$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8881.roa File: AS8881.roa (raw, json) Hash identifier: 7SMzln2+KZG+ZeGZs0HQoxKa52hUpxzkfLKWUh5VXVk= Subject key identifier: 29:AF:4B:39:1F:F1:28:43:3D:62:06:6B:BC:77:B1:51:4B:FE:6B:EB Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 3786121CF7EA2F4B7744EA17CE1A437FBBC4AC4B Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8881.roa Signing time: Mon 13 Jan 2025 12:44:45 +0000 ROA not before: Mon 13 Jan 2025 12:39:45 +0000 ROA not after: Mon 12 Jan 2026 12:44:45 +0000 asID: 8881 IP address blocks: 157.254.82.0/23 maxlen: 24 157.254.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Feb 2025 15:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:86:12:1c:f7:ea:2f:4b:77:44:ea:17:ce:1a:43:7f:bb:c4:ac:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jan 13 12:39:45 2025 GMT Not After : Jan 12 12:44:45 2026 GMT Subject: CN=29AF4B391FF128433D62066BBC77B1514BFE6BEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:09:7a:5c:65:08:d5:c7:6f:24:d5:a6:56: c5:18:f4:26:ca:0d:c0:ed:c4:51:6a:32:18:8b:ed: c9:1e:51:b4:05:b4:c0:e9:fd:60:b3:4c:13:3f:65: 17:02:7d:b0:01:a6:aa:09:c2:25:c6:77:3b:8a:1c: ee:04:35:55:66:16:b6:0b:bf:fa:57:57:4d:72:ef: 0e:b5:99:5e:a0:35:3f:75:a8:ff:67:d9:98:6c:cf: 55:1e:d8:43:b3:54:df:1c:e7:52:15:81:4e:b1:07: 8a:2f:0a:2f:87:1a:f0:b1:24:d2:bc:c1:72:c3:4c: 14:9c:f1:8f:0c:16:30:42:5f:60:ac:b5:9b:17:ec: df:46:2b:be:8e:05:54:2e:b0:25:14:14:35:28:8c: 4e:b1:08:96:17:19:f3:ed:6a:a4:eb:90:c4:ca:f8: 74:44:4f:35:2a:0f:e1:15:d3:ca:20:f1:45:17:f6: 6f:52:06:65:57:01:6b:ac:e0:07:43:36:ec:c2:4c: f3:3f:a5:64:db:26:93:99:25:b4:c2:e2:a3:c1:a2: 24:fb:03:2c:88:81:ef:20:ad:d5:fb:89:b2:73:47: a8:3f:98:7f:a6:db:5b:ef:35:c3:52:a6:cf:b6:ef: 53:48:ea:92:1d:d6:46:95:4a:49:23:57:3f:94:91: f0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AF:4B:39:1F:F1:28:43:3D:62:06:6B:BC:77:B1:51:4B:FE:6B:EB X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS8881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.82.0-157.254.85.255 Signature Algorithm: sha256WithRSAEncryption c1:b7:42:be:a4:9d:2d:87:cb:55:b0:bd:f7:43:14:38:ae:0a: 66:86:59:88:41:b8:41:c6:cb:2a:0c:ab:3e:84:e6:a6:e0:0e: 03:a3:7e:35:9b:7f:3f:42:7f:cd:ec:23:9d:2c:06:f2:60:57: 00:ce:16:f3:85:99:4d:6f:79:fa:1b:81:f5:a9:dc:32:dd:bb: f8:39:9e:12:7b:39:cf:c8:8e:cb:65:4e:61:90:ad:8e:5c:86: 5d:89:81:5d:23:e9:1c:b5:76:7c:d9:71:80:9f:09:90:be:1f: 44:24:67:ab:e8:07:04:c4:7a:7a:05:af:d4:76:70:e1:3c:a7: f9:80:a9:52:7a:37:f0:ee:04:4e:b4:c5:9b:e9:0c:67:4e:f3: 03:1b:ec:f0:e7:78:2e:d2:9a:10:85:c8:71:6d:64:05:2f:dc: 92:23:be:2d:9c:39:ed:9b:7a:86:a1:ec:a7:1e:23:91:e5:9e: a9:27:cb:45:13:2d:09:fa:ed:2c:59:56:df:99:90:a2:33:f1: 32:94:d3:75:b5:80:95:73:49:90:e7:cf:12:01:37:bb:7a:e6: 78:03:58:2b:f7:e3:29:f3:b5:ea:f1:8d:60:2a:69:af:e1:57: 91:38:c4:6b:0e:94:11:f3:6a:89:06:c5:f6:df:33:ff:b5:60: 37:7b:51:c2 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUN4YSHPfqL0t3ROoXzhpDf7vErEswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwMTEzMTIzOTQ1WhcNMjYwMTEyMTI0NDQ1 WjAzMTEwLwYDVQQDEygyOUFGNEIzOTFGRjEyODQzM0Q2MjA2NkJCQzc3QjE1MTRC RkU2QkVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7gJelxlCNXH byTVplbFGPQmyg3A7cRRajIYi+3JHlG0BbTA6f1gs0wTP2UXAn2wAaaqCcIlxnc7 ihzuBDVVZha2C7/6V1dNcu8OtZleoDU/daj/Z9mYbM9VHthDs1TfHOdSFYFOsQeK LwovhxrwsSTSvMFyw0wUnPGPDBYwQl9grLWbF+zfRiu+jgVULrAlFBQ1KIxOsQiW Fxnz7Wqk65DEyvh0RE81Kg/hFdPKIPFFF/ZvUgZlVwFrrOAHQzbswkzzP6Vk2yaT mSW0wuKjwaIk+wMsiIHvIK3V+4myc0eoP5h/pttb7zXDUqbPtu9TSOqSHdZGlUpJ I1c/lJHw/QIDAQABo4IChTCCAoEwHQYDVR0OBBYEFCmvSzkf8ShDPWIGa7x3sVFL /mvrMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzg4ODEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJwYI KwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAZ3+UgMEAZ3+VDANBgkqhkiG9w0B AQsFAAOCAQEAwbdCvqSdLYfLVbC990MUOK4KZoZZiEG4QcbLKgyrPoTmpuAOA6N+ NZt/P0J/zewjnSwG8mBXAM4W84WZTW95+huB9ancMt27+DmeEns5z8iOy2VOYZCt jlyGXYmBXSPpHLV2fNlxgJ8JkL4fRCRnq+gHBMR6egWv1HZw4Tyn+YCpUno38O4E TrTFm+kMZ07zAxvs8Od4LtKaEIXIcW1kBS/ckiO+LZw57Zt6hqHspx4jkeWeqSfL RRMtCfrtLFlW35mQojPxMpTTdbWAlXNJkOfPEgE3u3rmeANYK/fjKfO16vGNYCpp r+FXkTjEaw6UEfNqiQbF9t8z/7VgN3tRwg== -----END CERTIFICATE-----Generated at Wed Feb 5 04:43:37 2025 by rpki-client