$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS138737.roa File: AS138737.roa (raw, json) Hash identifier: 9iGZp+xolnFNQh2/0xwRZxl9pjGsQpIwThHxDJM42Bc= Subject key identifier: 65:49:5E:4F:E3:0B:D3:20:00:BA:FE:93:6A:6F:97:3F:47:39:90:52 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0A072EFD2FC7CFA86CB748FEFA6A136AF614DED1 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS138737.roa Signing time: Thu 01 May 2025 14:28:32 +0000 ROA not before: Thu 01 May 2025 14:23:32 +0000 ROA not after: Thu 30 Apr 2026 14:28:32 +0000 asID: 138737 IP address blocks: 104.234.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 12:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:07:2e:fd:2f:c7:cf:a8:6c:b7:48:fe:fa:6a:13:6a:f6:14:de:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 1 14:23:32 2025 GMT Not After : Apr 30 14:28:32 2026 GMT Subject: CN=65495E4FE30BD32000BAFE936A6F973F47399052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:27:2e:26:0e:8f:dd:ca:3b:fe:f2:14:6a: a1:f2:a9:cf:41:4a:b9:e9:11:31:51:de:b9:07:91: 36:84:e1:1a:01:53:d3:01:07:3a:a3:07:c0:eb:b5: 12:d3:62:72:95:42:0f:45:df:c7:15:ac:fb:95:d8: 1d:b1:75:0f:2a:c4:80:19:53:b8:30:45:62:d9:6b: 65:45:4c:e8:ff:9a:1d:3d:e8:20:61:55:1d:ce:65: 72:c6:02:dc:68:2b:e2:1e:9c:61:c9:2e:0e:53:e8: 12:c3:6e:41:6d:b9:25:1c:9d:fa:3f:26:10:c6:0f: e6:b3:3e:b8:3a:33:04:27:47:dd:bd:4d:be:6d:54: 5d:b5:2b:53:61:e0:4e:fc:bf:0a:a6:9a:05:40:78: 0a:34:41:a3:33:87:2e:3c:75:54:4f:18:f1:c1:d9: 53:9d:2c:50:ab:70:99:dd:0e:7a:7c:65:20:84:e8: 7d:8c:78:b1:fa:b2:3d:48:cb:36:82:3b:7f:67:30: a8:98:9d:fb:17:b8:40:77:e6:b0:97:ac:f7:5b:87: 37:62:b0:31:cf:fb:93:86:3d:0f:45:bb:e5:ce:60: d3:f6:9e:eb:7f:30:a0:ec:9a:58:85:83:7f:bd:7b: ae:3a:69:c0:8f:e8:bc:57:bc:e9:e5:3e:e7:89:f0: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:49:5E:4F:E3:0B:D3:20:00:BA:FE:93:6A:6F:97:3F:47:39:90:52 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS138737.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.71.0/24 Signature Algorithm: sha256WithRSAEncryption 41:b0:8a:27:53:96:31:ef:a0:d8:63:9a:9c:c1:1d:fe:fc:e9: ca:36:e3:eb:66:10:8a:25:de:05:d1:34:91:88:44:22:ea:a9: 2e:94:62:3c:73:1d:7d:d0:7b:19:70:6a:ef:ac:bb:35:fb:91: 4c:71:13:11:cb:14:7d:a2:66:80:1e:00:77:88:be:ea:89:19: 93:28:7d:7b:ac:6f:24:59:dd:0e:b6:00:3f:17:6c:cf:21:5e: ba:70:18:61:87:c8:75:56:2c:98:2b:d5:46:cb:c6:13:b2:aa: 37:ca:39:0c:80:21:bb:dd:9c:a6:2b:7c:8f:c2:5a:00:23:39: d0:aa:95:a8:05:21:3b:19:19:e1:db:11:57:f7:90:ef:a5:22: 5a:1e:0a:c1:8e:a0:f5:00:d2:5f:46:cc:25:2b:c2:bd:c8:96: 52:b7:06:0f:90:25:84:74:27:8a:3d:20:e7:f6:7c:d2:43:b8: d5:3f:af:e1:b8:27:97:74:1e:24:24:7f:58:c1:61:10:5b:e4: 87:b7:4a:f9:a6:4e:8f:6b:03:47:a7:37:ac:5e:d9:0f:17:bc: 85:65:98:98:9d:19:bc:42:e7:6a:88:88:52:e6:7c:d5:79:b8: 2d:f0:63:23:f2:8e:33:b1:1b:50:41:0b:ce:29:9f:b0:ec:9e: f4:c8:2e:5e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUCgcu/S/Hz6hst0j++moTavYU3tEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTAxMTQyMzMyWhcNMjYwNDMwMTQyODMy WjAzMTEwLwYDVQQDEyg2NTQ5NUU0RkUzMEJEMzIwMDBCQUZFOTM2QTZGOTczRjQ3 Mzk5MDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt4nLiYOj93K O/7yFGqh8qnPQUq56RExUd65B5E2hOEaAVPTAQc6owfA67US02JylUIPRd/HFaz7 ldgdsXUPKsSAGVO4MEVi2WtlRUzo/5odPeggYVUdzmVyxgLcaCviHpxhyS4OU+gS w25BbbklHJ36PyYQxg/msz64OjMEJ0fdvU2+bVRdtStTYeBO/L8KppoFQHgKNEGj M4cuPHVUTxjxwdlTnSxQq3CZ3Q56fGUghOh9jHix+rI9SMs2gjt/ZzComJ37F7hA d+awl6z3W4c3YrAxz/uThj0PRbvlzmDT9p7rfzCg7JpYhYN/vXuuOmnAj+i8V7zp 5T7nifBunwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGVJXk/jC9MgALr+k2pvlz9H OZBSMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzEzODczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqRzANBgkqhkiG9w0BAQsFAAOC AQEAQbCKJ1OWMe+g2GOanMEd/vzpyjbj62YQiiXeBdE0kYhEIuqpLpRiPHMdfdB7 GXBq76y7NfuRTHETEcsUfaJmgB4Ad4i+6okZkyh9e6xvJFndDrYAPxdszyFeunAY YYfIdVYsmCvVRsvGE7KqN8o5DIAhu92cpit8j8JaACM50KqVqAUhOxkZ4dsRV/eQ 76UiWh4KwY6g9QDSX0bMJSvCvciWUrcGD5AlhHQnij0g5/Z80kO41T+v4bgnl3Qe JCR/WMFhEFvkh7dK+aZOj2sDR6c3rF7ZDxe8hWWYmJ0ZvELnaoiIUuZ81Xm4LfBj I/KOM7EbUEELzimfsOye9MguXg== -----END CERTIFICATE-----Generated at Sun Jun 8 01:58:46 2025 by rpki-client