$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS174.roa File: AS174.roa (raw, json) Hash identifier: olOiNLKHjlY0lrNw0MtXqiLP89fHgLmP+QKOBslFi5k= Subject key identifier: 79:2D:0B:73:7B:A0:DB:5E:C9:1B:81:E9:91:44:7B:51:E9:C7:A4:46 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 4A66373656474ACBC530519C7DBE80A6D3C7492D Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS174.roa Signing time: Mon 10 Feb 2025 00:00:26 +0000 ROA not before: Sun 09 Feb 2025 23:55:26 +0000 ROA not after: Mon 09 Feb 2026 00:00:26 +0000 asID: 174 IP address blocks: 157.254.128.0/22 maxlen: 24 157.254.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 00:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:66:37:36:56:47:4a:cb:c5:30:51:9c:7d:be:80:a6:d3:c7:49:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Feb 9 23:55:26 2025 GMT Not After : Feb 9 00:00:26 2026 GMT Subject: CN=792D0B737BA0DB5EC91B81E991447B51E9C7A446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:52:8c:8d:35:ce:75:a8:10:7e:86:6e:ed:6c: 5b:dd:5d:9d:ed:81:f8:9d:30:ad:1b:28:8d:2f:5b: 4a:8b:97:1d:dc:9b:16:5b:f8:c7:6e:56:63:0c:a5: e0:24:cd:f3:0e:34:66:86:00:24:ea:6d:79:77:63: 0e:c4:d4:b9:d8:8b:be:68:7d:c8:cf:61:80:b6:d4: 4f:d8:45:24:4e:b0:c3:21:dc:9a:8e:8a:e8:6c:b6: ae:cf:82:d6:76:3e:23:17:30:77:02:6c:12:5b:0e: 53:20:8e:1b:3a:fe:cb:22:e2:30:5b:66:14:9f:41: 41:38:42:93:00:2c:31:ae:60:78:d6:ad:3b:60:39: 04:35:0d:40:43:2d:9e:c2:ad:b1:bd:7a:38:8f:90: 10:cb:6c:22:52:02:b7:16:9e:b2:d9:c9:f0:f3:cb: 73:36:8e:2a:6a:c0:ef:f0:87:f5:03:05:e5:f1:ce: 50:4e:6c:ce:2d:01:3a:67:28:5a:37:c0:b9:42:19: 79:5c:d6:de:c7:ea:07:02:3d:09:ac:dc:56:12:a7: bc:c3:8b:9d:49:89:89:71:9c:cd:d6:6c:df:eb:64: bd:62:93:52:91:03:86:8f:98:a0:bd:5e:85:18:bf: d2:6d:9b:f1:37:7d:1c:5c:26:d9:e8:dd:16:e0:4d: 49:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:0B:73:7B:A0:DB:5E:C9:1B:81:E9:91:44:7B:51:E9:C7:A4:46 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS174.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.128.0/22 157.254.184.0/22 Signature Algorithm: sha256WithRSAEncryption 44:83:aa:68:11:71:99:9f:29:34:72:a4:0b:07:fd:d9:1b:e0: b7:7b:1e:40:63:9e:cb:73:97:66:15:69:1d:7e:8d:1b:c4:5a: f8:e8:5c:17:90:dc:01:ea:bc:17:90:7d:af:52:70:f7:a3:d0: c9:84:05:ab:60:0d:a2:c7:4b:ef:28:41:9e:57:b6:3c:cc:81: 10:63:9d:b8:1e:58:4b:c7:8d:bc:0d:c5:17:7d:51:79:dc:43: 13:23:96:92:e0:1e:81:43:b2:25:f0:36:55:be:39:72:01:f3: c0:b0:21:6b:4d:2a:87:51:76:7a:dc:4e:29:27:03:ee:70:45: f7:43:09:f4:38:cb:6e:e3:7c:7f:62:2a:5e:ab:df:70:ff:78: fc:2e:4e:1b:01:04:ef:3f:1e:22:a0:0d:30:2e:19:ba:14:82: 2f:7e:36:ea:8e:66:d9:ac:91:84:a6:d0:a0:92:cc:7e:e1:e8: 04:c7:9e:30:be:54:bc:48:82:49:2e:fd:d5:a7:dc:9b:99:d8: a8:ea:2c:b1:43:31:cd:fb:19:5d:33:f3:c1:e4:96:47:02:21: 46:af:4a:94:be:6a:8d:98:56:d2:f6:8b:29:c9:a3:5c:16:40: 17:bb:ca:a5:38:39:35:9e:02:4c:a8:84:16:5e:70:cb:19:60: 1f:5d:e2:a2 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIUSmY3NlZHSsvFMFGcfb6AptPHSS0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMjA5MjM1NTI2WhcNMjYwMjA5MDAwMDI2 WjAzMTEwLwYDVQQDEyg3OTJEMEI3MzdCQTBEQjVFQzkxQjgxRTk5MTQ0N0I1MUU5 QzdBNDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVKMjTXOdagQ foZu7Wxb3V2d7YH4nTCtGyiNL1tKi5cd3JsWW/jHblZjDKXgJM3zDjRmhgAk6m15 d2MOxNS52Iu+aH3Iz2GAttRP2EUkTrDDIdyajorobLauz4LWdj4jFzB3AmwSWw5T II4bOv7LIuIwW2YUn0FBOEKTACwxrmB41q07YDkENQ1AQy2ewq2xvXo4j5AQy2wi UgK3Fp6y2cnw88tzNo4qasDv8If1AwXl8c5QTmzOLQE6ZyhaN8C5Qhl5XNbex+oH Aj0JrNxWEqe8w4udSYmJcZzN1mzf62S9YpNSkQOGj5igvV6FGL/SbZvxN30cXCbZ 6N0W4E1JPQIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFHktC3N7oNteyRuB6ZFEe1Hp x6RGMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE3NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAlBggr BgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAp3+gAMEAp3+uDANBgkqhkiG9w0BAQsF AAOCAQEARIOqaBFxmZ8pNHKkCwf92Rvgt3seQGOey3OXZhVpHX6NG8Ra+OhcF5Dc Aeq8F5B9r1Jw96PQyYQFq2ANosdL7yhBnle2PMyBEGOduB5YS8eNvA3FF31RedxD EyOWkuAegUOyJfA2Vb45cgHzwLAha00qh1F2etxOKScD7nBF90MJ9DjLbuN8f2Iq XqvfcP94/C5OGwEE7z8eIqANMC4ZuhSCL3426o5m2ayRhKbQoJLMfuHoBMeeML5U vEiCSS791afcm5nYqOossUMxzfsZXTPzweSWRwIhRq9KlL5qjZhW0vaLKcmjXBZA F7vKpTg5NZ4CTKiEFl5wyxlgH13iog== -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:06 2025 by rpki-client