$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214209.roa File: AS214209.roa (raw, json) Hash identifier: aDQ3y5JgTL4ujVrT37ZFWnfbBFKZIPSXtJkX+wkpEuo= Subject key identifier: 23:45:C0:9A:D8:70:AA:CB:4C:16:D9:B5:9B:BC:BF:AF:6B:29:C3:DD Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2DE235EC313C6F6B36C5F3A33377E150E1EF7583 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214209.roa Signing time: Thu 14 Nov 2024 19:13:53 +0000 ROA not before: Thu 14 Nov 2024 19:08:53 +0000 ROA not after: Thu 13 Nov 2025 19:13:53 +0000 asID: 214209 IP address blocks: 157.254.34.0/24 maxlen: 24 157.254.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 05:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e2:35:ec:31:3c:6f:6b:36:c5:f3:a3:33:77:e1:50:e1:ef:75:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Nov 14 19:08:53 2024 GMT Not After : Nov 13 19:13:53 2025 GMT Subject: CN=2345C09AD870AACB4C16D9B59BBCBFAF6B29C3DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:df:d2:6c:32:c0:3d:58:c5:08:54:62:ce: c9:59:84:92:6b:53:ce:f9:26:91:c6:2b:34:19:b0: 45:e8:a6:3a:96:6d:31:f4:a0:84:bd:81:d4:76:ef: 8d:42:71:70:9a:8b:d1:aa:4d:9c:c4:d8:af:69:58: 8c:82:a8:a1:10:f2:b3:f1:17:ae:85:5e:9e:c7:a5: 61:6b:87:0a:a2:39:cd:0d:15:3b:7d:3c:5e:19:35: 37:f8:b5:c0:be:f3:5c:85:1d:2e:76:46:63:27:92: 13:a3:94:55:bb:8d:8a:aa:3b:52:57:bb:62:99:dc: 81:be:c4:a5:ed:81:da:8e:2a:0d:77:4d:56:ff:13: 88:16:85:8b:50:d2:86:53:46:c2:8a:72:73:bf:77: ed:36:7f:71:ae:f5:aa:05:cb:19:b2:6a:3d:3c:45: 48:68:da:0b:ed:ed:ae:a6:f8:5b:ed:30:26:06:44: fd:90:93:06:6e:34:d3:21:fe:c0:fc:23:1f:ce:0b: c9:cf:5d:9a:12:dd:a7:20:ba:12:5a:31:39:95:76: 8e:83:7b:ba:e0:58:83:ab:44:ef:c3:df:1d:8a:02: 4c:1a:59:73:11:79:77:5f:92:8e:3b:41:96:5b:8d: 12:41:9d:b4:83:b6:ef:b3:cd:3f:7b:7b:dc:37:16: 4a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:45:C0:9A:D8:70:AA:CB:4C:16:D9:B5:9B:BC:BF:AF:6B:29:C3:DD X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS214209.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.34.0/23 Signature Algorithm: sha256WithRSAEncryption 44:eb:04:d9:43:4e:66:9c:37:ba:7d:e0:22:4a:b2:ce:e7:0f: 32:00:ce:af:d2:75:41:37:31:01:cc:7b:7d:16:c1:3b:ee:8a: 24:40:8c:2e:1c:c8:0c:5c:2f:8b:c1:79:cc:4d:f1:ca:b1:cc: 94:bc:6d:64:a1:62:41:0e:d6:28:6f:f3:b7:86:52:74:de:84: 52:11:d3:f8:36:9e:b8:ce:4b:68:36:3e:b8:66:85:7f:4a:b8: da:53:7b:16:78:d0:fa:8f:1b:78:77:de:9f:b8:cc:65:06:3f: 66:94:6c:56:3b:c0:e2:98:d7:e2:cd:58:12:18:a6:58:1b:ad: b0:6c:42:42:40:5a:52:08:2f:5d:f4:a2:fc:84:9f:7d:bc:75: f4:f9:6d:75:ae:fc:d5:02:47:e9:3b:df:c4:37:20:de:9c:78: 0a:cd:51:77:d4:2b:2b:6e:ac:1d:a9:df:1b:3a:9f:40:ca:16: f9:5e:1c:09:7c:9c:5a:b5:a4:ef:c2:68:9b:89:32:2a:d0:67: 09:d8:01:45:ea:87:cb:98:7c:20:85:17:81:f7:a3:fd:de:5c: d3:c2:08:58:e4:8b:1b:86:fb:79:a4:87:81:8d:e9:07:3e:b6: b6:32:f0:bc:11:34:3c:4a:98:33:3a:bb:09:91:37:b5:05:ca: 8f:71:ff:8b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIULeI17DE8b2s2xfOjM3fhUOHvdYMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMTE0MTkwODUzWhcNMjUxMTEzMTkxMzUz WjAzMTEwLwYDVQQDEygyMzQ1QzA5QUQ4NzBBQUNCNEMxNkQ5QjU5QkJDQkZBRjZC MjlDM0REMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3Tf0mwywD1Y xQhUYs7JWYSSa1PO+SaRxis0GbBF6KY6lm0x9KCEvYHUdu+NQnFwmovRqk2cxNiv aViMgqihEPKz8ReuhV6ex6Vha4cKojnNDRU7fTxeGTU3+LXAvvNchR0udkZjJ5IT o5RVu42KqjtSV7timdyBvsSl7YHajioNd01W/xOIFoWLUNKGU0bCinJzv3ftNn9x rvWqBcsZsmo9PEVIaNoL7e2upvhb7TAmBkT9kJMGbjTTIf7A/CMfzgvJz12aEt2n ILoSWjE5lXaOg3u64FiDq0Tvw98digJMGllzEXl3X5KOO0GWW40SQZ20g7bvs80/ e3vcNxZKjQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCNFwJrYcKrLTBbZtZu8v69r KcPdMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIxNDIwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+IjANBgkqhkiG9w0BAQsFAAOC AQEAROsE2UNOZpw3un3gIkqyzucPMgDOr9J1QTcxAcx7fRbBO+6KJECMLhzIDFwv i8F5zE3xyrHMlLxtZKFiQQ7WKG/zt4ZSdN6EUhHT+DaeuM5LaDY+uGaFf0q42lN7 FnjQ+o8beHfen7jMZQY/ZpRsVjvA4pjX4s1YEhimWButsGxCQkBaUggvXfSi/ISf fbx19Pltda781QJH6TvfxDcg3px4Cs1Rd9QrK26sHanfGzqfQMoW+V4cCXycWrWk 78Jom4kyKtBnCdgBReqHy5h8IIUXgfej/d5c08IIWOSLG4b7eaSHgY3pBz62tjLw vBE0PEqYMzq7CZE3tQXKj3H/iw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org