$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa File: AS22653.roa (raw, json) Hash identifier: 16bJKclceijvBvMRl4jTdkD6P+QeVoFftkkmp1TMI8Y= Subject key identifier: B0:6A:87:CF:62:A8:D0:61:88:F9:88:58:CC:5A:F9:BF:B4:71:4D:DC Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 66CE5AE79032193CCBCDE6B9846D672516C2D205 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa Signing time: Wed 01 Jan 2025 11:28:23 +0000 ROA not before: Wed 01 Jan 2025 11:23:23 +0000 ROA not after: Wed 31 Dec 2025 11:28:23 +0000 asID: 22653 IP address blocks: 104.234.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:ce:5a:e7:90:32:19:3c:cb:cd:e6:b9:84:6d:67:25:16:c2:d2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 1 11:23:23 2025 GMT Not After : Dec 31 11:28:23 2025 GMT Subject: CN=B06A87CF62A8D06188F98858CC5AF9BFB4714DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:e3:9f:07:0e:ae:e5:0e:9f:2e:1c:fe:39: 31:dc:30:f8:f4:53:9c:96:4e:40:52:3a:71:ab:67: b4:7d:2f:eb:95:2a:34:93:2b:0c:c9:1d:17:08:15: 20:65:cb:fb:ab:bb:92:f3:3f:36:4c:2a:48:22:2f: 5c:76:72:22:f9:a4:80:43:53:49:34:b5:ea:f3:28: a7:88:ec:9d:4c:19:0b:19:3e:52:b4:1f:ba:74:21: b9:28:55:32:fb:1b:65:90:a7:8b:9a:db:9d:eb:1e: f4:4e:63:69:fb:52:ef:7c:30:ae:3f:b0:23:a2:00: 6a:5a:f6:50:ee:b2:d2:f0:26:3f:48:76:40:b4:87: ac:a9:d1:05:cf:9c:a3:09:60:c1:48:d0:d0:4a:02: 62:1e:49:22:af:34:eb:71:2a:2b:4c:cf:0b:61:ce: d8:82:eb:a4:fb:a3:60:17:d3:96:4c:52:dc:81:c8: 74:2c:59:35:91:f3:0c:45:2e:23:b5:ce:8e:42:40: 7a:31:11:8d:c2:1b:77:d8:fe:7c:24:54:ba:74:e9: 03:9a:b6:36:f6:d3:3d:ef:71:35:0f:ef:aa:83:a3: 58:00:80:59:c5:46:b2:68:ef:17:de:a2:03:30:2f: 5c:ed:7e:b2:78:e7:f8:77:81:bd:87:c0:25:3f:4f: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6A:87:CF:62:A8:D0:61:88:F9:88:58:CC:5A:F9:BF:B4:71:4D:DC X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS22653.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.75.0/24 Signature Algorithm: sha256WithRSAEncryption 82:c7:bc:d3:21:6b:fc:5c:d5:a9:dd:13:7f:93:ee:c3:1c:45: 58:35:e3:30:f9:6c:d1:59:23:6e:9e:a8:01:5d:41:10:4c:52: c4:2a:9e:69:6a:c6:e1:0d:aa:0e:b6:85:70:6e:1b:dd:58:21: 1c:af:e6:ff:51:15:e5:fb:94:38:49:3b:6b:1d:25:a4:e7:49: 5e:dc:a8:d9:28:81:1c:71:fc:d7:d7:99:63:b6:ad:f0:a4:0d: 46:88:d0:9a:3e:2b:fc:16:31:e3:be:bb:a3:5d:21:20:e4:ac: f2:1f:6c:f5:05:95:3f:ee:3c:7b:91:45:87:c6:ff:aa:9b:90: 2d:f9:44:a1:9b:c2:40:4f:04:ff:b0:d2:52:38:57:6a:c0:c0: 49:d5:0f:1c:28:2a:73:00:7d:c5:16:d5:ed:21:4d:a5:8d:8b: 34:88:68:c4:dd:78:ed:c2:e3:d9:62:e6:1a:ce:c6:37:6a:72: ae:8b:cb:d0:77:b7:a1:d8:9f:1b:ab:8a:54:00:dc:32:92:de: 63:dc:28:76:aa:e6:89:73:62:22:e9:28:f1:e4:ee:71:a9:40: 0a:7e:db:d0:b3:1e:6b:48:cb:49:8b:6f:44:7d:a3:a4:c2:b4: cd:4c:84:cf:1e:10:75:28:1b:c6:cb:e0:c9:a7:14:72:d5:5e: 5f:e9:26:bd -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUZs5a55AyGTzLzea5hG1nJRbC0gUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTAxMTEyMzIzWhcNMjUxMjMxMTEyODIz WjAzMTEwLwYDVQQDEyhCMDZBODdDRjYyQThEMDYxODhGOTg4NThDQzVBRjlCRkI0 NzE0RERDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoknjnwcOruUO ny4c/jkx3DD49FOclk5AUjpxq2e0fS/rlSo0kysMyR0XCBUgZcv7q7uS8z82TCpI Ii9cdnIi+aSAQ1NJNLXq8yiniOydTBkLGT5StB+6dCG5KFUy+xtlkKeLmtud6x70 TmNp+1LvfDCuP7AjogBqWvZQ7rLS8CY/SHZAtIesqdEFz5yjCWDBSNDQSgJiHkki rzTrcSorTM8LYc7Yguuk+6NgF9OWTFLcgch0LFk1kfMMRS4jtc6OQkB6MRGNwht3 2P58JFS6dOkDmrY29tM973E1D++qg6NYAIBZxUayaO8X3qIDMC9c7X6yeOf4d4G9 h8AlP08WnwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFLBqh89iqNBhiPmIWMxa+b+0 cU3cMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIyNjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOpLMA0GCSqGSIb3DQEBCwUAA4IB AQCCx7zTIWv8XNWp3RN/k+7DHEVYNeMw+WzRWSNunqgBXUEQTFLEKp5pasbhDaoO toVwbhvdWCEcr+b/URXl+5Q4STtrHSWk50le3KjZKIEccfzX15ljtq3wpA1GiNCa Piv8FjHjvrujXSEg5KzyH2z1BZU/7jx7kUWHxv+qm5At+UShm8JATwT/sNJSOFdq wMBJ1Q8cKCpzAH3FFtXtIU2ljYs0iGjE3XjtwuPZYuYazsY3anKui8vQd7eh2J8b q4pUANwykt5j3Ch2quaJc2Ii6Sjx5O5xqUAKftvQsx5rSMtJi29EfaOkwrTNTITP HhB1KBvGy+DJpxRy1V5f6Sa9 -----END CERTIFICATE-----Generated at Tue May 6 10:05:34 2025 by rpki-client