$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa File: AS215672.roa (raw, json) Hash identifier: kcS1i00BRcq9JesBVIDDVsDmGGJXQd4i9zYN2CKPGnE= Subject key identifier: 04:F7:6B:03:8D:83:5A:F1:D1:21:96:D1:AF:41:A3:FA:D0:01:7C:B9 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3A9BFDDB4255FEBF3A73085628205C1731CC11E7 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa Signing time: Tue 28 Jan 2025 13:52:51 +0000 ROA not before: Tue 28 Jan 2025 13:47:51 +0000 ROA not after: Tue 27 Jan 2026 13:52:51 +0000 asID: 215672 IP address blocks: 104.234.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 04:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:9b:fd:db:42:55:fe:bf:3a:73:08:56:28:20:5c:17:31:cc:11:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 28 13:47:51 2025 GMT Not After : Jan 27 13:52:51 2026 GMT Subject: CN=04F76B038D835AF1D12196D1AF41A3FAD0017CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9a:28:00:3f:27:e5:52:02:a1:3b:94:5c:52: 72:4d:68:05:b1:7e:d1:8e:40:a1:53:cd:f6:33:6b: 5f:18:12:dd:56:49:d5:1e:fb:89:fd:31:84:b0:2d: 47:d9:96:31:75:77:d5:56:3b:8f:c4:ee:b7:53:2e: ea:18:9f:52:86:5f:01:26:68:17:cf:ce:e4:e1:35: 10:e2:47:ed:c5:fc:04:6e:53:5f:8f:a1:20:b2:1d: 5a:3c:51:02:68:d6:5e:f0:aa:ef:5c:0a:6f:f7:a1: 2c:da:c9:47:12:68:71:93:d5:f5:8b:7d:90:42:6d: 42:ca:3f:f9:c6:67:ae:09:ea:ec:7b:b7:2e:7b:3d: a0:72:23:46:75:1c:a2:fa:e5:76:0f:04:32:71:9b: 66:70:20:ce:dd:68:5e:fa:b4:c5:a1:01:09:2c:82: 8c:51:01:8d:ed:fe:8b:4c:3d:d2:37:34:28:0f:e9: 40:26:15:b2:ed:c7:5f:b8:a5:43:1a:ec:2b:ce:94: 2e:12:c7:94:10:e4:f1:1a:93:97:fd:9a:e4:46:9a: 0c:ca:78:a9:f5:b0:a8:02:2c:11:4f:fb:c3:ac:c5: ae:29:fb:72:c9:d5:11:01:d9:fd:21:55:de:8f:fc: 81:c6:3c:16:2b:ac:5d:86:a2:af:e0:44:42:ee:4b: 20:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:6B:03:8D:83:5A:F1:D1:21:96:D1:AF:41:A3:FA:D0:01:7C:B9 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS215672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.151.0/24 Signature Algorithm: sha256WithRSAEncryption 86:e8:a5:56:a7:e9:28:58:13:b9:e8:4d:11:fe:68:3d:aa:25: a0:8e:a8:8f:ba:7d:3d:45:e0:b6:89:6b:fb:ba:11:91:10:b2: 7d:93:49:1c:4b:88:5d:01:de:09:10:7c:96:d9:28:77:9a:27: 33:47:5a:d2:29:81:2c:53:90:15:5d:0a:ec:ed:be:13:55:90: a1:b8:24:d0:9a:1e:46:f2:18:a4:13:b6:2f:4a:4f:60:2f:e1: 3e:10:07:c1:4c:fa:14:20:e9:34:26:99:39:4b:0e:ee:bd:30: 2c:bf:40:e7:b5:49:2e:d8:ce:98:f5:e0:92:f0:7a:5e:83:f2: b1:62:1a:2d:80:7b:73:f6:dc:1c:04:2e:66:68:b5:45:1e:5d: e4:56:fe:6f:c6:cb:a8:e3:73:82:e3:f9:99:23:87:d3:4b:7c: d2:6b:2d:e3:bc:74:bc:59:c4:95:35:b6:82:05:3d:bf:f7:20: af:0c:63:8d:df:4e:12:32:86:ae:69:fa:ee:ad:ad:53:13:76: 1f:ac:1d:be:20:5a:a9:6f:f1:ad:9a:a2:d8:28:4d:c4:d9:b9: d8:5d:b3:eb:62:cb:a2:c2:0b:c7:3f:7f:27:ab:aa:55:cd:aa: e3:64:eb:f3:76:c2:a1:f4:c0:49:66:ed:aa:6e:e8:98:a1:f4: ce:5b:79:32 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUOpv920JV/r86cwhWKCBcFzHMEecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTI4MTM0NzUxWhcNMjYwMTI3MTM1MjUx WjAzMTEwLwYDVQQDEygwNEY3NkIwMzhEODM1QUYxRDEyMTk2RDFBRjQxQTNGQUQw MDE3Q0I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pooAD8n5VIC oTuUXFJyTWgFsX7RjkChU832M2tfGBLdVknVHvuJ/TGEsC1H2ZYxdXfVVjuPxO63 Uy7qGJ9Shl8BJmgXz87k4TUQ4kftxfwEblNfj6Egsh1aPFECaNZe8KrvXApv96Es 2slHEmhxk9X1i32QQm1Cyj/5xmeuCerse7cuez2gciNGdRyi+uV2DwQycZtmcCDO 3Whe+rTFoQEJLIKMUQGN7f6LTD3SNzQoD+lAJhWy7cdfuKVDGuwrzpQuEseUEOTx GpOX/ZrkRpoMynip9bCoAiwRT/vDrMWuKftyydURAdn9IVXej/yBxjwWK6xdhqKv 4ERC7ksgvQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFAT3awONg1rx0SGW0a9Bo/rQ AXy5MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNTY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqlzANBgkqhkiG9w0BAQsFAAOC AQEAhuilVqfpKFgTuehNEf5oPaoloI6oj7p9PUXgtolr+7oRkRCyfZNJHEuIXQHe CRB8ltkod5onM0da0imBLFOQFV0K7O2+E1WQobgk0JoeRvIYpBO2L0pPYC/hPhAH wUz6FCDpNCaZOUsO7r0wLL9A57VJLtjOmPXgkvB6XoPysWIaLYB7c/bcHAQuZmi1 RR5d5Fb+b8bLqONzguP5mSOH00t80mst47x0vFnElTW2ggU9v/cgrwxjjd9OEjKG rmn67q2tUxN2H6wdviBaqW/xrZqi2ChNxNm52F2z62LLosILxz9/J6uqVc2q42Tr 83bCofTASWbtqm7omKH0zlt5Mg== -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:30 2025 by rpki-client