$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa File: AS400866.roa (raw, json) Hash identifier: qO1HxX3T1f62n3EAOIY2xCfDovb50PjuHKRNWUc9c9Y= Subject key identifier: FA:CC:75:9A:92:C7:2D:82:9A:E3:4C:45:6A:65:41:1E:4D:2E:B4:76 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 2FAEBB2706EC758C68A6E34B1259B377B0114D99 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa Signing time: Thu 19 Sep 2024 00:01:57 +0000 ROA not before: Wed 18 Sep 2024 23:56:57 +0000 ROA not after: Thu 18 Sep 2025 00:01:57 +0000 asID: 400866 IP address blocks: 23.95.177.0/24 maxlen: 24 104.168.31.0/24 maxlen: 24 107.172.149.0/24 maxlen: 24 198.46.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 01:34:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:ae:bb:27:06:ec:75:8c:68:a6:e3:4b:12:59:b3:77:b0:11:4d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Sep 18 23:56:57 2024 GMT Not After : Sep 18 00:01:57 2025 GMT Subject: CN=FACC759A92C72D829AE34C456A65411E4D2EB476 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:16:4d:d8:14:dd:0d:42:b0:f1:d0:8f:58: e1:6f:cd:94:7e:ac:bb:f9:02:ee:b2:05:19:56:37: 4d:a1:94:b9:74:e5:54:75:d9:d8:a7:cd:c9:a4:48: 11:8e:f7:2a:60:44:00:f7:c7:34:34:07:bc:2b:20: 0f:9a:5a:02:ad:25:57:7c:8d:35:fc:d7:48:05:55: d6:e3:76:ca:c5:71:83:6c:7a:ac:77:cd:5c:51:86: 4a:82:de:6d:9f:44:88:f8:81:0d:62:1a:40:e3:11: 41:05:71:2c:14:ac:ce:14:ac:d0:19:06:cb:2c:82: 5a:96:9a:c0:80:29:01:df:a6:18:9c:ad:7d:22:0a: ec:64:58:6a:f7:0d:56:c5:2a:e4:ed:23:e3:de:ab: 0b:2c:1b:1b:39:68:2c:6f:03:c5:ce:08:02:a1:19: 9e:55:72:89:02:a6:d5:c7:8f:c0:30:13:1f:62:79: 3f:bd:87:e5:34:04:df:f5:9e:b9:eb:33:b6:07:fe: cd:c2:c6:cd:14:26:5a:d8:ca:e1:63:84:fd:1f:86: fe:96:12:b8:d9:6a:bb:ea:f0:a0:09:f0:dc:77:64: fb:e5:df:13:a5:6b:bf:64:f5:0b:a3:ce:18:1f:55: 70:65:ec:90:1e:10:11:98:78:02:87:6d:45:d6:cc: b1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CC:75:9A:92:C7:2D:82:9A:E3:4C:45:6A:65:41:1E:4D:2E:B4:76 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS400866.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.95.177.0/24 104.168.31.0/24 107.172.149.0/24 198.46.247.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:bb:a6:9e:74:f0:61:9d:7f:38:3a:24:d8:95:d2:5d:80:d7: c1:e2:0e:7f:41:0e:9c:06:a1:3a:86:98:43:08:b1:15:9f:a3: ee:72:e0:7d:04:18:1d:62:05:57:53:89:3c:39:ea:15:75:42: ed:66:55:5f:84:73:e4:a7:3c:b8:5d:ed:5f:7e:00:1b:27:2e: 8a:35:02:6c:f8:97:74:9d:06:86:62:63:a5:18:d1:33:33:84: 0f:3f:05:ee:fe:af:35:d0:d6:99:67:a4:f0:14:0e:b3:33:59: 17:14:2e:af:1f:f5:9f:19:f5:c4:77:9f:fc:fe:3c:79:f1:15: 26:03:98:85:14:3f:99:58:c3:87:85:03:fe:46:da:db:b9:f7: fd:05:2c:7d:66:e6:39:56:6c:c3:7c:a5:b2:41:d1:16:0f:52: 58:76:2e:53:32:af:0e:ee:1c:eb:3a:41:39:ee:5c:52:34:a0: 0f:bc:bb:68:6e:22:f8:f5:80:4c:ab:9d:52:8b:2d:99:87:7f: 78:1e:d3:ac:1c:fa:39:d8:0d:ce:d6:ec:6a:f4:58:b8:01:41: 23:db:ee:5f:6a:40:dd:c1:92:0f:9e:31:11:ca:12:1f:75:66: d5:0f:37:90:31:f9:37:95:19:18:cf:9c:db:0e:98:cf:b8:ff: 80:ac:6b:3e -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUL667JwbsdYxopuNLElmzd7ARTZkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjQwOTE4MjM1NjU3WhcNMjUwOTE4MDAwMTU3 WjAzMTEwLwYDVQQDEyhGQUNDNzU5QTkyQzcyRDgyOUFFMzRDNDU2QTY1NDExRTRE MkVCNDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwkWTdgU3Q1C sPHQj1jhb82Ufqy7+QLusgUZVjdNoZS5dOVUddnYp83JpEgRjvcqYEQA98c0NAe8 KyAPmloCrSVXfI01/NdIBVXW43bKxXGDbHqsd81cUYZKgt5tn0SI+IENYhpA4xFB BXEsFKzOFKzQGQbLLIJalprAgCkB36YYnK19IgrsZFhq9w1WxSrk7SPj3qsLLBsb OWgsbwPFzggCoRmeVXKJAqbVx4/AMBMfYnk/vYflNATf9Z656zO2B/7NwsbNFCZa 2MrhY4T9H4b+lhK42Wq76vCgCfDcd2T75d8TpWu/ZPULo84YH1VwZeyQHhARmHgC h21F1syxewIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFPrMdZqSxy2CmuNMRWplQR5N LrR2MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzQwMDg2Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEABdfsQMEAGioHwMEAGuslQMEAMYu 9zANBgkqhkiG9w0BAQsFAAOCAQEAe7umnnTwYZ1/ODok2JXSXYDXweIOf0EOnAah OoaYQwixFZ+j7nLgfQQYHWIFV1OJPDnqFXVC7WZVX4Rz5Kc8uF3tX34AGycuijUC bPiXdJ0GhmJjpRjRMzOEDz8F7v6vNdDWmWek8BQOszNZFxQurx/1nxn1xHef/P48 efEVJgOYhRQ/mVjDh4UD/kba27n3/QUsfWbmOVZsw3ylskHRFg9SWHYuUzKvDu4c 6zpBOe5cUjSgD7y7aG4i+PWATKudUostmYd/eB7TrBz6OdgNztbsavRYuAFBI9vu X2pA3cGSD54xEcoSH3Vm1Q83kDH5N5UZGM+c2w6Yz7j/gKxrPg== -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:28 2024 by rpki-client on console-fra.rpki-client.org