65:af: 5a:c8:bb:41:6f:4c:9f:ea:fb:f0:86:d3:8a:5a:84:db:f8:1a: 47:1e:4f:0b:e5:ac:0f:5c:0e:6a:48:53:d0:65:ab:e1:40:e8: 5a:0b:75:09:9c:6b:56:c1:0b:cd:15:97:6f:10:22:72:7e:bb: d0:4e:c5:df:f8:be:5a:fc:fd:d1:07:6f:05:84:b5:35:a0:89: af:29:fe:72:d5:a8:45:cb:c1:ee:20:8b:7e:e4:60:ca:00:fa: 47:df:e8:08:7f:94:eb:80:76:d3:f9:66:23:e1:fc:38:42:b9: 6b:17:7c:8e:fa:fb:7f:a5:2b:3f:5d:f2:93:d0:3c:ac:1e:88: 0c:2a:72:c3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgIUYgzhzzP3HH1LIz+Glu/Xefdj/Q8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjQxMDI5MTE0NDAyWhcNMjUxMDI4MTE0OTAy WjAzMTEwLwYDVQQDEyg4QjI5MDdCNjFCMjQ5QUI2MTcxOTBBRTExMTY5NzA1QUJB OTZGMEUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdKDOJ4jquWT JH3B+6PWzLJFs+MVLGOl6AxwX6HUY3judIQQWkdmP5TIJ/8kalkCk0JPdVYVoWlG w02FqC/hkhEN1Sv6o2hK+Q8uIH2pPvTq2spqYRzFsRD+Zm+qXqBPP72K3/uo5aZt mBGY386pC53jk3xVUiN35EmC91WhWEuqBxuY3b5qCMP0yyzim0NHU6x0Fi5BLWxq wDMJh/rhxq+Pfjl/ZxMtsYxxMsD0QImq7Rl50n1A0ssQTtjWtgHQwF552qsFkdqS hpxreTCXVrIql5hYrPMZt/mlH+HZwPKs4rsUdXU8JEgAd33xmh5UaqYxBKSlReSs JIt05oyQGQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFIspB7YbJJq2FxkK4RFpcFq6 lvDhMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzcyMDMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo6nwwDQYJKoZIhvcNAQELBQADggEB AB99BgI5GEEDIbJNjyfEnU3VdEJTJEFdxpSG5yIZXIXeuP8RRdDBJDz/EKHC3fAK 8ZXUFTJl39Ud7YEeYWeY4bs+Shzo1a6oxuo7L0ie9I1UNCdyt8FeBIY6HrsBTXwJ cE0M7hVmL0jlsS1ExnLNhEd6AOnHgQV4KyBiDahlr1rIu0FvTJ/q+/CG04pahNv4 GkceTwvlrA9cDmpIU9Blq+FA6FoLdQmca1bBC80Vl28QInJ+u9BOxd/4vlr8/dEH bwWEtTWgia8p/nLVqEXLwe4gi37kYMoA+kff6Ah/lOuAdtP5ZiPh/DhCuWsXfI76 +3+lKz9d8pPQPKweiAwqcsM= -----END CERTIFICATE-----Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org