$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa File: AS26042.roa (raw, json) Hash identifier: 2f/ybuZ6zCqLcpSNPidI9WsgtQXNaOEyOYO5ua735Bo= Subject key identifier: 06:62:39:11:64:8F:78:CD:7A:69:48:56:43:5A:D0:82:3A:EF:C5:8F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 352B5090B40D9F593D62C879345C5719CC292914 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa Signing time: Thu 09 Jan 2025 17:00:05 +0000 ROA not before: Thu 09 Jan 2025 16:55:05 +0000 ROA not after: Thu 08 Jan 2026 17:00:05 +0000 asID: 26042 IP address blocks: 104.234.118.0/24 maxlen: 24 104.234.142.0/24 maxlen: 24 206.53.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 20:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2b:50:90:b4:0d:9f:59:3d:62:c8:79:34:5c:57:19:cc:29:29:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 9 16:55:05 2025 GMT Not After : Jan 8 17:00:05 2026 GMT Subject: CN=06623911648F78CD7A694856435AD0823AEFC58F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a7:69:ea:ec:cf:a7:60:84:57:1d:3c:95:16: 2a:2c:81:d0:62:ce:41:4b:f1:82:0c:fc:d2:c5:bc: 75:29:dc:a8:cd:33:53:a9:48:5e:03:24:31:a2:21: 02:cd:f6:5e:ef:42:dd:93:b9:fc:5f:8d:25:ab:73: 97:b2:94:87:0a:25:4d:3c:ea:10:56:ac:9b:c1:4b: 85:b9:71:7e:47:61:e1:da:e2:34:6e:fc:64:1e:48: 04:1a:58:5e:e6:21:0f:a9:61:c0:02:fa:a7:ab:e6: 63:ec:47:4b:c3:ac:6f:6d:11:f5:21:ed:4b:f5:24: 9f:6f:37:4e:af:0b:4a:88:95:67:70:e9:b6:61:07: 13:66:1f:fc:a1:f5:df:09:f4:df:dc:e9:60:61:90: 9c:8c:3f:84:60:88:4a:cb:4d:53:06:7c:32:ac:0f: cd:5e:e0:7a:d2:76:1a:74:c0:83:36:ff:54:92:05: 8c:35:33:87:75:02:f6:85:9b:5a:82:97:75:a3:5b: b1:41:1c:b2:f6:04:8c:30:7d:55:e7:95:51:d0:8e: 09:cc:b8:a9:dc:d7:cd:1f:aa:4f:82:f9:3d:8e:26: 1d:2a:d9:8d:30:6b:25:86:db:2b:9d:1e:18:28:fd: 3c:60:a5:39:d6:6e:8f:f2:7e:2b:66:8f:64:3d:b2: bf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:62:39:11:64:8F:78:CD:7A:69:48:56:43:5A:D0:82:3A:EF:C5:8F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS26042.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.118.0/24 104.234.142.0/24 206.53.53.0/24 Signature Algorithm: sha256WithRSAEncryption 61:02:71:0f:74:83:b7:1d:ab:ca:df:e2:9a:18:13:ab:02:f2: b6:4e:21:2a:f3:bb:86:b7:e1:30:99:61:24:90:d1:d8:8f:f8: 25:c1:6e:c3:8b:f8:79:28:e0:2c:32:38:10:05:be:7f:10:7c: 1c:da:a9:2d:81:22:3e:9c:fb:1d:70:78:dd:f3:39:a0:16:5f: 69:e8:f5:50:ab:d3:f7:ad:16:29:14:e7:b1:b6:ee:86:84:bc: 0f:5a:b6:4a:a4:ba:07:8d:d3:da:d6:cd:90:8e:28:5f:1f:54: 1f:d3:42:89:fa:96:fe:e7:c8:01:7a:52:8d:d6:50:e0:b4:be: 79:cf:5d:9d:eb:e8:69:59:f7:f3:5b:48:88:0e:74:a9:ab:9c: 57:75:3c:b8:3e:07:19:ba:ff:56:7f:40:ed:a3:09:4b:73:e3: ed:82:08:c7:8e:88:c5:49:f1:76:95:40:99:b3:49:82:f6:b6: c5:50:a0:36:6e:f8:a8:c5:97:e5:62:75:4b:be:98:63:59:1b: 8b:b2:b2:65:2c:dd:5e:6f:fa:1f:a0:9b:7a:80:e7:ab:b0:1e: 45:01:c0:6b:ee:a9:7f:53:01:c9:d2:8b:e8:9e:d5:19:aa:d8: da:34:2d:e9:d0:77:f6:e1:d2:4b:04:b1:bb:93:93:e6:53:5d: 01:c3:c1:11 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUNStQkLQNn1k9Ysh5NFxXGcwpKRQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTA5MTY1NTA1WhcNMjYwMTA4MTcwMDA1 WjAzMTEwLwYDVQQDEygwNjYyMzkxMTY0OEY3OENEN0E2OTQ4NTY0MzVBRDA4MjNB RUZDNThGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqdp6uzPp2CE Vx08lRYqLIHQYs5BS/GCDPzSxbx1KdyozTNTqUheAyQxoiECzfZe70Ldk7n8X40l q3OXspSHCiVNPOoQVqybwUuFuXF+R2Hh2uI0bvxkHkgEGlhe5iEPqWHAAvqnq+Zj 7EdLw6xvbRH1Ie1L9SSfbzdOrwtKiJVncOm2YQcTZh/8ofXfCfTf3OlgYZCcjD+E YIhKy01TBnwyrA/NXuB60nYadMCDNv9UkgWMNTOHdQL2hZtagpd1o1uxQRyy9gSM MH1V55VR0I4JzLip3NfNH6pPgvk9jiYdKtmNMGslhtsrnR4YKP08YKU51m6P8n4r Zo9kPbK/nQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAZiORFkj3jNemlIVkNa0II6 78WPMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI2MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOp2AwQAaOqOAwQAzjU1MA0GCSqG SIb3DQEBCwUAA4IBAQBhAnEPdIO3HavK3+KaGBOrAvK2TiEq87uGt+EwmWEkkNHY j/glwW7Di/h5KOAsMjgQBb5/EHwc2qktgSI+nPsdcHjd8zmgFl9p6PVQq9P3rRYp FOextu6GhLwPWrZKpLoHjdPa1s2QjihfH1Qf00KJ+pb+58gBelKN1lDgtL55z12d 6+hpWffzW0iIDnSpq5xXdTy4PgcZuv9Wf0DtowlLc+PtggjHjojFSfF2lUCZs0mC 9rbFUKA2bvioxZflYnVLvphjWRuLsrJlLN1eb/ofoJt6gOersB5FAcBr7ql/UwHJ 0ovontUZqtjaNC3p0Hf24dJLBLG7k5PmU10Bw8ER -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:27 2025 by rpki-client