$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137409.roa File: AS137409.roa (raw, json) Hash identifier: WYxoBHEjIayzsPVOj1YnZKoMBesiWlq29s5maNG/IR4= Subject key identifier: F3:CD:08:07:B9:2B:B2:CD:56:1D:DB:0A:ED:05:FF:85:34:99:7B:68 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 25DAF09AF32A61BE0CA2715C951B182D1E1EF508 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137409.roa Signing time: Wed 21 Feb 2024 09:01:14 +0000 ROA not before: Wed 21 Feb 2024 08:56:14 +0000 ROA not after: Wed 19 Feb 2025 09:01:14 +0000 asID: 137409 IP address blocks: 67.210.124.0/23 maxlen: 24 67.210.124.0/24 maxlen: 24 67.210.125.0/24 maxlen: 24 74.50.10.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 02 May 2024 02:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:da:f0:9a:f3:2a:61:be:0c:a2:71:5c:95:1b:18:2d:1e:1e:f5:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Feb 21 08:56:14 2024 GMT Not After : Feb 19 09:01:14 2025 GMT Subject: CN=F3CD0807B92BB2CD561DDB0AED05FF8534997B68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6f:d1:84:d3:02:68:cc:4f:45:ab:4b:82:b1: 7c:82:7b:1c:68:00:18:c6:6b:cd:37:0e:b4:80:81: f1:39:e1:9e:67:5f:9d:d4:b1:31:06:01:99:3a:8c: 8b:62:7c:d8:01:5c:8a:24:86:7b:0e:d8:28:17:5d: 51:7c:7c:46:eb:a1:69:16:be:3b:25:e0:09:37:e0: 0d:18:a1:06:58:01:fa:88:c2:a2:fb:b3:cb:c5:ba: 9f:95:3d:5b:40:9a:71:50:82:79:e3:19:7b:34:32: af:41:73:b7:d2:3c:1b:6c:fb:7d:2b:60:2c:71:07: 86:7a:f6:7c:fe:ca:f4:d0:25:0d:44:16:92:08:8e: 56:90:a6:44:53:90:9c:7c:9e:61:2b:44:30:c5:18: 62:98:bf:3a:08:3f:15:78:89:1f:1f:22:f4:bb:79: 6f:f0:4c:a2:54:8e:46:81:91:9b:37:13:fb:4a:62: 6f:61:db:c8:30:72:fd:58:f3:e9:5d:8f:fa:69:3f: 1d:e0:4d:95:66:95:ea:3d:88:64:fb:0b:ec:e8:53: 1f:73:8c:5f:e5:b2:cf:5a:17:d7:bb:c8:3c:f0:16: 82:be:f5:a8:6e:60:55:e9:45:a2:e1:29:b1:53:05: 1e:3a:94:d5:a5:cc:f9:09:ba:2f:24:a7:8f:e3:7a: 29:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:08:07:B9:2B:B2:CD:56:1D:DB:0A:ED:05:FF:85:34:99:7B:68 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137409.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 67.210.124.0/23 74.50.10.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:a9:66:8b:16:ef:bf:e0:96:dd:d5:a1:e0:bf:1e:28:cc:56: c6:80:e5:26:69:0a:19:9b:18:08:bf:c7:87:dd:93:65:ef:a3: dd:49:87:9d:0b:38:12:76:31:5e:1c:fb:31:f1:fa:0b:6f:98: 2e:8e:de:fd:f8:1f:bd:74:71:d9:c6:b0:5c:20:6e:71:41:fa: ac:c2:d9:ca:da:f0:1c:59:57:d7:62:f0:f7:b0:d4:6c:30:f3: 0b:31:f8:25:03:56:d9:9c:b3:8e:25:de:bd:b8:c7:a0:ff:65: b0:3a:4a:74:1e:68:90:2d:c4:b8:61:2a:81:02:d4:8e:86:b7: 00:ae:bb:38:8d:0b:bf:39:08:b3:06:79:54:0d:7b:6f:74:fe: c5:78:91:6f:3d:ae:92:9e:c3:a8:aa:26:61:77:3a:cd:8d:76: 87:dd:1b:5d:04:f3:89:b5:79:21:5f:f5:c2:0c:21:72:45:99: f4:aa:b1:c9:cd:0c:bf:55:df:b3:87:21:bb:e8:64:41:d5:b9: 52:ef:28:0a:b4:5a:3a:23:1b:52:66:70:57:87:c1:99:f5:c0: ca:d8:c7:a3:20:01:35:69:96:10:5b:a3:56:33:a1:1a:55:7e: 11:2c:44:99:8a:88:b2:a5:8e:f8:5b:0d:61:27:c0:e0:f9:31: d6:fd:0d:eb -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUJdrwmvMqYb4MonFclRsYLR4e9QgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwMjIxMDg1NjE0WhcNMjUwMjE5MDkwMTE0 WjAzMTEwLwYDVQQDEyhGM0NEMDgwN0I5MkJCMkNENTYxRERCMEFFRDA1RkY4NTM0 OTk3QjY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm/RhNMCaMxP RatLgrF8gnscaAAYxmvNNw60gIHxOeGeZ1+d1LExBgGZOoyLYnzYAVyKJIZ7Dtgo F11RfHxG66FpFr47JeAJN+ANGKEGWAH6iMKi+7PLxbqflT1bQJpxUIJ54xl7NDKv QXO30jwbbPt9K2AscQeGevZ8/sr00CUNRBaSCI5WkKZEU5CcfJ5hK0QwxRhimL86 CD8VeIkfHyL0u3lv8EyiVI5GgZGbNxP7SmJvYdvIMHL9WPPpXY/6aT8d4E2VZpXq PYhk+wvs6FMfc4xf5bLPWhfXu8g88BaCvvWobmBV6UWi4SmxUwUeOpTVpcz5Cbov JKeP43oplwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFPPNCAe5K7LNVh3bCu0F/4U0 mXtoMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzEzNzQwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAUPSfAMEAUoyCjANBgkqhkiG9w0B AQsFAAOCAQEAOqlmixbvv+CW3dWh4L8eKMxWxoDlJmkKGZsYCL/Hh92TZe+j3UmH nQs4EnYxXhz7MfH6C2+YLo7e/fgfvXRx2cawXCBucUH6rMLZytrwHFlX12Lw97DU bDDzCzH4JQNW2ZyzjiXevbjHoP9lsDpKdB5okC3EuGEqgQLUjoa3AK67OI0LvzkI swZ5VA17b3T+xXiRbz2ukp7DqKomYXc6zY12h90bXQTzibV5IV/1wgwhckWZ9Kqx yc0Mv1Xfs4chu+hkQdW5Uu8oCrRaOiMbUmZwV4fBmfXAytjHoyABNWmWEFujVjOh GlV+ESxEmYqIsqWO+FsNYSfA4Pkx1v0N6w== -----END CERTIFICATE-----Generated at Wed May 1 00:35:08 2024 by rpki-client on console-ams.rpki-client.org