$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa File: AS61317.roa (raw, json) Hash identifier: 1H0wWBRLQ0fBdTNblxdGWg7eE8NU6afWgiu/rcmjjGI= Subject key identifier: 1E:02:5E:76:6A:BF:EC:D1:E2:EE:35:55:0F:E6:D6:82:77:75:28:1E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2A9AEC80ABB4397087219BFF548E382B825DA5FB Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa Signing time: Thu 12 Jun 2025 00:00:20 +0000 ROA not before: Wed 11 Jun 2025 23:55:20 +0000 ROA not after: Thu 11 Jun 2026 00:00:20 +0000 asID: 61317 IP address blocks: 104.234.38.0/24 maxlen: 24 104.234.39.0/24 maxlen: 24 104.234.128.0/23 maxlen: 24 104.234.144.0/24 maxlen: 24 104.234.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 18:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:9a:ec:80:ab:b4:39:70:87:21:9b:ff:54:8e:38:2b:82:5d:a5:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jun 11 23:55:20 2025 GMT Not After : Jun 11 00:00:20 2026 GMT Subject: CN=1E025E766ABFECD1E2EE35550FE6D6827775281E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:50:36:0f:f7:1c:d3:12:6a:e5:dd:2d:5b: 8c:ff:c8:42:3c:62:c6:82:27:85:21:ad:14:85:7a: fe:8b:ad:81:5a:50:7d:c8:bd:b6:d6:56:77:a0:91: 76:fc:6a:e1:be:0a:b2:5c:ef:03:65:28:ed:21:14: 34:e6:dd:97:94:39:56:6e:20:d8:cc:c9:4d:73:11: 8a:bd:b5:4b:b4:81:e9:66:d9:ef:5f:c4:fc:b4:3a: f8:b1:b8:60:32:b2:14:b9:16:6f:4c:a3:06:5b:6f: 84:a0:fb:65:76:c3:7a:25:04:d4:e6:42:80:c5:b9: f1:58:a4:d3:d5:3d:f2:c0:ae:12:05:18:4e:57:93: 99:e7:15:4e:45:98:c8:4b:a6:43:77:14:d4:8f:3b: 1b:f3:0e:6a:41:cc:08:66:66:a7:6a:e7:74:66:a7: 48:fb:78:b7:a8:48:f5:dc:13:90:89:b3:1a:8e:81: ee:03:00:0d:39:23:5d:31:74:b0:01:02:7f:b9:a2: 29:f3:4e:4a:f5:7b:66:9e:74:4d:94:cf:b1:3f:bc: 75:10:73:39:62:e9:b0:27:e0:d0:59:57:58:71:f0: 71:93:7c:a2:ea:ba:f0:af:b0:9e:87:ad:77:39:0a: f5:77:fd:db:ec:b7:bd:0e:49:07:bf:62:21:24:53: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:02:5E:76:6A:BF:EC:D1:E2:EE:35:55:0F:E6:D6:82:77:75:28:1E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.38.0/23 104.234.128.0/23 104.234.144.0/24 104.234.148.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:6f:46:00:ca:cb:72:e7:14:d4:9f:d2:45:93:0b:92:44:95: 9e:1d:43:56:c1:13:3b:27:3a:00:19:72:84:62:a8:12:e3:8a: 6a:6f:a4:c4:0c:f5:de:1c:31:c1:a1:69:ca:79:3d:99:c3:a7: 1c:ef:1b:31:c4:f1:1b:1d:4e:23:9d:6b:00:f8:42:6e:ac:29: 87:1f:a9:fa:cf:8a:a4:7c:61:64:52:d7:b4:5f:04:ec:29:95: a8:e6:50:98:fc:e8:ea:7d:c9:c9:45:65:b7:e1:ba:73:ec:55: 1d:7d:9a:55:c0:f7:da:19:d8:c0:0f:8f:1b:60:5a:29:a6:ff: 8e:ec:53:bd:e3:53:22:90:51:c3:77:12:05:77:d1:80:e0:5d: 51:3e:c0:b6:42:a6:82:40:ac:82:da:f8:43:83:5e:84:55:d3: 64:16:fa:7c:8d:3e:7c:cd:30:7b:61:66:a6:28:b9:a4:8c:b3: 65:03:12:2e:7b:d6:83:7b:5b:88:39:5d:71:e6:2d:27:af:e5: 6b:18:f8:1f:14:34:77:99:28:73:e0:a8:6a:7c:25:f0:08:b7: 3f:97:d4:5c:60:e1:de:cb:85:2f:6a:cf:93:3e:7a:b0:e4:d0: 81:6f:74:55:40:a9:2f:3b:65:f3:73:3a:b3:6a:23:e8:9f:ff: 8f:82:cb:83 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIUKprsgKu0OXCHIZv/VI44K4JdpfswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNjExMjM1NTIwWhcNMjYwNjExMDAwMDIw WjAzMTEwLwYDVQQDEygxRTAyNUU3NjZBQkZFQ0QxRTJFRTM1NTUwRkU2RDY4Mjc3 NzUyODFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLlQNg/3HNMS auXdLVuM/8hCPGLGgieFIa0UhXr+i62BWlB9yL221lZ3oJF2/GrhvgqyXO8DZSjt IRQ05t2XlDlWbiDYzMlNcxGKvbVLtIHpZtnvX8T8tDr4sbhgMrIUuRZvTKMGW2+E oPtldsN6JQTU5kKAxbnxWKTT1T3ywK4SBRhOV5OZ5xVORZjIS6ZDdxTUjzsb8w5q QcwIZmanaud0ZqdI+3i3qEj13BOQibMajoHuAwANOSNdMXSwAQJ/uaIp805K9Xtm nnRNlM+xP7x1EHM5YumwJ+DQWVdYcfBxk3yi6rrwr7Ceh613OQr1d/3b7Le9DkkH v2IhJFOAiwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFB4CXnZqv+zR4u41VQ/m1oJ3 dSgeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzYxMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEG CCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBaOomAwQBaOqAAwQAaOqQAwQAaOqU MA0GCSqGSIb3DQEBCwUAA4IBAQBbb0YAysty5xTUn9JFkwuSRJWeHUNWwRM7JzoA GXKEYqgS44pqb6TEDPXeHDHBoWnKeT2Zw6cc7xsxxPEbHU4jnWsA+EJurCmHH6n6 z4qkfGFkUte0XwTsKZWo5lCY/OjqfcnJRWW34bpz7FUdfZpVwPfaGdjAD48bYFop pv+O7FO941MikFHDdxIFd9GA4F1RPsC2QqaCQKyC2vhDg16EVdNkFvp8jT58zTB7 YWamKLmkjLNlAxIue9aDe1uIOV1x5i0nr+VrGPgfFDR3mShz4KhqfCXwCLc/l9Rc YOHey4Uvas+TPnqw5NCBb3RVQKkvO2XzczqzaiPon/+PgsuD -----END CERTIFICATE-----Generated at Sun Jun 15 04:48:06 2025 by rpki-client