$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa File: AS61317.roa (raw, json) Hash identifier: z5t1g6odhz+t3PSzzVnyYSjPtGADUsU+05oILFsMcSc= Subject key identifier: 84:46:63:B4:0C:FF:5F:C5:55:C1:47:69:82:C8:0E:0F:FB:8A:E5:E3 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7B9AC390965BA4A8D5FD42EF465128603E5AE751 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa Signing time: Thu 16 Jan 2025 06:50:53 +0000 ROA not before: Thu 16 Jan 2025 06:45:53 +0000 ROA not after: Thu 15 Jan 2026 06:50:53 +0000 asID: 61317 IP address blocks: 104.234.38.0/24 maxlen: 24 104.234.39.0/24 maxlen: 24 104.234.128.0/23 maxlen: 24 104.234.144.0/24 maxlen: 24 104.234.148.0/24 maxlen: 24 206.53.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 06:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:9a:c3:90:96:5b:a4:a8:d5:fd:42:ef:46:51:28:60:3e:5a:e7:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jan 16 06:45:53 2025 GMT Not After : Jan 15 06:50:53 2026 GMT Subject: CN=844663B40CFF5FC555C1476982C80E0FFB8AE5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:4d:83:87:d3:a4:c6:4b:4d:38:94:98:3c:13: 4c:2a:84:f0:fa:ef:e1:27:59:d8:df:dd:cd:68:4f: 6c:0e:86:89:f6:2a:8a:c3:45:e2:91:e1:68:1b:d0: b1:0a:c5:b3:06:e3:dd:7b:09:ef:fc:15:2c:64:6b: 38:62:02:8d:0f:7e:f4:7c:f1:e1:1e:4b:72:90:8d: af:2b:5c:6d:fc:5e:b3:ff:24:40:82:b0:bc:09:01: 57:28:d2:1f:b5:0b:4d:8e:c1:de:44:d4:37:e9:b5: 4d:80:ab:16:68:ff:a6:3e:41:ea:71:b7:b0:e5:04: a0:1d:4c:c7:9a:f5:0c:51:1c:e3:08:80:e5:a2:89: b5:80:a7:67:44:07:ca:e2:24:fe:5b:ea:b1:57:d2: b9:a6:ca:2e:be:ef:6d:cb:34:ec:47:98:97:8e:13: aa:a3:5e:2f:f3:28:12:08:c7:a8:a5:0c:e8:e6:e2: c9:44:15:70:01:ea:92:9b:ba:a1:1e:b4:7e:df:a0: ad:65:42:3f:3c:02:15:64:9a:54:60:7d:66:ea:44: 44:bf:82:8c:ac:5d:0f:0b:df:44:45:fc:11:dc:dc: 17:25:31:5b:4a:4f:e2:21:23:90:a2:d6:48:e7:a3: ca:83:59:4f:0b:85:8b:f5:bd:f7:b3:f2:12:8f:e1: 0e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:46:63:B4:0C:FF:5F:C5:55:C1:47:69:82:C8:0E:0F:FB:8A:E5:E3 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.38.0/23 104.234.128.0/23 104.234.144.0/24 104.234.148.0/24 206.53.54.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:f3:54:a2:c5:a8:b4:f6:4f:ae:e8:10:13:5b:08:4b:9b:b8: ea:45:d5:a2:b3:ae:d4:52:a4:7a:8e:9e:03:6a:c5:e6:b0:7f: 8a:7f:88:7e:a5:c9:ae:83:24:95:d2:1e:92:3c:fa:17:54:48: 6a:04:b4:88:30:03:4e:29:25:89:6a:85:3a:6f:8a:25:2d:d5: 34:a6:57:9b:94:37:11:2d:34:04:ec:6b:84:5e:da:23:87:b4: 62:88:90:97:50:f1:73:f5:c1:03:e0:26:c1:a3:f1:b8:9b:0d: 6a:e2:80:1f:24:bb:8c:56:e1:b8:d2:f8:c2:ca:8c:ab:56:2a: 1d:0c:c4:dd:29:1c:6d:53:ac:ac:87:c1:c0:e6:39:3a:78:9c: 19:28:86:ea:73:9e:43:f7:e3:9b:57:54:42:ab:00:ec:00:66: 8a:8e:c6:50:72:4b:91:65:d6:18:5b:ac:c3:22:bf:da:40:95: 55:cb:58:7e:ac:f6:d4:97:70:22:28:7b:d7:3f:8a:b4:9e:a7: 01:f9:28:ea:9a:6b:7b:e4:ae:69:9c:ad:50:bc:1b:17:71:b5: 15:f8:be:65:a8:9f:f7:53:80:38:87:34:29:cd:d7:9e:01:de: ee:6d:ae:a5:c4:e5:29:86:bf:0a:23:1d:a2:05:e2:b8:62:ec: c5:0a:74:6d -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUe5rDkJZbpKjV/ULvRlEoYD5a51EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMTE2MDY0NTUzWhcNMjYwMTE1MDY1MDUz WjAzMTEwLwYDVQQDEyg4NDQ2NjNCNDBDRkY1RkM1NTVDMTQ3Njk4MkM4MEUwRkZC OEFFNUUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq02Dh9OkxktN OJSYPBNMKoTw+u/hJ1nY393NaE9sDoaJ9iqKw0XikeFoG9CxCsWzBuPdewnv/BUs ZGs4YgKND370fPHhHktykI2vK1xt/F6z/yRAgrC8CQFXKNIftQtNjsHeRNQ36bVN gKsWaP+mPkHqcbew5QSgHUzHmvUMURzjCIDloom1gKdnRAfK4iT+W+qxV9K5psou vu9tyzTsR5iXjhOqo14v8ygSCMeopQzo5uLJRBVwAeqSm7qhHrR+36CtZUI/PAIV ZJpUYH1m6kREv4KMrF0PC99ERfwR3NwXJTFbSk/iISOQotZI56PKg1lPC4WL9b33 s/ISj+EO7QIDAQABo4ICljCCApIwHQYDVR0OBBYEFIRGY7QM/1/FVcFHaYLIDg/7 iuXjMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzYxMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBaOomAwQBaOqAAwQAaOqQAwQAaOqU AwQAzjU2MA0GCSqGSIb3DQEBCwUAA4IBAQAe81Sixai09k+u6BATWwhLm7jqRdWi s67UUqR6jp4DasXmsH+Kf4h+pcmugySV0h6SPPoXVEhqBLSIMANOKSWJaoU6b4ol LdU0pleblDcRLTQE7GuEXtojh7RiiJCXUPFz9cED4CbBo/G4mw1q4oAfJLuMVuG4 0vjCyoyrViodDMTdKRxtU6ysh8HA5jk6eJwZKIbqc55D9+ObV1RCqwDsAGaKjsZQ ckuRZdYYW6zDIr/aQJVVy1h+rPbUl3AiKHvXP4q0nqcB+Sjqmmt75K5pnK1QvBsX cbUV+L5lqJ/3U4A4hzQpzdeeAd7uba6lxOUphr8KIx2iBeK4YuzFCnRt -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:23 2025 by rpki-client