$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25693.roa File: AS25693.roa (raw, json) Hash identifier: 7U6pgOfRkrVpNKeSMfUIMlv4eE91pcRANGryOVN3AMw= Subject key identifier: 38:BE:2F:B7:A0:E8:F6:97:B6:A7:0A:81:E5:A6:34:1D:BE:24:CF:B7 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 69C3A493EB08F9F4DAA93366095BE2855C3FECE8 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25693.roa Signing time: Wed 02 Apr 2025 18:11:36 +0000 ROA not before: Wed 02 Apr 2025 18:06:36 +0000 ROA not after: Wed 01 Apr 2026 18:11:36 +0000 asID: 25693 IP address blocks: 104.234.24.0/23 maxlen: 24 104.234.36.0/23 maxlen: 24 104.234.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 19:15:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:c3:a4:93:eb:08:f9:f4:da:a9:33:66:09:5b:e2:85:5c:3f:ec:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 2 18:06:36 2025 GMT Not After : Apr 1 18:11:36 2026 GMT Subject: CN=38BE2FB7A0E8F697B6A70A81E5A6341DBE24CFB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:cb:03:d4:8f:93:54:d3:af:21:33:8e:56: 7f:3a:13:ea:58:1d:b4:e4:00:94:d3:21:c3:38:28: 67:a7:cd:af:96:32:06:8d:5e:a2:a2:d0:be:4d:4e: b9:09:bc:0a:ab:37:d5:f7:fa:ba:ca:c0:1c:48:16: 9a:21:de:83:bb:3f:3c:00:87:8e:8b:18:77:8b:5d: f6:55:e3:42:e3:b2:54:79:d7:57:e5:41:e4:ad:3b: 01:86:28:3a:dd:cf:5a:bb:b4:cb:e6:50:5b:f6:ab: 1c:ff:e3:95:fa:90:c8:1c:8c:af:1c:68:7f:ae:9a: 65:74:db:27:07:ff:f0:d6:01:af:f8:fe:b2:b5:47: 4b:59:53:bf:99:d9:2e:90:d3:7d:0a:8e:f8:5b:82: ee:05:fc:54:f9:29:10:43:82:d6:72:57:84:14:6d: 78:fb:36:6e:a5:fe:33:2b:27:09:56:d2:80:ea:b3: 29:a5:a6:77:fa:39:62:4c:6a:7f:43:ec:2e:33:17: bd:eb:c1:31:6c:17:84:5b:33:a4:e7:d0:82:f5:4c: 0b:91:ec:cb:aa:9b:cb:a1:62:93:f7:2f:3f:f5:88: 8c:36:2d:0e:cf:7a:cc:84:e5:d6:20:7b:8a:e6:44: 42:b4:a4:23:3b:96:ba:d1:e5:39:1e:af:16:06:41: aa:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:BE:2F:B7:A0:E8:F6:97:B6:A7:0A:81:E5:A6:34:1D:BE:24:CF:B7 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.24.0/23 104.234.36.0/23 104.234.60.0/23 Signature Algorithm: sha256WithRSAEncryption 13:49:69:b8:19:a5:1d:ff:8a:3c:b7:f1:f9:bf:96:9f:1d:9f: 61:60:6b:ab:b0:48:05:27:2b:ba:88:63:34:4f:53:16:f5:fe: dc:4f:40:1d:91:95:2b:f8:51:5d:46:42:1f:ad:83:fb:7a:9b: 57:53:63:ca:68:c5:f2:9e:af:3f:0d:20:f8:7f:d1:2f:f7:3c: 94:5f:d3:a4:d7:e3:29:c3:43:f4:1e:51:66:51:d1:a3:49:1e: 57:56:8f:ab:db:b9:02:00:14:c6:4c:01:09:9e:d5:f3:8f:bf: 0b:93:e7:44:da:c3:29:69:16:41:d7:ff:3c:30:65:0b:94:f4: 66:d7:09:76:a7:25:b7:bb:4c:f7:f6:e6:86:4d:e0:1d:79:c9: 29:aa:72:e6:37:b8:7d:21:d4:28:56:e9:86:4f:a3:35:31:98: 39:ba:f5:c2:cb:0b:c7:9f:67:a5:fb:55:d7:34:65:7d:69:f9: b7:5c:82:4e:0e:67:f4:13:98:de:f3:0c:d2:5a:eb:f0:e4:8c: e3:6d:73:df:ab:da:44:ce:32:31:36:0c:b7:ad:01:e5:1a:08: 07:1c:a9:22:6d:26:f4:e2:c9:2e:c5:b8:ed:15:d2:63:de:b3: f8:ec:a2:5b:56:2b:28:79:86:b3:dd:e1:fc:4d:d2:79:d4:e9: 3e:be:2e:6c -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUacOkk+sI+fTaqTNmCVvihVw/7OgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDAyMTgwNjM2WhcNMjYwNDAxMTgxMTM2 WjAzMTEwLwYDVQQDEygzOEJFMkZCN0EwRThGNjk3QjZBNzBBODFFNUE2MzQxREJF MjRDRkI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMDLA9SPk1TT ryEzjlZ/OhPqWB205ACU0yHDOChnp82vljIGjV6iotC+TU65CbwKqzfV9/q6ysAc SBaaId6Duz88AIeOixh3i132VeNC47JUeddX5UHkrTsBhig63c9au7TL5lBb9qsc /+OV+pDIHIyvHGh/rppldNsnB//w1gGv+P6ytUdLWVO/mdkukNN9Co74W4LuBfxU +SkQQ4LWcleEFG14+zZupf4zKycJVtKA6rMppaZ3+jliTGp/Q+wuMxe968ExbBeE WzOk59CC9UwLkezLqpvLoWKT9y8/9YiMNi0Oz3rMhOXWIHuK5kRCtKQjO5a60eU5 Hq8WBkGqWwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFDi+L7eg6PaXtqcKgeWmNB2+ JM+3MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI1NjkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBaOoYAwQBaOokAwQBaOo8MA0GCSqG SIb3DQEBCwUAA4IBAQATSWm4GaUd/4o8t/H5v5afHZ9hYGursEgFJyu6iGM0T1MW 9f7cT0AdkZUr+FFdRkIfrYP7eptXU2PKaMXynq8/DSD4f9Ev9zyUX9Ok1+Mpw0P0 HlFmUdGjSR5XVo+r27kCABTGTAEJntXzj78Lk+dE2sMpaRZB1/88MGULlPRm1wl2 pyW3u0z39uaGTeAdeckpqnLmN7h9IdQoVumGT6M1MZg5uvXCywvHn2el+1XXNGV9 afm3XIJODmf0E5je8wzSWuvw5IzjbXPfq9pEzjIxNgy3rQHlGggHHKkibSb04sku xbjtFdJj3rP47KJbVisoeYaz3eH8TdJ51Ok+vi5s -----END CERTIFICATE-----Generated at Tue Apr 8 22:02:55 2025 by rpki-client