$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa File: AS152672.roa (raw, json) Hash identifier: C5hF5gF6p8uinUDySLADz/ZLOzwQv51ROt3vTv0fbdo= Subject key identifier: F8:E5:84:1D:2C:EC:C4:61:E4:6A:A6:A9:6A:37:AD:21:57:A6:43:5E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 728630D1581AF33F9D58B6D700251856643087B2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa Signing time: Sun 13 Apr 2025 04:28:29 +0000 ROA not before: Sun 13 Apr 2025 04:23:29 +0000 ROA not after: Sun 12 Apr 2026 04:28:29 +0000 asID: 152672 IP address blocks: 104.234.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:86:30:d1:58:1a:f3:3f:9d:58:b6:d7:00:25:18:56:64:30:87:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 13 04:23:29 2025 GMT Not After : Apr 12 04:28:29 2026 GMT Subject: CN=F8E5841D2CECC461E46AA6A96A37AD2157A6435E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:36:6d:2d:63:de:9a:23:ca:ac:70:15:d7:06: f9:4a:0a:4a:58:6f:d3:73:fd:55:b9:3f:87:e4:85: 7a:4a:0b:3d:8f:40:8e:b5:d7:a2:de:5e:09:a7:ad: 3f:30:0d:7e:ad:2c:30:08:d6:df:21:7f:b3:c7:0c: 33:ce:d9:0a:e6:95:2f:8c:80:ce:49:fd:ee:75:07: a8:19:30:da:25:81:70:57:80:fb:42:50:ed:9c:71: 4a:9a:4f:ef:4b:52:68:d8:f3:62:d1:69:1a:d6:c8: f8:b5:23:b3:4b:d5:40:76:62:dd:52:c9:7f:28:05: 46:c3:b0:52:dd:d4:73:9a:c8:72:76:85:84:01:80: 90:86:aa:f9:4e:b6:0c:77:ee:75:32:d9:17:24:f6: 26:eb:60:67:c9:3d:bf:f8:2b:4a:de:a5:79:74:53: 2a:0d:de:16:dd:79:2f:b7:0f:51:5a:be:9a:6b:84: 12:d4:57:c8:56:11:b3:74:cb:cd:31:24:7e:12:90: 80:d6:ff:83:43:3f:4d:e0:d7:d5:81:a7:11:9b:b5: b4:ba:13:41:91:4c:be:5c:1c:88:95:8a:5f:e6:e9: c5:5d:27:aa:27:c0:16:ec:7d:ad:ab:30:35:e9:1b: 1e:b0:51:21:4b:76:ce:93:64:69:76:dc:01:9d:10: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E5:84:1D:2C:EC:C4:61:E4:6A:A6:A9:6A:37:AD:21:57:A6:43:5E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS152672.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.69.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:32:25:20:ea:51:48:6e:03:42:33:ac:35:51:f3:c3:f0:ba: 4e:42:55:a1:b3:c0:4a:0c:17:c1:d9:35:ad:10:8b:a7:cd:09: 61:5f:d0:d2:12:19:b6:01:26:99:7a:44:28:e3:54:44:f3:be: 77:cd:20:17:7f:12:17:32:21:b6:d9:91:70:7b:b0:23:dd:3b: b5:92:b7:01:b1:c5:5a:b8:94:da:ad:68:43:2f:1c:53:16:d6: e4:c0:63:d2:e7:06:22:1a:f5:a1:10:bc:d1:4b:1a:cc:4d:de: 07:b6:f7:94:94:4b:98:db:c8:e1:04:cc:f7:ca:82:11:9f:f6: 4f:6e:51:1e:52:6b:6d:7f:d1:38:b8:b6:1f:5a:ed:93:02:aa: 95:e5:fb:91:48:48:60:68:2e:b2:b5:42:e9:0b:ae:69:7e:32: b4:26:1b:7f:c7:29:58:e1:4b:f4:4b:8d:6f:76:fd:55:3e:2e: 8c:b0:9c:f2:b5:21:d4:5a:7f:9d:46:af:0f:69:b4:87:b3:da: 11:f7:61:81:62:d7:dd:68:96:f4:14:bf:d1:c4:c5:cc:a7:fb: 46:30:68:f8:b5:e0:97:0c:63:a9:af:63:41:fd:3e:59:58:4d: 59:82:00:20:24:b3:d6:de:88:d8:d8:36:7b:38:cd:ae:6e:5d: 8f:76:a5:d0 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUcoYw0Vga8z+dWLbXACUYVmQwh7IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDEzMDQyMzI5WhcNMjYwNDEyMDQyODI5 WjAzMTEwLwYDVQQDEyhGOEU1ODQxRDJDRUNDNDYxRTQ2QUE2QTk2QTM3QUQyMTU3 QTY0MzVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTZtLWPemiPK rHAV1wb5SgpKWG/Tc/1VuT+H5IV6Sgs9j0COtdei3l4Jp60/MA1+rSwwCNbfIX+z xwwzztkK5pUvjIDOSf3udQeoGTDaJYFwV4D7QlDtnHFKmk/vS1Jo2PNi0Wka1sj4 tSOzS9VAdmLdUsl/KAVGw7BS3dRzmshydoWEAYCQhqr5TrYMd+51MtkXJPYm62Bn yT2/+CtK3qV5dFMqDd4W3Xkvtw9RWr6aa4QS1FfIVhGzdMvNMSR+EpCA1v+DQz9N 4NfVgacRm7W0uhNBkUy+XByIlYpf5unFXSeqJ8AW7H2tqzA16RsesFEhS3bOk2Rp dtwBnRBBDQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPjlhB0s7MRh5GqmqWo3rSFX pkNeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE1MjY3Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqRTANBgkqhkiG9w0BAQsFAAOC AQEALzIlIOpRSG4DQjOsNVHzw/C6TkJVobPASgwXwdk1rRCLp80JYV/Q0hIZtgEm mXpEKONURPO+d80gF38SFzIhttmRcHuwI907tZK3AbHFWriU2q1oQy8cUxbW5MBj 0ucGIhr1oRC80UsazE3eB7b3lJRLmNvI4QTM98qCEZ/2T25RHlJrbX/ROLi2H1rt kwKqleX7kUhIYGgusrVC6QuuaX4ytCYbf8cpWOFL9EuNb3b9VT4ujLCc8rUh1Fp/ nUavD2m0h7PaEfdhgWLX3WiW9BS/0cTFzKf7RjBo+LXglwxjqa9jQf0+WVhNWYIA ICSz1t6I2Ng2ezjNrm5dj3al0A== -----END CERTIFICATE-----Generated at Sat Apr 26 16:21:10 2025 by rpki-client