$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: NDpOBQK9EmuXwKHdBgwd0LtxuRhjQHrqRyJpIiyalxo= Subject key identifier: 60:88:C5:1F:B0:1A:83:01:CD:01:74:5B:3B:4C:22:F7:DC:60:42:98 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 27CD8E4D0EC3DFDF93137BA946332E2FD27065D0 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23470.roa Signing time: Sat 05 Oct 2024 21:20:38 +0000 ROA not before: Sat 05 Oct 2024 21:15:38 +0000 ROA not after: Sat 04 Oct 2025 21:20:38 +0000 asID: 23470 IP address blocks: 23.94.126.0/24 maxlen: 24 23.95.126.0/24 maxlen: 24 23.95.162.0/24 maxlen: 24 23.95.180.0/24 maxlen: 24 198.12.100.0/24 maxlen: 24 198.23.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 22:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:cd:8e:4d:0e:c3:df:df:93:13:7b:a9:46:33:2e:2f:d2:70:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 5 21:15:38 2024 GMT Not After : Oct 4 21:20:38 2025 GMT Subject: CN=6088C51FB01A8301CD01745B3B4C22F7DC604298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:be:17:85:a5:27:39:fb:0c:17:a5:6a:85:62: 1a:34:17:c4:df:fe:f1:21:bb:81:c4:ef:50:67:5c: a6:26:25:fc:07:11:d6:22:25:a1:30:fa:6b:41:ed: da:67:56:2e:89:0e:e8:59:f0:80:b6:80:f4:c3:90: db:cc:e2:91:a4:a9:d1:91:bd:c8:59:34:b8:11:53: 39:f1:7c:a3:d4:cc:67:10:24:36:66:2c:85:e7:f1: fe:a4:b3:7e:ff:96:50:f4:50:5c:68:bd:db:e8:6a: 2b:a9:36:12:7a:eb:10:d6:b5:c2:48:f7:0e:49:54: 9e:04:c5:21:9c:7c:cf:a3:88:a6:1a:44:08:51:76: 9c:19:a5:5c:2e:39:cd:92:cf:2e:a1:3f:a0:f5:c0: 03:65:5c:fe:fb:05:e3:bc:38:e3:2e:88:b7:26:2d: 99:95:ec:0e:eb:6a:60:ed:4f:c8:bd:1d:46:af:bf: 58:66:34:d9:61:1d:ad:8e:2e:29:a3:b5:a8:58:ea: f0:90:5c:ca:1e:df:63:f8:f9:de:57:39:18:e7:9b: 19:93:d3:b8:58:b2:94:02:53:32:e8:51:76:87:27: c4:43:10:07:aa:a4:69:16:19:35:f5:02:1a:86:52: 36:06:b8:a3:ff:b6:56:70:5d:f1:52:80:85:37:6c: 8a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:88:C5:1F:B0:1A:83:01:CD:01:74:5B:3B:4C:22:F7:DC:60:42:98 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.126.0/24 23.95.126.0/24 23.95.162.0/24 23.95.180.0/24 198.12.100.0/24 198.23.184.0/24 Signature Algorithm: sha256WithRSAEncryption ae:ba:23:f9:1a:e3:21:03:79:ca:56:3d:fb:a0:ac:7c:5f:3f: c3:bb:07:2d:8c:4d:47:5d:cb:42:c4:c2:46:c4:bf:d4:30:d7: a4:1c:a9:b9:ac:ea:7b:3f:ef:e5:bb:d3:b3:a1:b8:bc:88:b3: d4:45:bc:20:ff:b6:1d:1f:9b:40:75:9b:0f:45:fc:c7:d7:9e: 3e:4f:a3:0b:67:d6:a0:81:e4:c4:9e:01:44:d5:d5:06:3f:b5: dd:a2:12:19:a4:1e:65:69:3d:3c:92:81:ef:64:a6:a9:72:d2: 25:a3:1e:6e:88:dd:b7:be:8f:08:3c:35:d7:81:5d:71:24:77: 3a:89:cb:14:7d:59:e1:c1:f4:20:c7:c6:7e:36:ae:ec:ea:c7: bf:0b:08:28:a1:73:05:c8:f6:98:9e:f3:f6:be:33:c8:5e:fc: f8:5e:62:60:71:c3:ff:75:26:02:a7:9c:d4:d5:10:30:d0:86: df:27:59:80:c2:3b:bb:aa:ec:6f:35:b9:ef:d1:62:49:9d:44: 75:3e:8d:71:2c:41:2b:66:0f:a1:3f:58:6c:0b:19:e4:90:ff: 6d:57:e3:fc:ad:95:80:06:c7:a4:5d:b6:3e:19:b1:ea:ae:3e: 2e:dc:ff:e6:30:16:0e:70:c9:d2:96:ab:d5:c7:09:aa:67:da: d6:b1:e1:3a -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUJ82OTQ7D39+TE3upRjMuL9JwZdAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQxMDA1MjExNTM4WhcNMjUxMDA0MjEyMDM4 WjAzMTEwLwYDVQQDEyg2MDg4QzUxRkIwMUE4MzAxQ0QwMTc0NUIzQjRDMjJGN0RD NjA0Mjk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL4XhaUnOfsM F6VqhWIaNBfE3/7xIbuBxO9QZ1ymJiX8BxHWIiWhMPprQe3aZ1YuiQ7oWfCAtoD0 w5DbzOKRpKnRkb3IWTS4EVM58Xyj1MxnECQ2ZiyF5/H+pLN+/5ZQ9FBcaL3b6Gor qTYSeusQ1rXCSPcOSVSeBMUhnHzPo4imGkQIUXacGaVcLjnNks8uoT+g9cADZVz+ +wXjvDjjLoi3Ji2ZlewO62pg7U/IvR1Gr79YZjTZYR2tji4po7WoWOrwkFzKHt9j +PneVzkY55sZk9O4WLKUAlMy6FF2hyfEQxAHqqRpFhk19QIahlI2Brij/7ZWcF3x UoCFN2yKGQIDAQABo4ICnDCCApgwHQYDVR0OBBYEFGCIxR+wGoMBzQF0WztMIvfc YEKYMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAF15+AwQAF19+AwQAF1+iAwQAF1+0 AwQAxgxkAwQAxhe4MA0GCSqGSIb3DQEBCwUAA4IBAQCuuiP5GuMhA3nKVj37oKx8 Xz/DuwctjE1HXctCxMJGxL/UMNekHKm5rOp7P+/lu9Ozobi8iLPURbwg/7YdH5tA dZsPRfzH154+T6MLZ9aggeTEngFE1dUGP7XdohIZpB5laT08koHvZKapctIlox5u iN23vo8IPDXXgV1xJHc6icsUfVnhwfQgx8Z+Nq7s6se/CwgooXMFyPaYnvP2vjPI Xvz4XmJgccP/dSYCp5zU1RAw0IbfJ1mAwju7quxvNbnv0WJJnUR1Po1xLEErZg+h P1hsCxnkkP9tV+P8rZWABsekXbY+GbHqrj4u3P/mMBYOcMnSlqvVxwmqZ9rWseE6 -----END CERTIFICATE-----Generated at Sun Nov 24 20:09:39 2024 by rpki-client on console-ams.rpki-client.org