$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400298.roa File: AS400298.roa (raw, json) Hash identifier: isGjAhPYycfQTWJCdPmsCWqNNaYGuZlRM68MwfyxXE0= Subject key identifier: 8A:A1:62:84:FA:31:F7:7A:74:2A:B4:78:52:7E:CC:CD:5C:55:55:0B Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 798C98F545A48E4C97B2D628281F581C9C1AAA01 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400298.roa Signing time: Sun 02 Feb 2025 03:03:50 +0000 ROA not before: Sun 02 Feb 2025 02:58:50 +0000 ROA not after: Sun 01 Feb 2026 03:03:50 +0000 asID: 400298 IP address blocks: 157.254.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:8c:98:f5:45:a4:8e:4c:97:b2:d6:28:28:1f:58:1c:9c:1a:aa:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Feb 2 02:58:50 2025 GMT Not After : Feb 1 03:03:50 2026 GMT Subject: CN=8AA16284FA31F77A742AB478527ECCCD5C55550B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:d9:7b:9a:02:ec:f7:ac:d5:36:b8:fa:f5: 0b:83:14:fd:2b:e1:3d:07:26:d3:4e:64:bc:2e:90: 19:9a:0d:24:4f:98:49:0e:be:d7:b1:2a:3e:2c:4d: 07:d6:42:13:0b:2f:b3:2c:1b:42:73:fa:0e:0a:51: 9b:9c:db:07:45:4d:fc:26:4c:76:60:9f:33:04:c9: f7:39:52:5d:0f:91:53:01:02:d5:bf:e1:f0:d7:69: b1:2a:66:d1:5c:1a:ff:0e:ce:f3:94:79:19:db:2b: 15:8a:b8:a5:ba:61:8f:a4:62:92:44:01:53:e6:43: 4f:3d:b7:ff:6b:dd:3b:3a:13:49:90:4d:2f:22:da: 74:02:9b:fb:e4:1e:09:9a:db:15:ee:e5:99:85:9b: 94:da:ae:14:9a:98:7b:dc:3c:83:c2:5d:66:37:fe: cb:ad:aa:20:bd:ac:c2:29:86:08:94:3a:1a:f4:ce: 6a:d8:c6:7b:8c:2f:e8:a0:af:05:46:95:e1:b2:32: 71:88:a3:5f:1c:b8:42:2b:5c:38:74:ac:ec:78:18: 4b:64:c0:f2:20:c8:95:18:82:f7:dc:ff:66:33:66: b2:46:e7:ef:62:80:da:4f:8c:b8:1d:64:8a:98:22: e5:b2:2d:c1:10:29:29:09:a7:9b:3a:6a:58:83:55: 9d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A1:62:84:FA:31:F7:7A:74:2A:B4:78:52:7E:CC:CD:5C:55:55:0B X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.224.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:92:f7:21:3e:dc:c6:28:ae:10:39:8b:7c:0c:bb:d1:c9:cc: 38:0d:c1:0c:aa:90:6b:42:8c:98:dd:d1:78:50:a9:6f:77:ea: 9f:5d:73:6a:af:47:c3:ee:62:49:66:1d:e5:b2:33:97:dd:82: 9f:14:b7:f2:ac:bb:2a:f1:85:ed:c1:14:f1:82:6c:bb:78:9d: da:4f:17:cf:ff:1f:e5:ec:4b:d2:00:76:0a:66:5f:78:38:1b: 36:37:f5:ba:a4:53:af:27:17:f1:1f:1b:82:18:07:9e:9b:0e: a6:95:a3:f2:b7:86:45:28:d1:92:0a:7b:c2:73:1a:70:01:ce: 82:08:4b:f5:40:02:44:e2:5b:9c:a2:29:57:f0:d6:f5:3c:6b: 74:41:9d:a2:e3:39:37:85:33:1c:50:f4:5f:9e:7c:0e:a8:8a: 33:48:d5:d2:a0:35:1f:93:63:8b:b9:08:54:f1:be:e0:37:dd: 21:f0:ae:b0:26:0b:c8:b6:c0:62:a7:97:c9:ca:15:7a:51:24: 6f:75:0b:ef:c7:df:21:6c:b8:b9:77:6a:a2:dc:cd:4e:95:b1: 01:1a:eb:94:13:48:c2:35:ce:59:1c:49:ad:ec:01:47:6f:3f: 9e:f9:4c:bd:38:6d:ef:b9:e8:54:a1:14:e1:54:db:7c:04:ea: 43:26:1f:b5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUeYyY9UWkjkyXstYoKB9YHJwaqgEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMjAyMDI1ODUwWhcNMjYwMjAxMDMwMzUw WjAzMTEwLwYDVQQDEyg4QUExNjI4NEZBMzFGNzdBNzQyQUI0Nzg1MjdFQ0NDRDVD NTU1NTBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRrZe5oC7Pes 1Ta4+vULgxT9K+E9BybTTmS8LpAZmg0kT5hJDr7XsSo+LE0H1kITCy+zLBtCc/oO ClGbnNsHRU38Jkx2YJ8zBMn3OVJdD5FTAQLVv+Hw12mxKmbRXBr/Ds7zlHkZ2ysV irilumGPpGKSRAFT5kNPPbf/a907OhNJkE0vItp0Apv75B4JmtsV7uWZhZuU2q4U mph73DyDwl1mN/7LraogvazCKYYIlDoa9M5q2MZ7jC/ooK8FRpXhsjJxiKNfHLhC K1w4dKzseBhLZMDyIMiVGIL33P9mM2ayRufvYoDaT4y4HWSKmCLlsi3BECkpCaeb OmpYg1WdYwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIqhYoT6Mfd6dCq0eFJ+zM1c VVULMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMDI5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+4DANBgkqhkiG9w0BAQsFAAOC AQEATZL3IT7cxiiuEDmLfAy70cnMOA3BDKqQa0KMmN3ReFCpb3fqn11zaq9Hw+5i SWYd5bIzl92CnxS38qy7KvGF7cEU8YJsu3id2k8Xz/8f5exL0gB2CmZfeDgbNjf1 uqRTrycX8R8bghgHnpsOppWj8reGRSjRkgp7wnMacAHOgghL9UACROJbnKIpV/DW 9TxrdEGdouM5N4UzHFD0X558DqiKM0jV0qA1H5Nji7kIVPG+4DfdIfCusCYLyLbA YqeXycoVelEkb3UL78ffIWy4uXdqotzNTpWxARrrlBNIwjXOWRxJrewBR28/nvlM vTht77noVKEU4VTbfATqQyYftQ== -----END CERTIFICATE-----Generated at Sat Apr 5 10:53:33 2025 by rpki-client