$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa File: AS151487.roa (raw, json) Hash identifier: 2JUNzCQ6wIBpuAY3FQ9EtRLyQLu8H/j8sr3eT3IznjM= Subject key identifier: DD:6A:41:69:3D:16:C7:AA:DC:54:5C:8D:78:BB:47:B7:5D:C5:38:D4 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 27E511DF7CB3A50864E687A3A7F8D417E6887134 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa Signing time: Sun 23 Feb 2025 09:28:26 +0000 ROA not before: Sun 23 Feb 2025 09:23:26 +0000 ROA not after: Sun 22 Feb 2026 09:28:26 +0000 asID: 151487 IP address blocks: 104.234.102.0/24 maxlen: 24 104.234.155.0/24 maxlen: 24 104.234.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e5:11:df:7c:b3:a5:08:64:e6:87:a3:a7:f8:d4:17:e6:88:71:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Feb 23 09:23:26 2025 GMT Not After : Feb 22 09:28:26 2026 GMT Subject: CN=DD6A41693D16C7AADC545C8D78BB47B75DC538D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a4:38:56:ef:a2:92:cb:91:63:93:17:f3:b3: 16:cc:2e:3b:8e:8f:e7:9f:3b:47:b2:d3:c0:84:6c: c1:d1:31:c7:6b:ea:7e:21:b2:db:46:84:8a:23:02: df:9e:17:f3:7e:0c:b4:c9:6d:b8:d3:86:77:82:a9: 9c:57:48:6f:59:44:d1:0b:12:29:73:6d:37:25:62: 78:71:16:6c:7f:43:4f:05:dc:1f:75:5e:03:8b:fa: 57:75:a3:2f:2b:0b:70:ce:76:31:7c:10:3c:2e:ab: fe:38:ab:3b:e4:49:5c:0f:fa:38:63:2a:eb:78:b2: 1f:f8:67:54:f5:24:ec:41:c2:67:4d:2e:31:24:e0: 25:7b:4e:55:56:45:73:9e:73:b5:dd:7d:35:67:65: 67:2f:74:06:fd:7b:2a:48:db:da:4a:eb:2d:71:8a: 58:ec:64:50:75:a9:fa:58:ed:c1:0f:fd:fb:e1:fc: 59:11:ea:40:ee:72:5c:49:9c:31:7c:fa:62:33:c3: 79:72:1f:a9:64:32:a1:8b:05:38:78:23:9f:8f:ca: 25:4a:f6:cf:f5:3c:4b:6f:98:23:fd:3d:d0:59:10: 94:e2:f5:d7:98:de:40:38:d1:66:91:cd:b1:85:43: f5:48:61:ca:87:75:cf:7d:ac:7b:03:1f:90:ed:82: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6A:41:69:3D:16:C7:AA:DC:54:5C:8D:78:BB:47:B7:5D:C5:38:D4 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS151487.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.102.0/24 104.234.155.0/24 104.234.161.0/24 Signature Algorithm: sha256WithRSAEncryption 70:2f:73:b7:55:61:c9:1f:11:69:f0:cd:9b:4f:cf:c4:02:d4: 2a:0a:21:9d:cf:b4:e3:a0:5f:1a:ea:3a:a7:39:96:24:7e:f4: 1b:59:fc:a1:9e:a2:48:df:d0:5c:06:b1:81:65:33:53:28:48: 23:bf:92:09:aa:f3:0e:f3:6a:6e:89:c0:74:41:2f:22:20:da: c4:63:4b:47:8d:36:96:e2:eb:60:fc:a6:3c:6a:2e:e1:8d:1c: da:63:15:5b:d3:34:09:fa:53:7e:f0:07:55:8f:ec:c8:87:d4: ca:7f:ad:57:50:99:19:ec:56:cc:3d:7e:2e:00:35:9c:43:95: 5c:b5:8d:b1:64:a8:2d:c2:fc:a5:fa:b0:e8:59:59:2c:88:97: 2b:94:1a:49:d2:d2:81:79:bc:ed:9c:60:19:c9:07:64:64:ed: a6:9b:4b:57:c4:c2:76:16:c2:51:9b:40:7f:c4:e4:0f:75:f7: e5:3f:bd:b7:43:b1:cc:5d:e0:60:7e:4b:28:9f:e9:fe:55:70: 89:bd:5b:5a:ba:45:86:17:ea:69:40:37:bb:e6:21:86:da:88: 24:37:77:0d:de:1b:7f:0b:43:bd:84:48:ff:97:88:e6:e3:73: 3d:5e:1f:3d:6c:e3:95:e6:57:02:ac:e3:c2:cf:6f:15:af:b6: 4d:1a:8f:d9 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUJ+UR33yzpQhk5oejp/jUF+aIcTQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMjIzMDkyMzI2WhcNMjYwMjIyMDkyODI2 WjAzMTEwLwYDVQQDEyhERDZBNDE2OTNEMTZDN0FBREM1NDVDOEQ3OEJCNDdCNzVE QzUzOEQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKQ4Vu+iksuR Y5MX87MWzC47jo/nnztHstPAhGzB0THHa+p+IbLbRoSKIwLfnhfzfgy0yW2404Z3 gqmcV0hvWUTRCxIpc203JWJ4cRZsf0NPBdwfdV4Di/pXdaMvKwtwznYxfBA8Lqv+ OKs75ElcD/o4YyrreLIf+GdU9STsQcJnTS4xJOAle05VVkVznnO13X01Z2VnL3QG /XsqSNvaSustcYpY7GRQdan6WO3BD/374fxZEepA7nJcSZwxfPpiM8N5ch+pZDKh iwU4eCOfj8olSvbP9TxLb5gj/T3QWRCU4vXXmN5AONFmkc2xhUP1SGHKh3XPfax7 Ax+Q7YKxsQIDAQABo4ICizCCAocwHQYDVR0OBBYEFN1qQWk9Fseq3FRcjXi7R7dd xTjUMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE1MTQ4Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqZgMEAGjqmwMEAGjqoTANBgkq hkiG9w0BAQsFAAOCAQEAcC9zt1VhyR8RafDNm0/PxALUKgohnc+046BfGuo6pzmW JH70G1n8oZ6iSN/QXAaxgWUzUyhII7+SCarzDvNqbonAdEEvIiDaxGNLR402luLr YPymPGou4Y0c2mMVW9M0CfpTfvAHVY/syIfUyn+tV1CZGexWzD1+LgA1nEOVXLWN sWSoLcL8pfqw6FlZLIiXK5QaSdLSgXm87ZxgGckHZGTtpptLV8TCdhbCUZtAf8Tk D3X35T+9t0OxzF3gYH5LKJ/p/lVwib1bWrpFhhfqaUA3u+YhhtqIJDd3Dd4bfwtD vYRI/5eI5uNzPV4fPWzjleZXAqzjws9vFa+2TRqP2Q== -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:29 2025 by rpki-client