$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS1239.roa File: AS1239.roa (raw, json) Hash identifier: wxFHaRWv4D2H3nxIJu9/XG73LGyeisnU+HZwtD9NWvU= Subject key identifier: 2A:03:FC:CF:83:60:06:E3:02:CB:5B:29:F6:65:3E:9E:15:CA:51:84 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 243C79D50EB247EE0503B9729EA46EF2A6E6C97E Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS1239.roa Signing time: Thu 09 Mar 2023 00:00:10 +0000 ROA not before: Wed 08 Mar 2023 23:55:10 +0000 ROA not after: Thu 07 Mar 2024 00:00:10 +0000 asID: 1239 IP address blocks: 192.228.112.0/20 maxlen: 24 216.97.228.0/23 maxlen: 24 216.227.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Mar 2023 09:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:3c:79:d5:0e:b2:47:ee:05:03:b9:72:9e:a4:6e:f2:a6:e6:c9:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Mar 8 23:55:10 2023 GMT Not After : Mar 7 00:00:10 2024 GMT Subject: CN=2A03FCCF836006E302CB5B29F6653E9E15CA5184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9c:1d:63:dd:54:ed:29:db:f9:b9:bd:40:90: a2:1a:c4:54:2a:44:28:a4:ae:cf:fc:68:ee:5e:79: 08:40:e5:a7:39:fc:94:62:ee:c6:66:bd:95:9a:82: 93:29:9f:92:ef:f9:50:d7:f5:aa:b5:37:71:d4:e1: b7:c2:48:41:e5:89:69:37:35:ec:f7:e7:63:7c:5c: ea:92:79:88:b0:99:1e:00:ab:27:32:5e:a8:38:e5: 93:56:63:0e:62:0d:f0:e6:f6:e0:b3:fa:d3:46:ae: ff:d0:95:28:89:2b:b4:18:3c:64:6b:86:2c:c1:f8: 6e:5f:8e:7f:2d:a5:cb:6c:e0:28:50:54:88:c1:98: 6c:a5:5a:2b:20:ed:de:50:c9:be:6b:49:d0:56:22: 5a:ca:5c:d8:65:fe:2d:d4:78:89:e0:aa:1b:9d:ad: ea:34:da:89:a4:be:48:1f:df:c0:29:8b:85:2f:de: e8:f2:3b:ef:d6:04:70:db:f1:c9:b3:10:79:60:ac: 77:33:de:b2:5d:f9:18:d2:82:f6:0b:35:8f:7e:fa: a7:28:29:4e:3e:97:e5:3f:c9:24:42:4c:7f:34:99: cf:37:31:5e:de:29:5f:50:93:cb:bc:91:87:6f:1c: 56:d6:7c:38:86:c4:26:f2:f8:e4:dc:e8:10:45:1f: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:03:FC:CF:83:60:06:E3:02:CB:5B:29:F6:65:3E:9E:15:CA:51:84 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS1239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.228.112.0/20 216.97.228.0/23 216.227.208.0/22 Signature Algorithm: sha256WithRSAEncryption 54:42:8c:6e:15:29:c7:31:2f:10:c5:a0:82:32:62:7a:8e:51: 4e:f2:2b:65:17:ba:92:11:74:72:53:e9:42:21:21:a9:5c:bf: b2:75:92:fb:5f:7f:49:c3:67:ae:d7:51:38:af:aa:64:a2:fc: ed:1c:03:14:49:fa:26:7f:cd:83:e3:ee:04:07:84:a1:25:d2: 2b:65:83:08:2b:e1:98:bb:8e:73:9e:a2:27:db:d9:49:5b:44: 1b:d6:b4:1f:5d:0a:99:58:20:62:35:4f:c7:94:62:e1:8e:3a: 51:39:9d:c3:31:73:cb:9f:d6:b8:5f:7c:79:2c:f2:78:1c:c3: ec:eb:86:a7:b5:7a:8a:f7:a4:82:3a:42:41:1e:37:af:3b:6d: ab:58:a1:06:01:21:14:65:14:01:4d:b7:94:32:4a:e7:93:e3: 9e:37:53:a7:16:f7:69:a3:db:e0:97:77:65:ad:50:a8:c2:c0: cd:2a:08:ec:79:46:16:98:ed:b0:af:38:ab:77:ac:85:88:8d: 70:f1:96:9d:01:7e:58:2e:3b:2a:27:24:b1:37:70:6a:17:18: da:5e:9e:15:34:f0:2e:19:78:6a:3d:0a:e8:46:83:02:d3:ad: 24:43:fc:84:90:3f:3b:0f:98:37:36:4c:5b:2a:d7:e9:04:d4: ee:96:9f:47 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUJDx51Q6yR+4FA7lynqRu8qbmyX4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjMwMzA4MjM1NTEwWhcNMjQwMzA3MDAwMDEw WjAzMTEwLwYDVQQDEygyQTAzRkNDRjgzNjAwNkUzMDJDQjVCMjlGNjY1M0U5RTE1 Q0E1MTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJwdY91U7Snb +bm9QJCiGsRUKkQopK7P/GjuXnkIQOWnOfyUYu7GZr2VmoKTKZ+S7/lQ1/WqtTdx 1OG3wkhB5YlpNzXs9+djfFzqknmIsJkeAKsnMl6oOOWTVmMOYg3w5vbgs/rTRq7/ 0JUoiSu0GDxka4YswfhuX45/LaXLbOAoUFSIwZhspVorIO3eUMm+a0nQViJaylzY Zf4t1HiJ4Kobna3qNNqJpL5IH9/AKYuFL97o8jvv1gRw2/HJsxB5YKx3M96yXfkY 0oL2CzWPfvqnKClOPpflP8kkQkx/NJnPNzFe3ilfUJPLvJGHbxxW1nw4hsQm8vjk 3OgQRR9JoQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFCoD/M+DYAbjAstbKfZlPp4V ylGEMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzEyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBATA5HADBAHYYeQDBALY49AwDQYJKoZI hvcNAQELBQADggEBAFRCjG4VKccxLxDFoIIyYnqOUU7yK2UXupIRdHJT6UIhIalc v7J1kvtff0nDZ67XUTivqmSi/O0cAxRJ+iZ/zYPj7gQHhKEl0itlgwgr4Zi7jnOe oifb2UlbRBvWtB9dCplYIGI1T8eUYuGOOlE5ncMxc8uf1rhffHks8ngcw+zrhqe1 eor3pII6QkEeN687batYoQYBIRRlFAFNt5QySueT4543U6cW92mj2+CXd2WtUKjC wM0qCOx5RhaY7bCvOKt3rIWIjXDxlp0BflguOyonJLE3cGoXGNpenhU08C4ZeGo9 CuhGgwLTrSRD/ISQPzsPmDc2TFsq1+kE1O6Wn0c= -----END CERTIFICATE-----Generated at Wed Mar 15 11:52:14 2023 by rpki-client on console-fra.rpki-client.org