$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa File: AS400958.roa (raw, json) Hash identifier: 9j2rZ/QUc5Zahsbf/BcrAQ8T8bmfU2PaLw7nzLekghI= Subject key identifier: CB:A1:13:DD:FB:6F:BC:2D:97:3A:59:09:3D:B9:36:B2:33:C5:32:00 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 2C615FCAF17910690762C070880B9BA86E30DF5B Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa Signing time: Mon 08 Apr 2024 15:18:42 +0000 ROA not before: Mon 08 Apr 2024 15:13:42 +0000 ROA not after: Mon 07 Apr 2025 15:18:42 +0000 asID: 400958 IP address blocks: 157.254.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 06:11:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:61:5f:ca:f1:79:10:69:07:62:c0:70:88:0b:9b:a8:6e:30:df:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Apr 8 15:13:42 2024 GMT Not After : Apr 7 15:18:42 2025 GMT Subject: CN=CBA113DDFB6FBC2D973A59093DB936B233C53200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6f:cd:a1:e1:45:96:52:71:72:53:e1:34:cd: f1:b4:f1:4c:69:3e:a5:9d:0d:cb:3b:21:13:5f:28: 4f:2c:94:56:ef:f5:9d:c1:79:51:11:31:00:fe:df: 82:66:1e:a0:fb:ea:71:46:f2:33:59:ab:39:ba:e0: 54:8e:d2:a4:e7:2e:4f:93:66:89:98:35:f0:23:ca: eb:b3:b1:46:45:7b:24:ec:da:d4:99:0c:20:e1:a8: c7:77:0b:1a:7e:54:5b:ab:9f:88:8d:2c:55:bf:16: e7:28:15:5f:18:ce:3b:d8:22:04:09:d5:c0:e8:b9: 89:24:42:56:50:e4:ee:44:99:1a:4e:2f:82:72:e7: 1e:3f:0a:a7:29:12:83:c5:69:1e:99:f3:95:3b:07: bf:d1:2c:69:0f:5f:d2:e8:00:5a:87:6d:5f:d2:6e: 57:24:3e:36:86:0a:49:29:48:ac:c8:1c:ef:84:67: 00:9a:aa:5d:59:49:04:03:b5:97:c1:0b:10:ba:08: bb:08:53:45:8a:6a:10:73:cb:41:3f:24:ea:4a:8a: cf:4c:02:e8:e4:fc:6d:93:1b:d1:07:5c:50:84:cf: 10:17:d9:b3:53:4d:ce:65:5b:fb:a3:13:05:23:55: 4e:c7:4d:b3:91:d1:75:d1:44:fc:ea:b7:8b:c2:9e: a8:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A1:13:DD:FB:6F:BC:2D:97:3A:59:09:3D:B9:36:B2:33:C5:32:00 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS400958.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.171.0/24 Signature Algorithm: sha256WithRSAEncryption 69:4b:43:ed:d0:90:6b:92:76:aa:c6:9f:1b:75:bc:52:8f:a2: 4a:35:88:34:97:d8:77:cf:98:ae:e8:04:bd:a1:93:39:99:12: 19:5e:16:66:4f:70:42:47:25:86:2c:47:70:49:38:da:40:09: b6:69:3b:69:b0:ef:a1:ac:a2:cb:a5:9e:0b:4a:a0:22:ef:66: ba:2e:ce:e3:cf:cd:ba:4a:36:18:75:6d:4c:fe:63:f5:0c:7e: 0d:3f:bf:a0:89:b9:2c:d3:c8:6f:95:93:de:5e:a2:f0:13:20: 6c:f7:ff:c3:1c:9a:0a:ee:ec:3a:8c:22:12:18:f9:c3:30:d2: c6:b4:b7:0a:43:97:46:3a:59:06:ad:d8:e2:8e:12:a9:fe:20: 1f:a7:5c:64:2d:03:f3:9f:1a:c5:79:b5:b1:9e:5e:77:b1:8e: 61:6d:f4:fd:80:b0:dc:67:a5:65:7e:86:c4:41:85:76:5b:5b: 6a:90:76:32:7c:ab:2d:23:f8:21:3e:01:76:f3:3b:c8:78:1f: 78:36:aa:50:45:4e:cc:cb:ac:e1:1a:24:5b:6b:6b:50:65:53: 73:06:1e:1c:75:bc:b0:19:31:69:f8:2d:95:04:a2:b9:fa:60: 6e:c3:65:36:49:e0:08:21:ee:66:5c:02:d2:7f:d8:b2:8a:bd: af:7d:2d:b2 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIULGFfyvF5EGkHYsBwiAubqG4w31swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjQwNDA4MTUxMzQyWhcNMjUwNDA3MTUxODQy WjAzMTEwLwYDVQQDEyhDQkExMTNEREZCNkZCQzJEOTczQTU5MDkzREI5MzZCMjMz QzUzMjAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2/NoeFFllJx clPhNM3xtPFMaT6lnQ3LOyETXyhPLJRW7/WdwXlRETEA/t+CZh6g++pxRvIzWas5 uuBUjtKk5y5Pk2aJmDXwI8rrs7FGRXsk7NrUmQwg4ajHdwsaflRbq5+IjSxVvxbn KBVfGM472CIECdXA6LmJJEJWUOTuRJkaTi+CcucePwqnKRKDxWkemfOVOwe/0Sxp D1/S6ABah21f0m5XJD42hgpJKUisyBzvhGcAmqpdWUkEA7WXwQsQugi7CFNFimoQ c8tBPyTqSorPTALo5PxtkxvRB1xQhM8QF9mzU03OZVv7oxMFI1VOx02zkdF10UT8 6reLwp6oFwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMuhE937b7wtlzpZCT25NrIz xTIAMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzQwMDk1OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+qzANBgkqhkiG9w0BAQsFAAOC AQEAaUtD7dCQa5J2qsafG3W8Uo+iSjWINJfYd8+YrugEvaGTOZkSGV4WZk9wQkcl hixHcEk42kAJtmk7abDvoayiy6WeC0qgIu9mui7O48/Nuko2GHVtTP5j9Qx+DT+/ oIm5LNPIb5WT3l6i8BMgbPf/wxyaCu7sOowiEhj5wzDSxrS3CkOXRjpZBq3Y4o4S qf4gH6dcZC0D858axXm1sZ5ed7GOYW30/YCw3GelZX6GxEGFdltbapB2MnyrLSP4 IT4BdvM7yHgfeDaqUEVOzMus4RokW2trUGVTcwYeHHW8sBkxafgtlQSiufpgbsNl NkngCCHuZlwC0n/Ysoq9r30tsg== -----END CERTIFICATE-----Generated at Mon Nov 25 06:04:01 2024 by rpki-client on console-ams.rpki-client.org