$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: MLGtOHLgmW7EG18h1lR2QQ3Jy1bsR0iu4BNVKzXNTz4= Subject key identifier: 13:CB:12:E2:34:88:89:A2:2F:2B:84:56:8C:21:51:B5:01:63:D6:96 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 4A1C52D27993D420CC75020DDD927EEE9295A424 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400909.roa Signing time: Sat 28 Dec 2024 00:28:23 +0000 ROA not before: Sat 28 Dec 2024 00:23:23 +0000 ROA not after: Sat 27 Dec 2025 00:28:23 +0000 asID: 400909 IP address blocks: 157.254.160.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 09:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:1c:52:d2:79:93:d4:20:cc:75:02:0d:dd:92:7e:ee:92:95:a4:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Dec 28 00:23:23 2024 GMT Not After : Dec 27 00:28:23 2025 GMT Subject: CN=13CB12E2348889A22F2B84568C2151B50163D696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:04:73:42:65:e4:64:7a:3f:70:95:fe:1a:37: ce:a9:82:e4:dd:ec:72:e6:33:20:ea:87:3f:d9:ba: ad:0d:e2:c6:c0:75:b3:04:7e:f9:0e:de:1f:f9:f1: 1d:93:24:a1:a5:10:f7:f6:24:b5:7b:f0:df:73:04: 8f:00:56:f4:44:4d:38:e0:4a:3d:49:73:2d:e3:00: a8:1d:36:80:5d:1e:c4:7d:7c:09:58:19:8a:fa:dd: a2:46:eb:9f:04:22:ee:9e:65:d0:5d:d4:16:dd:0f: ae:21:6f:42:2c:78:be:1b:50:10:42:b4:7e:08:b5: 1c:c1:c2:d6:ac:f0:3a:27:a6:5f:14:39:ef:d6:f3: 89:b9:53:3f:1c:d6:4b:8b:a7:c4:63:13:bb:a4:32: 95:92:54:ad:6e:ab:2a:9e:40:b6:02:db:c2:3d:36: 17:ce:ae:5a:fc:8d:cc:db:c7:d5:65:9b:92:c1:7a: 5d:ca:21:86:33:8e:1b:14:f1:e8:a1:1b:34:01:82: d8:3e:98:75:18:f6:a0:f3:66:1a:bf:05:76:6b:c7: 78:8a:4b:5a:73:98:47:0e:00:a4:10:61:5e:f7:0f: 26:cb:29:b1:05:70:ea:8a:b2:4e:b1:ba:0d:65:b1: 70:14:d7:70:8f:b9:35:64:02:9f:26:11:cf:32:ff: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:CB:12:E2:34:88:89:A2:2F:2B:84:56:8C:21:51:B5:01:63:D6:96 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.160.0/23 Signature Algorithm: sha256WithRSAEncryption b9:23:72:d4:d9:86:cd:f8:7a:31:77:49:ba:b5:3b:e6:e6:87: 0a:c2:f0:bd:48:3d:f6:48:04:46:62:ad:ef:5c:42:c7:ec:6a: e5:5d:46:5f:59:cd:eb:b6:8d:e8:b4:ff:aa:76:47:9d:29:26: 81:0f:5e:26:79:e4:ca:e6:f8:bf:87:d1:8e:4a:57:c7:c6:9e: 32:b2:fb:4b:aa:96:48:83:64:d4:10:ab:83:cd:95:1f:d0:42: 2c:11:c3:be:15:49:48:f1:0a:20:1c:c1:1a:d1:94:87:ec:5d: e1:b1:2d:05:c8:93:8d:96:f3:95:c2:a2:e4:24:e0:01:0e:6b: a6:7f:1a:89:b4:f6:e6:6b:f1:76:00:86:e1:96:ea:0b:cc:9d: f1:5a:ff:10:40:05:ab:bf:3d:cb:a7:ba:a8:12:7e:81:e7:11: 35:35:8a:1a:f0:7a:6f:60:87:ff:74:de:b7:a6:d4:da:dd:24: e7:99:2d:28:eb:38:b2:24:db:c4:e5:78:ea:b1:b1:68:49:2c: e5:cd:f2:13:6e:19:d2:cf:6d:b3:71:c8:91:59:bd:6f:c1:ed: dd:90:fd:34:46:5c:0f:53:53:35:be:d7:9c:73:fc:96:06:b3: 42:3f:a7:de:5e:0c:d4:d0:a1:f9:44:43:d0:c6:0a:2b:d4:2c: ba:38:55:9c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUShxS0nmT1CDMdQIN3ZJ+7pKVpCQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQxMjI4MDAyMzIzWhcNMjUxMjI3MDAyODIz WjAzMTEwLwYDVQQDEygxM0NCMTJFMjM0ODg4OUEyMkYyQjg0NTY4QzIxNTFCNTAx NjNENjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQRzQmXkZHo/ cJX+GjfOqYLk3exy5jMg6oc/2bqtDeLGwHWzBH75Dt4f+fEdkyShpRD39iS1e/Df cwSPAFb0RE044Eo9SXMt4wCoHTaAXR7EfXwJWBmK+t2iRuufBCLunmXQXdQW3Q+u IW9CLHi+G1AQQrR+CLUcwcLWrPA6J6ZfFDnv1vOJuVM/HNZLi6fEYxO7pDKVklSt bqsqnkC2AtvCPTYXzq5a/I3M28fVZZuSwXpdyiGGM44bFPHooRs0AYLYPph1GPag 82YavwV2a8d4iktac5hHDgCkEGFe9w8myymxBXDqirJOsboNZbFwFNdwj7k1ZAKf JhHPMv+YAQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBPLEuI0iImiLyuEVowhUbUB Y9aWMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZ3+oDANBgkqhkiG9w0BAQsFAAOC AQEAuSNy1NmGzfh6MXdJurU75uaHCsLwvUg99kgERmKt71xCx+xq5V1GX1nN67aN 6LT/qnZHnSkmgQ9eJnnkyub4v4fRjkpXx8aeMrL7S6qWSINk1BCrg82VH9BCLBHD vhVJSPEKIBzBGtGUh+xd4bEtBciTjZbzlcKi5CTgAQ5rpn8aibT25mvxdgCG4Zbq C8yd8Vr/EEAFq789y6e6qBJ+gecRNTWKGvB6b2CH/3Tet6bU2t0k55ktKOs4siTb xOV46rGxaEks5c3yE24Z0s9ts3HIkVm9b8Ht3ZD9NEZcD1NTNb7XnHP8lgazQj+n 3l4M1NCh+URD0MYKK9QsujhVnA== -----END CERTIFICATE-----Generated at Sat Apr 5 12:14:45 2025 by rpki-client