$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10103.roa File: AS10103.roa (raw, json) Hash identifier: CkYM+Xu7/tjg2wgHvgF/Z1CfgDpq64IaRtKxGc3M88M= Subject key identifier: A9:E0:BD:02:A6:BE:1C:E4:79:B6:83:40:D8:CB:72:C0:D2:D9:F7:65 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 5DDABB27E6B5A6105A4EA0403CC77DB91515FD41 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10103.roa Signing time: Thu 02 Jan 2025 08:17:07 +0000 ROA not before: Thu 02 Jan 2025 08:12:07 +0000 ROA not after: Thu 01 Jan 2026 08:17:07 +0000 asID: 10103 IP address blocks: 157.254.34.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Feb 2025 15:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:da:bb:27:e6:b5:a6:10:5a:4e:a0:40:3c:c7:7d:b9:15:15:fd:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 2 08:12:07 2025 GMT Not After : Jan 1 08:17:07 2026 GMT Subject: CN=A9E0BD02A6BE1CE479B68340D8CB72C0D2D9F765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f0:cf:85:ef:85:b4:07:47:72:a7:9b:e3:cd: 51:b7:01:a4:df:db:76:12:b6:71:79:57:76:cf:b0: 4b:07:0d:6b:2c:41:55:1a:6a:da:b2:e7:64:ef:ef: 51:ce:d6:29:ff:53:71:36:e8:b2:20:6f:45:16:75: 59:20:33:f5:a9:f8:30:11:3b:66:f8:91:cd:14:8e: aa:96:f6:b4:b8:19:af:a8:41:8a:63:4d:0d:03:3c: bb:ee:67:1f:92:5c:1f:78:8f:63:f2:e0:2a:04:05: e6:29:7e:11:95:f7:e1:43:3a:ac:78:91:8f:ba:4b: be:7f:bc:40:14:1f:d2:75:83:1e:37:ad:2e:42:fa: 7a:6a:db:ff:24:11:ae:a5:37:dc:22:28:3d:c5:1c: a1:ed:46:e7:5a:ab:42:f2:3c:7c:e4:89:f5:92:c8: 7d:c3:ae:07:15:55:df:57:53:30:80:73:4d:eb:b9: 10:a2:f9:5c:f6:39:1d:66:82:07:14:ab:df:47:81: b9:97:fb:18:8c:42:38:11:3a:8a:1e:0b:f0:53:36: 56:da:6a:d8:cc:9b:18:ce:8f:07:ef:d3:a7:db:41: 9f:52:f3:ca:e4:c0:03:93:f0:d0:67:95:37:e0:3e: e1:10:2b:b1:01:13:95:4e:71:ea:cd:e4:e1:eb:a1: c9:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:BD:02:A6:BE:1C:E4:79:B6:83:40:D8:CB:72:C0:D2:D9:F7:65 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS10103.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.34.0/23 Signature Algorithm: sha256WithRSAEncryption bc:d5:e7:f9:76:86:9c:a7:56:c4:65:dd:91:e6:de:cc:86:d2: a6:27:83:45:a6:1b:33:8d:fb:f8:19:63:cd:28:be:d7:25:61: 0c:b2:d8:c2:0a:87:c5:1f:9b:b8:f6:c9:07:d5:3e:7e:75:4a: 56:f3:9e:ae:65:fd:66:e3:47:f9:7c:c4:a9:ef:43:23:2b:4e: d2:67:f0:97:27:ca:8d:11:7c:42:fd:4f:9e:7f:f5:e9:9a:eb: 7d:f9:6e:29:d5:e1:d1:c6:d5:63:20:a3:cf:f8:70:4d:33:a2: 7d:44:30:26:ad:c0:cf:c7:cb:b9:80:f8:d9:3c:3c:b5:db:75: a0:81:4d:4c:c0:07:36:59:de:6d:aa:eb:45:af:2e:10:cd:2e: 9a:35:14:12:ab:1f:ec:d3:4a:6c:dc:2d:78:f4:e0:39:13:49: 4c:ca:ea:61:de:23:a3:4c:6f:b3:58:ed:61:0a:a1:c8:a6:cc: 52:62:e2:c0:85:45:af:1d:87:b9:a4:a9:fa:85:06:11:d0:5e: e7:1b:c4:29:81:25:ed:91:3f:bd:29:45:43:e3:e4:5d:e1:29: 4b:db:a3:db:98:b4:0b:e5:3a:cc:72:a0:4b:51:97:ed:42:76: ec:38:be:40:32:a5:23:dc:24:67:76:40:ef:cd:f9:73:1f:e4: fc:9d:72:f6 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUXdq7J+a1phBaTqBAPMd9uRUV/UEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTAyMDgxMjA3WhcNMjYwMTAxMDgxNzA3 WjAzMTEwLwYDVQQDEyhBOUUwQkQwMkE2QkUxQ0U0NzlCNjgzNDBEOENCNzJDMEQy RDlGNzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPDPhe+FtAdH cqeb481RtwGk39t2ErZxeVd2z7BLBw1rLEFVGmrasudk7+9RztYp/1NxNuiyIG9F FnVZIDP1qfgwETtm+JHNFI6qlva0uBmvqEGKY00NAzy77mcfklwfeI9j8uAqBAXm KX4RlffhQzqseJGPuku+f7xAFB/SdYMeN60uQvp6atv/JBGupTfcIig9xRyh7Ubn WqtC8jx85In1ksh9w64HFVXfV1MwgHNN67kQovlc9jkdZoIHFKvfR4G5l/sYjEI4 ETqKHgvwUzZW2mrYzJsYzo8H79On20GfUvPK5MADk/DQZ5U34D7hECuxAROVTnHq zeTh66HJnQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFKngvQKmvhzkebaDQNjLcsDS 2fdlMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzEwMTAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnf4iMA0GCSqGSIb3DQEBCwUAA4IB AQC81ef5doacp1bEZd2R5t7MhtKmJ4NFphszjfv4GWPNKL7XJWEMstjCCofFH5u4 9skH1T5+dUpW856uZf1m40f5fMSp70MjK07SZ/CXJ8qNEXxC/U+ef/Xpmut9+W4p 1eHRxtVjIKPP+HBNM6J9RDAmrcDPx8u5gPjZPDy123WggU1MwAc2Wd5tqutFry4Q zS6aNRQSqx/s00ps3C149OA5E0lMyuph3iOjTG+zWO1hCqHIpsxSYuLAhUWvHYe5 pKn6hQYR0F7nG8QpgSXtkT+9KUVD4+Rd4SlL26PbmLQL5TrMcqBLUZftQnbsOL5A MqUj3CRndkDvzflzH+T8nXL2 -----END CERTIFICATE-----Generated at Wed Feb 5 04:53:57 2025 by rpki-client