$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401692.roa File: AS401692.roa (raw, json) Hash identifier: oLs2ykJQAqvNmjdfKXrtPRJfCC7iDgNOIXOtf59rWM0= Subject key identifier: 33:C4:48:21:66:75:A5:AB:0F:91:E6:7B:72:6F:F6:0D:7F:6E:E1:0A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0A7B69A428AA2F6CEE653EE9F234AC39009889C8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401692.roa Signing time: Thu 24 Apr 2025 22:47:27 +0000 ROA not before: Thu 24 Apr 2025 22:42:27 +0000 ROA not after: Thu 23 Apr 2026 22:47:27 +0000 asID: 401692 IP address blocks: 104.234.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7b:69:a4:28:aa:2f:6c:ee:65:3e:e9:f2:34:ac:39:00:98:89:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 24 22:42:27 2025 GMT Not After : Apr 23 22:47:27 2026 GMT Subject: CN=33C448216675A5AB0F91E67B726FF60D7F6EE10A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:54:64:e1:d9:f9:ed:a6:54:d2:3e:74:ad:c0: 99:8b:94:b3:11:19:08:68:f1:9b:48:c7:99:77:7c: da:94:2b:df:36:8c:ae:8e:d8:01:e5:b2:f8:cf:e6: 70:4c:21:0e:1b:ac:c3:4c:e9:41:31:71:8a:bf:1f: c3:92:a7:fc:8e:e6:7f:44:cf:1f:5d:fe:ba:ac:40: b8:01:3d:05:cc:57:91:15:be:86:6c:42:cb:10:5a: 82:e0:1a:0a:0f:64:13:d9:29:9f:86:63:ca:42:91: 99:da:55:a4:4e:fa:d1:cf:a5:a2:6d:28:d6:aa:aa: 55:57:28:b2:1f:21:48:24:d5:cf:1f:26:67:af:fa: 3f:89:3b:fe:6c:65:1f:46:b8:30:29:a7:fd:cf:35: 6e:99:61:e3:33:f9:17:c5:9c:43:9b:6d:af:8e:09: 49:24:52:90:dc:11:a8:da:71:de:2c:ab:d8:8a:70: f3:d5:4f:b1:1b:6d:e1:1d:e1:12:62:36:61:05:d9: c4:5b:52:e2:e9:84:04:5d:2e:5a:8d:8d:83:5e:d7: fc:7a:f3:bb:0d:43:c3:9d:59:e9:f0:cf:a5:01:ce: cb:c5:30:8f:27:d4:08:c0:14:26:82:05:16:7b:f8: 59:6e:3a:e2:69:90:84:1e:45:ca:d2:56:48:02:bf: 9e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C4:48:21:66:75:A5:AB:0F:91:E6:7B:72:6F:F6:0D:7F:6E:E1:0A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401692.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.112.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:71:c9:8f:9b:73:73:c8:4d:32:77:f9:59:1c:c8:36:ad:87: cb:c6:2c:31:b6:3e:35:68:53:01:cb:14:d0:6d:06:f1:5f:d4: 8e:23:9d:27:a3:cc:51:28:4e:e6:76:3e:4c:f2:75:66:c4:cc: 64:ef:bc:f4:57:81:38:e5:9d:cb:b9:41:f1:98:7b:39:22:44: 07:18:41:c4:6e:18:05:f6:ae:df:e1:70:8c:9a:d3:46:bd:81: 8b:43:03:98:aa:ca:c0:ad:09:4c:0a:78:95:aa:3a:7e:61:e0: 34:16:aa:40:b5:97:bd:cf:73:4a:d0:cf:73:fa:b7:69:0c:b5: 8e:ed:91:fb:ac:a7:b0:44:a2:d5:68:d5:52:a1:41:ca:f0:7f: a9:61:96:0a:2d:1a:6c:b2:d8:02:b8:17:9a:0a:66:40:2b:fc: 3d:f7:3f:2a:cb:77:4e:67:80:cb:89:3b:c6:92:0e:ab:77:42: ee:a9:43:66:d5:0b:6d:ee:d9:5b:d2:a6:55:c9:46:0c:57:d3: 78:7c:39:ac:60:3f:54:c5:11:3c:4c:d0:e9:da:85:26:89:c1: 15:d7:42:9b:67:3f:b8:94:b0:6f:bf:3e:c0:ee:11:e8:0d:ce: 9e:a2:87:30:f2:9b:93:d7:0c:99:90:db:01:aa:cf:d4:2b:82: ac:31:bf:cc -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUCntppCiqL2zuZT7p8jSsOQCYicgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDI0MjI0MjI3WhcNMjYwNDIzMjI0NzI3 WjAzMTEwLwYDVQQDEygzM0M0NDgyMTY2NzVBNUFCMEY5MUU2N0I3MjZGRjYwRDdG NkVFMTBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFRk4dn57aZU 0j50rcCZi5SzERkIaPGbSMeZd3zalCvfNoyujtgB5bL4z+ZwTCEOG6zDTOlBMXGK vx/Dkqf8juZ/RM8fXf66rEC4AT0FzFeRFb6GbELLEFqC4BoKD2QT2SmfhmPKQpGZ 2lWkTvrRz6WibSjWqqpVVyiyHyFIJNXPHyZnr/o/iTv+bGUfRrgwKaf9zzVumWHj M/kXxZxDm22vjglJJFKQ3BGo2nHeLKvYinDz1U+xG23hHeESYjZhBdnEW1Li6YQE XS5ajY2DXtf8evO7DUPDnVnp8M+lAc7LxTCPJ9QIwBQmggUWe/hZbjriaZCEHkXK 0lZIAr+eiQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDPESCFmdaWrD5Hme3Jv9g1/ buEKMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTY5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqcDANBgkqhkiG9w0BAQsFAAOC AQEAjHHJj5tzc8hNMnf5WRzINq2Hy8YsMbY+NWhTAcsU0G0G8V/UjiOdJ6PMUShO 5nY+TPJ1ZsTMZO+89FeBOOWdy7lB8Zh7OSJEBxhBxG4YBfau3+FwjJrTRr2Bi0MD mKrKwK0JTAp4lao6fmHgNBaqQLWXvc9zStDPc/q3aQy1ju2R+6ynsESi1WjVUqFB yvB/qWGWCi0abLLYArgXmgpmQCv8Pfc/Kst3TmeAy4k7xpIOq3dC7qlDZtULbe7Z W9KmVclGDFfTeHw5rGA/VMURPEzQ6dqFJonBFddCm2c/uJSwb78+wO4R6A3OnqKH MPKbk9cMmZDbAarP1CuCrDG/zA== -----END CERTIFICATE-----Generated at Tue May 6 05:37:54 2025 by rpki-client