$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147003.roa File: AS147003.roa (raw, json) Hash identifier: xRq280FdkP7vu5ikEvTJFS9h6DWsEsPRZHR6w2+jyhU= Subject key identifier: 6C:D0:C5:D7:9B:F2:08:6A:CD:69:DC:F4:BB:6E:CE:F2:52:C3:6B:65 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7B4CD30EFB418301A564FF941ED0E3CE8A297B90 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147003.roa Signing time: Thu 17 Apr 2025 16:28:30 +0000 ROA not before: Thu 17 Apr 2025 16:23:30 +0000 ROA not after: Thu 16 Apr 2026 16:28:30 +0000 asID: 147003 IP address blocks: 104.234.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 13:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4c:d3:0e:fb:41:83:01:a5:64:ff:94:1e:d0:e3:ce:8a:29:7b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 17 16:23:30 2025 GMT Not After : Apr 16 16:28:30 2026 GMT Subject: CN=6CD0C5D79BF2086ACD69DCF4BB6ECEF252C36B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:50:4b:7f:d9:19:46:9c:fc:9a:fa:a0:13:19: db:fb:88:d6:26:b3:22:3d:a9:db:31:42:95:5a:50: 37:86:f4:47:f3:de:38:21:48:61:30:c9:15:35:a7: 79:af:5d:9a:21:ab:0b:96:7b:62:77:b1:de:a1:4b: 37:a9:c0:66:f2:77:94:22:76:21:d9:6b:0a:e6:5a: 6d:00:5e:a3:97:01:77:99:f1:a7:72:69:21:95:f1: f3:54:f3:5d:e5:32:5e:93:89:15:a9:bd:5f:d2:ba: c0:0c:44:fe:e9:52:c6:b9:82:e3:12:cc:80:dc:55: b7:f7:dd:f2:cb:bf:69:cf:e7:68:5f:ce:5a:0a:39: 77:24:59:13:6b:04:f5:bd:a6:7a:e6:b7:3f:aa:e9: 64:d0:5d:7d:c7:30:22:56:f9:9d:64:9f:56:13:0e: 86:ec:20:2b:f0:1d:f8:d9:5a:da:e5:77:22:5d:41: 26:f0:41:9c:4c:10:48:bf:d4:e4:1b:0d:f9:a1:8a: 1c:c5:1e:99:b9:96:14:2f:0b:63:ab:9b:46:55:57: 76:d8:e3:63:bd:1c:09:41:3c:be:86:c2:2b:5a:4d: d3:ec:96:57:cf:24:3c:58:6b:6c:2d:e1:95:bc:1e: 02:61:df:5b:88:d5:8f:62:2e:4e:b5:57:12:4c:98: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D0:C5:D7:9B:F2:08:6A:CD:69:DC:F4:BB:6E:CE:F2:52:C3:6B:65 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS147003.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.15.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:36:04:05:71:f4:85:9b:81:63:a4:1c:61:96:ea:73:4b:c5: e3:cd:b8:81:16:62:87:68:8f:59:ec:30:10:3e:9f:9a:b8:31: 87:0a:1d:27:a0:e2:b8:aa:00:cd:0a:74:2d:8c:19:41:7b:84: 03:ff:ea:b4:3a:0d:be:f8:82:bd:e1:15:71:94:f8:6c:0a:83: 58:ba:96:55:b1:d5:d7:54:c8:02:dd:7c:3c:fb:29:1d:09:1e: 15:e5:0b:f0:2a:98:fb:ce:c2:d6:77:bf:f5:66:3a:05:8d:f9: 3c:97:ff:ea:60:d9:f1:c2:3f:01:30:94:44:52:c8:50:dd:92: bc:e9:47:57:eb:4a:4b:dd:7b:15:42:c7:e8:35:08:0f:2b:1d: 6c:c5:7a:ca:55:7f:e0:63:5c:3c:28:e8:c9:a6:15:75:ec:d0: 70:7c:fe:6b:dc:00:25:de:b2:ec:fe:45:08:2e:5e:b6:44:a1: 7c:fc:f0:5f:c0:1f:2e:9f:de:66:f5:43:66:2f:67:e8:32:0f: 53:b7:69:1a:40:41:56:79:94:bb:d6:95:04:c3:f7:c7:5d:62: b3:c8:4a:74:cd:2c:61:e4:65:5d:a7:7d:41:f1:4d:32:1a:6e: 85:7f:a5:3c:80:5e:4d:c0:84:c4:f4:50:13:4b:6e:e3:e0:ff: 73:e8:4f:58 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUe0zTDvtBgwGlZP+UHtDjzoope5AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDE3MTYyMzMwWhcNMjYwNDE2MTYyODMw WjAzMTEwLwYDVQQDEyg2Q0QwQzVENzlCRjIwODZBQ0Q2OURDRjRCQjZFQ0VGMjUy QzM2QjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VBLf9kZRpz8 mvqgExnb+4jWJrMiPanbMUKVWlA3hvRH8944IUhhMMkVNad5r12aIasLlntid7He oUs3qcBm8neUInYh2WsK5lptAF6jlwF3mfGncmkhlfHzVPNd5TJek4kVqb1f0rrA DET+6VLGuYLjEsyA3FW3993yy79pz+doX85aCjl3JFkTawT1vaZ65rc/qulk0F19 xzAiVvmdZJ9WEw6G7CAr8B342Vra5XciXUEm8EGcTBBIv9TkGw35oYocxR6ZuZYU Lwtjq5tGVVd22ONjvRwJQTy+hsIrWk3T7JZXzyQ8WGtsLeGVvB4CYd9biNWPYi5O tVcSTJjJLQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGzQxdeb8ghqzWnc9LtuzvJS w2tlMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE0NzAwMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqDzANBgkqhkiG9w0BAQsFAAOC AQEAPDYEBXH0hZuBY6QcYZbqc0vF4824gRZih2iPWewwED6fmrgxhwodJ6DiuKoA zQp0LYwZQXuEA//qtDoNvviCveEVcZT4bAqDWLqWVbHV11TIAt18PPspHQkeFeUL 8CqY+87C1ne/9WY6BY35PJf/6mDZ8cI/ATCURFLIUN2SvOlHV+tKS917FULH6DUI DysdbMV6ylV/4GNcPCjoyaYVdezQcHz+a9wAJd6y7P5FCC5etkShfPzwX8AfLp/e ZvVDZi9n6DIPU7dpGkBBVnmUu9aVBMP3x11is8hKdM0sYeRlXad9QfFNMhpuhX+l PIBeTcCExPRQE0tu4+D/c+hPWA== -----END CERTIFICATE-----Generated at Mon Apr 28 17:58:21 2025 by rpki-client