$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19318.roa File: AS19318.roa (raw, json) Hash identifier: zstMmnis+1ZRyPfWZiLj3gDbxF/z9+0Yqr55909wFp0= Subject key identifier: 24:E1:E8:65:C7:35:3E:FA:F5:B8:9A:60:C4:8B:67:C9:20:66:7F:A1 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6EEA53DD9D6568E206A9754138F15D9190874FA2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19318.roa Signing time: Wed 12 Mar 2025 12:08:06 +0000 ROA not before: Wed 12 Mar 2025 12:03:06 +0000 ROA not after: Wed 11 Mar 2026 12:08:06 +0000 asID: 19318 IP address blocks: 104.234.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ea:53:dd:9d:65:68:e2:06:a9:75:41:38:f1:5d:91:90:87:4f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 12 12:03:06 2025 GMT Not After : Mar 11 12:08:06 2026 GMT Subject: CN=24E1E865C7353EFAF5B89A60C48B67C920667FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a3:93:cd:32:b6:a9:5b:45:48:2c:08:7d:47: fa:46:08:96:f8:b1:28:6d:2f:5f:e9:ca:ba:27:4b: 14:db:dd:8d:59:61:eb:f7:3c:4e:f1:b9:8b:41:93: fb:cf:6d:6c:71:4a:33:24:a9:a4:f5:52:61:3a:fc: 7d:2b:52:ad:c4:e6:47:1f:e2:b1:fc:ad:14:96:da: 74:8e:24:95:ce:3d:6b:d6:01:a3:e5:0e:b1:61:b1: 8c:0a:1d:20:1a:ab:67:8a:3a:37:70:fc:bb:ca:a1: cb:80:2f:d5:54:08:4a:d0:20:c3:84:6a:ff:24:0c: 52:ba:a5:28:a4:44:56:a2:2a:96:6e:1c:ea:1a:d8: a4:e6:ad:57:b4:c0:7d:0c:aa:ca:23:e5:0d:be:e0: 6a:b5:9f:16:ea:32:d4:19:37:d5:ea:8f:2a:93:99: 0d:aa:c5:6c:9f:e1:16:30:8d:51:fd:2d:e5:4b:d7: 0d:db:f8:5f:59:ae:ef:22:d2:19:7b:53:73:13:ef: 04:c1:22:a7:09:99:ae:09:aa:3b:ce:e7:b5:7a:72: a1:89:2f:3e:1a:77:d9:c3:81:43:b3:25:1e:67:63: fa:fa:ae:91:03:3e:23:c2:44:35:11:94:5d:10:69: 64:99:7d:21:1a:ab:81:f6:3a:85:e6:87:79:8e:46: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E1:E8:65:C7:35:3E:FA:F5:B8:9A:60:C4:8B:67:C9:20:66:7F:A1 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS19318.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.156.0/24 Signature Algorithm: sha256WithRSAEncryption 87:0d:3f:9c:b5:d0:0f:10:cf:92:f5:c1:11:48:91:13:25:8b: b4:c6:77:0d:3f:21:52:7a:77:03:5b:8b:8e:b7:8f:61:e1:39: 79:09:e4:8a:06:56:91:aa:1a:de:0c:24:2f:e1:95:bc:19:f7: 6c:f8:f6:ea:80:54:2a:5a:a2:e0:72:29:b2:4f:ff:25:d9:f7: fe:6e:93:82:3b:31:8a:50:f6:dd:db:32:68:89:e2:61:94:61: 00:d9:f9:f9:79:78:f1:38:28:75:9c:e3:9b:ad:6f:1e:ac:7f: 54:36:85:6c:74:a5:a4:09:17:28:3a:db:33:2b:8e:c6:a0:d4: 9e:7b:74:c0:88:db:ed:a8:09:a5:8b:42:51:7e:42:46:5e:7c: f2:95:01:2d:d1:cb:bf:5e:14:e5:44:c1:80:1c:99:67:c1:c3: 74:ab:2e:10:70:89:27:71:86:54:c9:63:5c:fa:d7:ca:b7:72: a4:6e:8d:6d:e2:32:4b:5a:14:d3:31:f9:fb:8b:23:33:ad:00: 65:fe:88:b3:60:42:87:41:e3:af:b6:a1:4b:57:c6:f4:1b:ad: 3a:16:53:7f:d0:6a:5f:b4:3d:48:04:c2:f5:2e:d9:23:a5:62: 94:bb:e9:82:ee:75:2c:72:55:4f:b5:f8:b9:55:82:e2:f1:33: f2:91:8a:ac -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUbupT3Z1laOIGqXVBOPFdkZCHT6IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzEyMTIwMzA2WhcNMjYwMzExMTIwODA2 WjAzMTEwLwYDVQQDEygyNEUxRTg2NUM3MzUzRUZBRjVCODlBNjBDNDhCNjdDOTIw NjY3RkExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaOTzTK2qVtF SCwIfUf6RgiW+LEobS9f6cq6J0sU292NWWHr9zxO8bmLQZP7z21scUozJKmk9VJh Ovx9K1KtxOZHH+Kx/K0Ultp0jiSVzj1r1gGj5Q6xYbGMCh0gGqtnijo3cPy7yqHL gC/VVAhK0CDDhGr/JAxSuqUopERWoiqWbhzqGtik5q1XtMB9DKrKI+UNvuBqtZ8W 6jLUGTfV6o8qk5kNqsVsn+EWMI1R/S3lS9cN2/hfWa7vItIZe1NzE+8EwSKnCZmu Cao7zue1enKhiS8+GnfZw4FDsyUeZ2P6+q6RAz4jwkQ1EZRdEGlkmX0hGquB9jqF 5od5jka5MQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFCTh6GXHNT769biaYMSLZ8kg Zn+hMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE5MzE4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqcMA0GCSqGSIb3DQEBCwUAA4IB AQCHDT+ctdAPEM+S9cERSJETJYu0xncNPyFSencDW4uOt49h4Tl5CeSKBlaRqhre DCQv4ZW8Gfds+PbqgFQqWqLgcimyT/8l2ff+bpOCOzGKUPbd2zJoieJhlGEA2fn5 eXjxOCh1nOObrW8erH9UNoVsdKWkCRcoOtszK47GoNSee3TAiNvtqAmli0JRfkJG XnzylQEt0cu/XhTlRMGAHJlnwcN0qy4QcIkncYZUyWNc+tfKt3Kkbo1t4jJLWhTT Mfn7iyMzrQBl/oizYEKHQeOvtqFLV8b0G606FlN/0GpftD1IBML1LtkjpWKUu+mC 7nUsclVPtfi5VYLi8TPykYqs -----END CERTIFICATE-----Generated at Sat Apr 5 13:03:32 2025 by rpki-client