$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: t73lceRw4yAR1Unrk0T7gZQwvsa2QE6LEGhmBcibhws= Subject key identifier: 64:FE:B8:92:93:6A:5F:06:1F:D0:E8:A8:29:E3:80:3B:1A:C2:79:D8 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 77D92779E080A26025FB02D826A8328C1DAE964A Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS23470.roa Signing time: Tue 21 Jan 2025 16:35:03 +0000 ROA not before: Tue 21 Jan 2025 16:30:03 +0000 ROA not after: Tue 20 Jan 2026 16:35:03 +0000 asID: 23470 IP address blocks: 157.254.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:d9:27:79:e0:80:a2:60:25:fb:02:d8:26:a8:32:8c:1d:ae:96:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 21 16:30:03 2025 GMT Not After : Jan 20 16:35:03 2026 GMT Subject: CN=64FEB892936A5F061FD0E8A829E3803B1AC279D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a4:72:7d:7f:ea:df:86:01:ee:4f:56:70:32: 3b:fb:68:14:ec:2b:a0:44:a3:df:db:52:f9:fa:92: dd:94:c6:ca:93:8e:db:af:52:c2:8b:e4:e2:71:4d: f7:6b:81:bc:61:f3:b1:bc:b6:f9:31:f1:79:73:43: 23:22:37:a8:07:d9:c3:df:4d:06:6e:be:8d:af:55: 17:c8:46:c1:5c:40:4b:a6:7c:bb:a3:53:d3:ac:7f: 6d:19:1d:16:dc:bb:91:95:94:87:38:99:23:f4:f5: f4:d5:fd:d7:18:ba:80:ae:c5:87:17:10:72:40:3d: 93:83:0a:f8:a8:ea:42:60:91:95:30:ea:44:08:d6: b5:32:f0:b0:a9:2e:0d:d0:35:36:48:25:d3:1b:20: 08:9a:60:28:96:45:26:d4:23:18:5b:ab:cd:b7:6b: 22:67:a6:25:eb:d6:0c:d4:28:65:0b:e9:94:45:09: 93:60:5e:26:99:66:1e:dc:a7:01:63:fa:09:52:a5: 5b:ed:de:9e:76:3d:7a:2f:e7:da:e5:f2:0d:61:05: 03:2d:31:60:65:da:03:3d:68:15:41:7b:1f:56:b0: 47:a0:6c:e4:b3:9a:9b:d1:d2:fd:65:21:66:a7:2b: 16:1c:6c:cd:00:70:58:e1:2c:10:d9:ed:42:0c:24: 87:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FE:B8:92:93:6A:5F:06:1F:D0:E8:A8:29:E3:80:3B:1A:C2:79:D8 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.153.0/24 Signature Algorithm: sha256WithRSAEncryption 65:26:88:4e:39:35:74:be:f6:6c:80:18:67:68:6a:d5:95:b5: a0:82:a0:5e:5a:a4:ac:21:05:e9:b3:d9:a4:83:f0:f9:68:82: ac:cb:32:de:40:50:40:1c:a7:e7:77:b5:c6:ca:d8:fd:ec:63: 92:1e:4f:41:0e:08:13:74:65:91:91:58:03:6c:28:53:2d:10: 0b:d3:45:86:1d:94:00:cf:b1:ed:32:ba:b2:d5:ed:4d:ea:35: 81:c9:74:a3:11:2e:10:26:f1:4c:cc:9f:41:7b:25:07:c0:ce: a4:5c:e8:c8:4d:7a:69:3a:83:6a:bf:b1:1d:0f:61:38:01:37: 5a:4e:72:64:03:e2:4d:66:47:c1:72:bb:82:c6:46:46:dd:02: 2d:96:d6:9a:f7:6e:e5:72:58:68:66:e9:47:c9:b2:c2:2d:5e: 60:fd:76:50:eb:a1:fd:a2:14:bc:79:51:94:81:dc:df:b3:e5: 27:40:54:41:71:4f:14:0b:58:f4:ee:61:54:9c:3a:9a:84:f4: ae:04:21:1e:30:df:91:0c:56:ec:40:d0:90:22:07:e4:00:72: 90:39:f1:af:91:5f:bf:4f:c7:9c:d6:61:15:d2:fb:ab:d7:54: d2:d4:4a:cb:f6:68:81:fd:49:46:f2:ee:c0:a0:f6:fb:0f:5e: d7:79:45:cf -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUd9kneeCAomAl+wLYJqgyjB2ulkowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTIxMTYzMDAzWhcNMjYwMTIwMTYzNTAz WjAzMTEwLwYDVQQDEyg2NEZFQjg5MjkzNkE1RjA2MUZEMEU4QTgyOUUzODAzQjFB QzI3OUQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6RyfX/q34YB 7k9WcDI7+2gU7CugRKPf21L5+pLdlMbKk47br1LCi+TicU33a4G8YfOxvLb5MfF5 c0MjIjeoB9nD300Gbr6Nr1UXyEbBXEBLpny7o1PTrH9tGR0W3LuRlZSHOJkj9PX0 1f3XGLqArsWHFxByQD2Tgwr4qOpCYJGVMOpECNa1MvCwqS4N0DU2SCXTGyAImmAo lkUm1CMYW6vNt2siZ6Yl69YM1ChlC+mURQmTYF4mmWYe3KcBY/oJUqVb7d6edj16 L+fa5fINYQUDLTFgZdoDPWgVQXsfVrBHoGzks5qb0dL9ZSFmpysWHGzNAHBY4SwQ 2e1CDCSHWQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFGT+uJKTal8GH9DoqCnjgDsa wnnYMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf6ZMA0GCSqGSIb3DQEBCwUAA4IB AQBlJohOOTV0vvZsgBhnaGrVlbWggqBeWqSsIQXps9mkg/D5aIKsyzLeQFBAHKfn d7XGytj97GOSHk9BDggTdGWRkVgDbChTLRAL00WGHZQAz7HtMrqy1e1N6jWByXSj ES4QJvFMzJ9BeyUHwM6kXOjITXppOoNqv7EdD2E4ATdaTnJkA+JNZkfBcruCxkZG 3QItltaa927lclhoZulHybLCLV5g/XZQ66H9ohS8eVGUgdzfs+UnQFRBcU8UC1j0 7mFUnDqahPSuBCEeMN+RDFbsQNCQIgfkAHKQOfGvkV+/T8ec1mEV0vur11TS1ErL 9miB/UlG8u7AoPb7D17XeUXP -----END CERTIFICATE-----Generated at Sat Apr 5 10:55:43 2025 by rpki-client