$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa File: AS214024.roa (raw, json) Hash identifier: R2wQ213tZmx/y84UEJ56ALzDyPOnWOIWhyA4GLW8X94= Subject key identifier: EA:BB:9F:25:F8:EF:05:76:FE:17:A6:D1:71:D3:CB:0A:C9:C8:83:2A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5340870560C9CD983ECB99AEC6EFC79CBCA765FC Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa Signing time: Sat 26 Apr 2025 12:19:22 +0000 ROA not before: Sat 26 Apr 2025 12:14:22 +0000 ROA not after: Sat 25 Apr 2026 12:19:22 +0000 asID: 214024 IP address blocks: 104.234.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 15:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:40:87:05:60:c9:cd:98:3e:cb:99:ae:c6:ef:c7:9c:bc:a7:65:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 26 12:14:22 2025 GMT Not After : Apr 25 12:19:22 2026 GMT Subject: CN=EABB9F25F8EF0576FE17A6D171D3CB0AC9C8832A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f4:e1:e6:5c:8f:68:77:cb:24:72:56:51:4d: 26:e6:5f:ef:40:84:c8:8f:42:52:22:67:eb:b0:d0: 36:11:06:6b:98:5d:b0:50:5f:e3:33:3a:58:03:5b: 1a:b3:e0:e4:8f:a4:5d:64:49:81:fd:dd:ac:ab:0a: 6a:f2:cd:af:d7:6a:d2:7e:27:75:db:50:18:44:71: 42:48:fd:af:1f:63:e8:4a:d5:2f:26:56:cd:27:6d: 01:3f:8e:7d:03:52:fd:bb:0b:3a:97:c0:ee:5b:ef: 77:a9:6c:96:a1:0d:2e:b1:5d:3e:5d:6e:00:8d:fa: 0b:5c:8a:02:c5:9d:51:b2:5d:38:57:a9:56:d3:a0: 7c:4f:81:60:fb:2e:19:3e:1e:27:fe:fc:83:a3:de: ef:36:69:d3:f5:fa:4b:97:3d:7d:a0:8e:60:82:35: ab:5d:25:1b:1e:53:d6:95:57:a5:77:6b:00:90:fa: b9:3f:2c:f9:a9:e1:fe:6f:d6:23:71:c0:52:c2:83: 8c:1d:43:58:e4:9f:45:7d:3d:81:d9:d5:5d:ca:94: 39:17:c8:85:2f:3f:50:3b:6e:0d:56:e7:de:67:7d: 22:a2:89:9d:4d:9b:52:f7:ae:08:51:92:2d:4d:2c: 35:bf:c0:78:9f:40:62:2f:cc:6e:c4:94:c9:c6:c4: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:BB:9F:25:F8:EF:05:76:FE:17:A6:D1:71:D3:CB:0A:C9:C8:83:2A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214024.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.247.0/24 Signature Algorithm: sha256WithRSAEncryption 09:9f:1f:99:d5:e2:53:21:e7:e5:bb:57:eb:fe:b3:fb:00:6d: b5:08:b0:d8:c7:98:b8:4e:70:52:a6:27:f4:bd:85:5d:cf:7f: 7b:5a:ac:b6:c0:41:c5:67:6f:5e:c3:6f:07:8b:ac:fd:3d:5a: 00:18:0a:ec:bd:7a:41:18:7e:29:2a:cf:ad:63:52:15:16:b2: 67:cc:47:1a:46:85:75:6e:70:44:76:37:84:2f:63:2a:39:77: 5b:53:db:5e:31:f5:63:d8:ff:2e:1b:77:d4:f9:1c:28:f4:c9: 1c:3a:9c:3a:09:9b:e5:a4:45:63:c1:e3:36:55:86:08:f0:49: 17:bc:1a:c0:f7:96:6f:fb:bc:3d:21:6d:7e:bc:ce:4c:04:cd: e6:f8:b3:ce:d2:ad:16:52:09:0c:8e:1f:7f:30:32:4b:25:fb: 03:36:91:64:68:25:20:3a:41:40:6f:e9:88:36:81:81:50:34: 5b:fa:a5:7d:64:56:2b:76:4e:51:70:91:51:4b:d7:b6:ed:31: 97:0b:63:09:61:8e:48:e1:3d:8f:40:9d:f3:25:2b:11:ad:c7: 48:ad:51:c9:1b:10:5e:42:93:ba:48:c0:83:85:2c:c9:c4:f0: a2:53:05:f9:e9:d1:63:81:36:e1:cf:44:84:b0:6b:70:c3:30: 61:c6:98:68 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUU0CHBWDJzZg+y5muxu/HnLynZfwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDI2MTIxNDIyWhcNMjYwNDI1MTIxOTIy WjAzMTEwLwYDVQQDEyhFQUJCOUYyNUY4RUYwNTc2RkUxN0E2RDE3MUQzQ0IwQUM5 Qzg4MzJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0fTh5lyPaHfL JHJWUU0m5l/vQITIj0JSImfrsNA2EQZrmF2wUF/jMzpYA1sas+Dkj6RdZEmB/d2s qwpq8s2v12rSfid121AYRHFCSP2vH2PoStUvJlbNJ20BP459A1L9uws6l8DuW+93 qWyWoQ0usV0+XW4AjfoLXIoCxZ1Rsl04V6lW06B8T4Fg+y4ZPh4n/vyDo97vNmnT 9fpLlz19oI5ggjWrXSUbHlPWlVeld2sAkPq5Pyz5qeH+b9YjccBSwoOMHUNY5J9F fT2B2dVdypQ5F8iFLz9QO24NVufeZ30ioomdTZtS964IUZItTSw1v8B4n0BiL8xu xJTJxsT5cQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFOq7nyX47wV2/hem0XHTywrJ yIMqMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNDAyNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq9zANBgkqhkiG9w0BAQsFAAOC AQEACZ8fmdXiUyHn5btX6/6z+wBttQiw2MeYuE5wUqYn9L2FXc9/e1qstsBBxWdv XsNvB4us/T1aABgK7L16QRh+KSrPrWNSFRayZ8xHGkaFdW5wRHY3hC9jKjl3W1Pb XjH1Y9j/Lht31PkcKPTJHDqcOgmb5aRFY8HjNlWGCPBJF7wawPeWb/u8PSFtfrzO TATN5vizztKtFlIJDI4ffzAySyX7AzaRZGglIDpBQG/piDaBgVA0W/qlfWRWK3ZO UXCRUUvXtu0xlwtjCWGOSOE9j0Cd8yUrEa3HSK1RyRsQXkKTukjAg4UsycTwolMF +enRY4E24c9EhLBrcMMwYcaYaA== -----END CERTIFICATE-----Generated at Fri Jun 6 13:27:26 2025 by rpki-client