$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa File: AS21696.roa (raw, json) Hash identifier: 09Q+Vcjd/yQ6FZ216vY6fjxrjKVyq5/qxTkAeFRBRrA= Subject key identifier: 8B:D4:34:84:31:2B:99:E9:93:22:DC:64:36:6E:B9:96:7B:BE:14:19 Certificate issuer: /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77 Certificate serial: 2FC4064BD2127EE340F811C0089D8FBB5A521197 Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa Signing time: Thu 22 Feb 2024 05:15:14 +0000 ROA not before: Thu 22 Feb 2024 05:10:14 +0000 ROA not after: Thu 20 Feb 2025 05:15:14 +0000 asID: 21696 IP address blocks: 172.108.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 20:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c4:06:4b:d2:12:7e:e3:40:f8:11:c0:08:9d:8f:bb:5a:52:11:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77 Validity Not Before: Feb 22 05:10:14 2024 GMT Not After : Feb 20 05:15:14 2025 GMT Subject: CN=8BD43484312B99E99322DC64366EB9967BBE1419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:57:87:de:a9:f8:5b:5e:4c:13:73:da:8b:69: 8c:de:d0:b7:36:59:61:20:9b:9d:5b:43:27:b4:dc: eb:04:54:fa:5d:2f:29:39:05:cb:8b:0e:34:f2:c4: 86:ad:74:b3:cf:8a:80:38:cb:d5:52:26:9e:ff:fa: e3:65:6b:d7:00:de:1c:85:80:b7:f2:00:70:66:f9: 25:bb:67:c1:f0:06:78:50:72:f8:6d:3c:ed:d0:1d: 3e:91:7a:a6:8e:dd:4a:ed:79:48:9f:b6:4a:e7:e7: a3:4c:83:7a:a5:18:92:9c:23:64:02:93:60:4d:5d: 14:43:2c:d3:eb:c3:3a:e8:a1:c8:f1:d8:27:8c:c0: 82:df:dc:0b:5d:f2:8d:dc:e4:f6:5b:a1:13:ad:6a: e4:4e:d1:23:a0:a5:86:27:a2:0f:bc:0d:c6:ca:26: c9:3c:0f:ed:c7:ed:a4:0e:b9:61:25:f7:ac:b3:39: 1a:c2:85:fd:e1:49:34:48:8e:a1:3a:79:1f:b1:13: 6c:22:e7:79:23:7b:35:ef:b5:ab:81:ff:f4:f7:e3: 07:3e:5c:c6:68:20:b4:ad:50:e4:66:3d:22:b9:44: e0:43:dd:4a:ef:d4:a1:04:69:60:99:71:96:a6:2c: a0:74:38:bb:f9:24:25:2c:01:0f:42:f6:5f:34:44: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D4:34:84:31:2B:99:E9:93:22:DC:64:36:6E:B9:96:7B:BE:14:19 X509v3 Authority Key Identifier: keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS21696.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.108.139.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ea:32:78:d2:b9:34:ee:82:c3:9a:21:fc:b6:7f:65:cd:84: 98:e6:cb:b9:22:33:f0:99:43:41:ef:82:61:de:b1:4d:92:93: 33:97:cd:81:e0:39:80:82:14:72:f5:a3:e5:0b:70:76:15:e4: 1b:30:38:ec:d2:aa:29:07:13:4f:28:25:5a:3f:fb:b5:b9:6d: c9:c1:be:d4:15:47:31:d2:b7:10:82:d5:a1:2d:a9:3b:37:41: 81:fd:21:0f:b9:c5:18:b1:8a:ad:3b:7e:66:df:34:dd:34:20: dc:71:60:07:41:50:6e:4a:91:d3:e7:22:ed:38:c1:96:ad:b4: b8:18:20:e4:18:2d:5c:d6:39:ee:92:a4:75:a9:6f:53:1a:09: 60:a5:55:2e:0d:63:a1:24:5e:fa:67:26:45:03:99:80:7c:88: ef:07:17:25:68:d9:c3:5d:65:fa:d1:30:43:fb:75:56:6d:a8: e5:4e:e3:d9:c5:86:d0:b0:05:1e:18:fc:df:85:23:8f:4f:42: 66:e4:b3:8c:ec:d1:29:02:c0:eb:de:25:cc:3a:73:17:8d:3c: 66:15:c5:7f:40:19:48:1e:53:2d:d8:5d:24:a0:8f:d0:dc:d0: 6f:37:e9:0f:dc:e2:72:b8:7b:8d:3e:2b:d9:ff:36:ca:5c:aa: cd:db:56:36 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUL8QGS9ISfuNA+BHACJ2Pu1pSEZcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjQwMjIyMDUxMDE0WhcNMjUwMjIwMDUxNTE0 WjAzMTEwLwYDVQQDEyg4QkQ0MzQ4NDMxMkI5OUU5OTMyMkRDNjQzNjZFQjk5NjdC QkUxNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VeH3qn4W15M E3Pai2mM3tC3NllhIJudW0MntNzrBFT6XS8pOQXLiw408sSGrXSzz4qAOMvVUiae //rjZWvXAN4chYC38gBwZvklu2fB8AZ4UHL4bTzt0B0+kXqmjt1K7XlIn7ZK5+ej TIN6pRiSnCNkApNgTV0UQyzT68M66KHI8dgnjMCC39wLXfKN3OT2W6ETrWrkTtEj oKWGJ6IPvA3GyibJPA/tx+2kDrlhJfesszkawoX94Uk0SI6hOnkfsRNsIud5I3s1 77Wrgf/09+MHPlzGaCC0rVDkZj0iuUTgQ91K79ShBGlgmXGWpiygdDi7+SQlLAEP QvZfNERnmQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIvUNIQxK5npkyLcZDZuuZZ7 vhQZMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy ZjA5N2YvMi9BUzIxNjk2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGyLMA0GCSqGSIb3DQEBCwUAA4IB AQBX6jJ40rk07oLDmiH8tn9lzYSY5su5IjPwmUNB74Jh3rFNkpMzl82B4DmAghRy 9aPlC3B2FeQbMDjs0qopBxNPKCVaP/u1uW3Jwb7UFUcx0rcQgtWhLak7N0GB/SEP ucUYsYqtO35m3zTdNCDccWAHQVBuSpHT5yLtOMGWrbS4GCDkGC1c1jnukqR1qW9T GglgpVUuDWOhJF76ZyZFA5mAfIjvBxclaNnDXWX60TBD+3VWbajlTuPZxYbQsAUe GPzfhSOPT0Jm5LOM7NEpAsDr3iXMOnMXjTxmFcV/QBlIHlMt2F0koI/Q3NBvN+kP 3OJyuHuNPivZ/zbKXKrN21Y2 -----END CERTIFICATE-----Generated at Fri Nov 22 19:43:47 2024 by rpki-client on console-fra.rpki-client.org