$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa File: AS54339.roa (raw, json) Hash identifier: b4EkX3uUrNhLEo8Hdwj7peRYOo4vakJ97gSeHHFolNg= Subject key identifier: 04:FD:1E:A1:61:42:3F:B6:C8:FF:58:EF:F6:15:AA:8D:AF:30:73:E2 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5B8806C2895657DFF566D0F7ABFFD2264D856E71 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa Signing time: Wed 14 May 2025 11:58:49 +0000 ROA not before: Wed 14 May 2025 11:53:49 +0000 ROA not after: Wed 13 May 2026 11:58:49 +0000 asID: 54339 IP address blocks: 104.234.82.0/24 maxlen: 24 104.234.88.0/24 maxlen: 24 206.53.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:88:06:c2:89:56:57:df:f5:66:d0:f7:ab:ff:d2:26:4d:85:6e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 14 11:53:49 2025 GMT Not After : May 13 11:58:49 2026 GMT Subject: CN=04FD1EA161423FB6C8FF58EFF615AA8DAF3073E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b5:84:28:fb:f9:32:8b:67:91:9b:b9:df:b8: 2e:98:15:a0:fb:f1:4b:12:bd:3f:88:e4:7c:1e:64: 31:a4:d4:54:2c:a5:83:41:71:07:bd:53:34:a7:a2: 42:0d:38:70:71:3f:52:ef:34:59:89:3f:37:0c:54: 83:df:b7:d6:30:a2:2c:4e:fc:67:0a:9d:4a:bd:9f: 29:0b:e8:78:79:02:ca:5f:59:8d:cf:47:39:9b:0b: 36:7c:aa:24:74:d6:ef:26:4c:84:d7:ab:5a:56:1d: 38:a3:fe:c6:9c:7d:d6:ba:02:2f:4a:ff:1f:a1:6d: a0:0d:52:c0:32:56:09:67:9d:d8:06:4c:85:67:48: 1f:23:5a:0b:54:65:21:0b:4d:98:26:c6:e1:7c:eb: 61:a1:89:07:cc:8e:12:ed:9d:39:f4:20:f1:9c:cf: c5:c0:ef:36:d5:a8:1b:88:30:b5:c5:45:ec:57:70: b2:40:16:6e:77:27:f8:86:8a:59:77:b0:c3:47:a9: 3f:67:27:bd:77:e1:9a:da:fc:bb:c3:4b:08:70:b9: 1f:db:8d:67:5d:f5:7f:19:23:db:76:11:f9:a6:e2: 6f:a2:74:f2:fb:43:8b:67:ec:d2:91:ce:b8:49:a0: 80:f2:6b:da:77:31:8e:42:c5:02:ec:48:95:8e:c3: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FD:1E:A1:61:42:3F:B6:C8:FF:58:EF:F6:15:AA:8D:AF:30:73:E2 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.82.0/24 104.234.88.0/24 206.53.57.0/24 Signature Algorithm: sha256WithRSAEncryption 15:e0:11:46:bd:fe:a4:14:fc:9b:0d:21:87:2a:67:c7:98:25: 05:86:10:1a:4e:09:4e:b2:1e:62:07:97:a1:23:2d:47:2c:34: 5b:ec:6a:31:f6:e8:c6:ba:37:3d:db:c6:08:b2:11:5f:be:03: b0:00:a4:d6:48:12:97:1a:27:97:18:ec:34:d3:38:84:10:e6: bf:59:e5:73:87:4b:f2:56:c2:0e:7e:b0:b5:0a:64:74:8e:d2: ed:71:05:fa:94:b9:4b:1a:c7:b0:ee:4f:d9:e0:6b:0b:c6:9e: 71:da:61:17:72:a0:2c:16:d6:0f:16:fc:2e:3f:32:6a:80:62: a9:64:9f:3b:d1:b3:f0:d1:5c:3b:95:b2:9a:0c:6e:df:c6:26: e9:b6:78:6c:ac:b1:db:0f:cf:46:20:af:db:75:61:60:4b:3c: 81:1a:70:1d:f5:6b:d4:db:3a:51:0c:52:a9:67:31:b5:a9:44: 9e:15:fc:3b:ff:2b:e6:e0:29:2d:aa:7e:b6:f7:ea:4f:a4:55: 2f:bf:97:82:1d:42:8e:27:16:f4:e4:ed:8c:93:67:69:f6:97: bd:4f:45:7c:2c:d2:0a:1e:15:74:99:1c:9b:3d:c6:11:ce:13: d5:b9:98:b5:90:09:2c:4c:f6:1d:5f:5a:72:f5:59:d5:5e:a3: d1:27:01:1b -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUW4gGwolWV9/1ZtD3q//SJk2FbnEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTE0MTE1MzQ5WhcNMjYwNTEzMTE1ODQ5 WjAzMTEwLwYDVQQDEygwNEZEMUVBMTYxNDIzRkI2QzhGRjU4RUZGNjE1QUE4REFG MzA3M0UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LWEKPv5Motn kZu537gumBWg+/FLEr0/iOR8HmQxpNRULKWDQXEHvVM0p6JCDThwcT9S7zRZiT83 DFSD37fWMKIsTvxnCp1KvZ8pC+h4eQLKX1mNz0c5mws2fKokdNbvJkyE16taVh04 o/7GnH3WugIvSv8foW2gDVLAMlYJZ53YBkyFZ0gfI1oLVGUhC02YJsbhfOthoYkH zI4S7Z059CDxnM/FwO821agbiDC1xUXsV3CyQBZudyf4hopZd7DDR6k/Zye9d+Ga 2vy7w0sIcLkf241nXfV/GSPbdhH5puJvonTy+0OLZ+zSkc64SaCA8mvadzGOQsUC 7EiVjsOr2QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAT9HqFhQj+2yP9Y7/YVqo2v MHPiMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzU0MzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOpSAwQAaOpYAwQAzjU5MA0GCSqG SIb3DQEBCwUAA4IBAQAV4BFGvf6kFPybDSGHKmfHmCUFhhAaTglOsh5iB5ehIy1H LDRb7Gox9ujGujc928YIshFfvgOwAKTWSBKXGieXGOw00ziEEOa/WeVzh0vyVsIO frC1CmR0jtLtcQX6lLlLGsew7k/Z4GsLxp5x2mEXcqAsFtYPFvwuPzJqgGKpZJ87 0bPw0Vw7lbKaDG7fxibptnhsrLHbD89GIK/bdWFgSzyBGnAd9WvU2zpRDFKpZzG1 qUSeFfw7/yvm4Cktqn629+pPpFUvv5eCHUKOJxb05O2Mk2dp9pe9T0V8LNIKHhV0 mRybPcYRzhPVuZi1kAksTPYdX1py9VnVXqPRJwEb -----END CERTIFICATE-----Generated at Tue Nov 4 19:23:53 2025 by rpki-client