$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa File: AS400529.roa (raw, json) Hash identifier: LyHYD0Ho2tWeznWt9C/7/ij4ltgM8INso4F0dAWKxIs= Subject key identifier: 5C:2E:68:70:D9:6E:A3:88:F1:A9:D2:64:44:F8:7C:86:D1:C7:09:D7 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 14C92456B76F46EAACFE625230D672C22901754B Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa Signing time: Mon 14 Apr 2025 15:08:25 +0000 ROA not before: Mon 14 Apr 2025 15:03:25 +0000 ROA not after: Mon 13 Apr 2026 15:08:25 +0000 asID: 400529 IP address blocks: 104.234.107.0/24 maxlen: 24 104.234.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c9:24:56:b7:6f:46:ea:ac:fe:62:52:30:d6:72:c2:29:01:75:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 14 15:03:25 2025 GMT Not After : Apr 13 15:08:25 2026 GMT Subject: CN=5C2E6870D96EA388F1A9D26444F87C86D1C709D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:8b:58:4a:1b:63:2f:28:20:b8:44:e1:a6: d5:c1:2e:fa:37:f3:4e:6b:6e:37:44:82:24:06:21: 42:1d:9e:8b:e5:41:cf:52:43:fd:7d:d6:c2:45:17: 85:f2:24:35:07:6c:bf:4e:45:60:b1:3b:ad:98:46: e7:80:5c:db:b2:8f:0c:0d:14:60:d1:17:2e:4b:f7: dc:82:16:37:92:90:4e:c2:72:a3:4d:9e:20:cb:57: 42:5d:b7:62:f4:86:44:b0:3f:aa:41:cf:cd:a8:7a: 17:49:2f:d5:14:1b:72:05:ea:20:68:48:80:81:d5: 41:56:9e:99:fc:4e:4c:90:b8:f2:b8:9b:f8:a7:49: e4:35:6b:cc:ba:8f:80:90:5c:3f:dd:62:26:28:c8: 6e:2d:8c:0e:5e:28:3a:17:72:54:60:cb:f4:f3:ad: 29:58:f0:2a:8b:91:1a:2a:95:1c:96:8a:93:0c:98: d9:ee:fa:99:ac:8f:ee:d0:e6:98:c6:84:20:e5:29: f6:bd:22:3d:c5:c6:b0:8a:84:4a:34:09:de:ee:b2: 9d:5b:f5:46:31:b5:02:d3:33:98:9a:1d:c4:50:b5: df:3c:1a:71:81:ec:2a:44:ae:e4:16:74:fb:38:99: 3a:50:48:b5:9b:c7:f0:ed:2e:e2:2a:cc:ca:76:21: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2E:68:70:D9:6E:A3:88:F1:A9:D2:64:44:F8:7C:86:D1:C7:09:D7 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.107.0/24 104.234.220.0/24 Signature Algorithm: sha256WithRSAEncryption b7:00:e3:b1:8e:34:d5:b6:88:90:42:d4:15:0c:d3:2f:bd:7b: 9e:ff:11:96:5b:58:2c:a8:99:54:aa:30:38:cf:15:d3:41:7b: b7:04:66:e3:a7:ec:c9:63:07:38:ed:57:60:3f:6b:fd:58:2b: fc:93:6c:18:e1:96:eb:56:34:96:de:56:08:05:87:9e:ae:3a: ad:af:ce:f2:15:5c:37:e5:f6:e4:9c:35:45:fb:ff:c2:e5:de: 6a:f0:dd:ea:c5:16:45:74:a7:bd:8e:e2:f6:6e:24:a4:37:15: e7:17:bb:ca:26:9d:b6:88:4d:0c:70:d8:93:a6:df:4d:61:7f: f2:ef:ec:59:1e:1f:ac:39:37:02:bf:36:db:a2:7d:0d:66:bb: 12:4c:b8:ce:17:df:51:66:3a:32:3c:14:56:bb:a5:46:4b:71: 1e:a6:c2:99:b0:8c:20:e8:37:1d:af:30:5c:b4:21:c4:c0:fd: 84:86:69:e4:89:e5:dc:9a:66:a9:41:94:d6:82:7d:11:69:05: b2:e6:7c:3b:fe:87:4a:d2:9f:88:e4:7d:44:c8:d7:55:72:72: f9:14:a9:a4:24:44:bc:d9:cd:10:1d:e5:c0:4a:80:c2:26:c2: c5:a2:97:b3:79:37:80:dd:5c:47:64:77:ad:dc:f3:2b:4b:80: 3c:3f:3f:86 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUFMkkVrdvRuqs/mJSMNZywikBdUswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDE0MTUwMzI1WhcNMjYwNDEzMTUwODI1 WjAzMTEwLwYDVQQDEyg1QzJFNjg3MEQ5NkVBMzg4RjFBOUQyNjQ0NEY4N0M4NkQx QzcwOUQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ6LWEobYy8o ILhE4abVwS76N/NOa243RIIkBiFCHZ6L5UHPUkP9fdbCRReF8iQ1B2y/TkVgsTut mEbngFzbso8MDRRg0RcuS/fcghY3kpBOwnKjTZ4gy1dCXbdi9IZEsD+qQc/NqHoX SS/VFBtyBeogaEiAgdVBVp6Z/E5MkLjyuJv4p0nkNWvMuo+AkFw/3WImKMhuLYwO Xig6F3JUYMv0860pWPAqi5EaKpUcloqTDJjZ7vqZrI/u0OaYxoQg5Sn2vSI9xcaw ioRKNAne7rKdW/VGMbUC0zOYmh3EULXfPBpxgewqRK7kFnT7OJk6UEi1m8fw7S7i KszKdiFAQQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFFwuaHDZbqOI8anSZET4fIbR xwnXMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqawMEAGjq3DANBgkqhkiG9w0B AQsFAAOCAQEAtwDjsY401baIkELUFQzTL717nv8RlltYLKiZVKowOM8V00F7twRm 46fsyWMHOO1XYD9r/Vgr/JNsGOGW61Y0lt5WCAWHnq46ra/O8hVcN+X25Jw1Rfv/ wuXeavDd6sUWRXSnvY7i9m4kpDcV5xe7yiadtohNDHDYk6bfTWF/8u/sWR4frDk3 Ar8226J9DWa7Eky4zhffUWY6MjwUVrulRktxHqbCmbCMIOg3Ha8wXLQhxMD9hIZp 5Inl3JpmqUGU1oJ9EWkFsuZ8O/6HStKfiOR9RMjXVXJy+RSppCREvNnNEB3lwEqA wibCxaKXs3k3gN1cR2R3rdzzK0uAPD8/hg== -----END CERTIFICATE-----Generated at Wed May 7 05:32:34 2025 by rpki-client