$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399045.roa File: AS399045.roa (raw, json) Hash identifier: 8zjmR0T8R4AgiN5ehZJ+Aoxpav10r69ydjOgXmfhfhQ= Subject key identifier: C7:F8:70:72:D7:14:D6:56:0A:32:BA:D3:39:A2:7F:8D:CE:A4:EA:C6 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 5CFAAAAAD793D0130B24FD2BCFE2BE1607E9DF62 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399045.roa Signing time: Sun 04 May 2025 21:28:32 +0000 ROA not before: Sun 04 May 2025 21:23:32 +0000 ROA not after: Sun 03 May 2026 21:28:32 +0000 asID: 399045 IP address blocks: 23.94.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 19:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:fa:aa:aa:d7:93:d0:13:0b:24:fd:2b:cf:e2:be:16:07:e9:df:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: May 4 21:23:32 2025 GMT Not After : May 3 21:28:32 2026 GMT Subject: CN=C7F87072D714D6560A32BAD339A27F8DCEA4EAC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:16:7e:db:5a:0b:e4:b4:f5:53:c3:4a:83: 6d:e0:a5:6a:68:a4:c7:1b:2b:51:87:96:c8:a9:01: 6b:f1:9d:60:40:fe:14:f3:1a:16:22:d6:87:e4:f3: b9:b1:8e:5f:a0:78:45:93:a4:45:fe:cb:2d:a5:c7: 2f:a3:ff:94:f1:5c:51:8f:81:dd:a0:68:5e:39:0c: de:1d:d8:85:9c:17:3e:7f:db:62:b7:10:ce:72:b6: f2:16:64:83:1b:41:45:e4:dd:3d:bd:b9:90:93:62: 82:30:15:9f:0f:e8:37:d4:70:8b:b3:3d:7e:55:41: d3:fa:52:af:6b:39:48:a0:98:77:b3:84:c9:c4:fc: 4c:87:3c:7a:8c:87:6a:c8:94:18:e4:7c:be:13:06: fa:83:14:ed:04:81:68:31:fb:6e:a9:c9:98:a1:6c: 96:c9:6f:8f:16:57:b5:ff:23:87:34:f2:b8:47:21: 8e:11:c4:b5:9c:3d:46:d5:a8:66:3b:c6:7e:1a:42: e8:85:30:ca:3b:6f:57:7c:7d:45:1e:3c:80:b6:04: 64:e0:2e:09:ad:6f:7e:a0:4f:03:35:9b:fb:68:ff: 6e:08:37:c6:dc:5b:a0:3d:3e:eb:a9:2c:f9:23:29: 16:59:37:12:f7:3a:aa:6b:63:58:e4:2f:d7:3a:d1: 3f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F8:70:72:D7:14:D6:56:0A:32:BA:D3:39:A2:7F:8D:CE:A4:EA:C6 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399045.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.89.0/24 Signature Algorithm: sha256WithRSAEncryption 76:70:4e:df:fb:e0:95:38:6a:d7:4f:13:18:ce:4a:cb:f2:62: 7d:7e:1d:12:9e:c5:02:06:92:82:be:03:8a:bb:ad:db:90:70: ce:c9:d7:70:c6:d6:85:61:fa:00:42:61:e5:5d:62:76:36:55: aa:77:a8:de:c4:ba:4b:5d:e9:f4:5d:33:60:de:f5:ac:e6:0a: 17:07:43:60:8b:d1:0f:65:41:62:98:f0:3f:8e:c3:bc:ba:7e: fe:16:f8:b9:86:f1:33:b7:ef:5a:df:76:39:4c:fa:34:7b:0a: 22:cb:b9:f7:f8:80:87:d9:a6:94:e1:e8:80:e1:28:36:1f:15: 91:40:ff:29:c5:d0:e6:86:a1:b3:10:f2:02:c0:69:02:1e:fb: ea:b9:61:5b:07:4a:a8:0c:fe:cf:df:83:87:f4:0d:99:47:7d: 74:a9:f7:4b:8d:34:9d:55:33:4d:40:36:60:b9:f0:9c:4a:95: 15:e2:c0:8c:e4:e8:16:89:ea:12:60:44:7b:bb:a5:c4:01:7a: e7:81:00:29:e2:a6:fc:9d:e0:f3:8b:95:68:64:44:df:74:d7: 6e:ae:9d:9b:b9:df:f8:b9:d6:42:5c:77:69:8d:3c:34:49:3d: 0f:1f:4c:4a:93:f8:68:b0:f0:fd:4f:2f:84:14:a6:41:56:fc: 42:a6:ed:00 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUXPqqqteT0BMLJP0rz+K+Fgfp32IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwNTA0MjEyMzMyWhcNMjYwNTAzMjEyODMy WjAzMTEwLwYDVQQDEyhDN0Y4NzA3MkQ3MTRENjU2MEEzMkJBRDMzOUEyN0Y4RENF QTRFQUM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE4WfttaC+S0 9VPDSoNt4KVqaKTHGytRh5bIqQFr8Z1gQP4U8xoWItaH5PO5sY5foHhFk6RF/sst pccvo/+U8VxRj4HdoGheOQzeHdiFnBc+f9titxDOcrbyFmSDG0FF5N09vbmQk2KC MBWfD+g31HCLsz1+VUHT+lKvazlIoJh3s4TJxPxMhzx6jIdqyJQY5Hy+Ewb6gxTt BIFoMftuqcmYoWyWyW+PFle1/yOHNPK4RyGOEcS1nD1G1ahmO8Z+GkLohTDKO29X fH1FHjyAtgRk4C4JrW9+oE8DNZv7aP9uCDfG3FugPT7rqSz5IykWWTcS9zqqa2NY 5C/XOtE/PQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMf4cHLXFNZWCjK60zmif43O pOrGMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzM5OTA0NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEABdeWTANBgkqhkiG9w0BAQsFAAOC AQEAdnBO3/vglThq108TGM5Ky/JifX4dEp7FAgaSgr4Dirut25BwzsnXcMbWhWH6 AEJh5V1idjZVqneo3sS6S13p9F0zYN71rOYKFwdDYIvRD2VBYpjwP47DvLp+/hb4 uYbxM7fvWt92OUz6NHsKIsu59/iAh9mmlOHogOEoNh8VkUD/KcXQ5oahsxDyAsBp Ah776rlhWwdKqAz+z9+Dh/QNmUd9dKn3S400nVUzTUA2YLnwnEqVFeLAjOToFonq EmBEe7ulxAF654EAKeKm/J3g84uVaGRE33TXbq6dm7nf+LnWQlx3aY08NEk9Dx9M SpP4aLDw/U8vhBSmQVb8QqbtAA== -----END CERTIFICATE-----Generated at Mon May 5 21:51:36 2025 by rpki-client