$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa File: AS61317.roa (raw, json) Hash identifier: RoNSY8qZSPGavEDJ/uKdIUZUrtNmIhH0akW/5frnlBQ= Subject key identifier: 23:75:55:0B:49:73:54:44:BB:29:0E:AE:99:70:FF:E7:C7:46:3D:2B Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4C685A1759861219427FEE3A83E6153542F5AA42 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa Signing time: Tue 04 Mar 2025 16:02:20 +0000 ROA not before: Tue 04 Mar 2025 15:57:20 +0000 ROA not after: Tue 03 Mar 2026 16:02:20 +0000 asID: 61317 IP address blocks: 104.234.38.0/24 maxlen: 24 104.234.39.0/24 maxlen: 24 104.234.128.0/23 maxlen: 24 104.234.144.0/24 maxlen: 24 104.234.148.0/24 maxlen: 24 104.234.186.0/24 maxlen: 24 206.53.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 15:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:68:5a:17:59:86:12:19:42:7f:ee:3a:83:e6:15:35:42:f5:aa:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 4 15:57:20 2025 GMT Not After : Mar 3 16:02:20 2026 GMT Subject: CN=2375550B49735444BB290EAE9970FFE7C7463D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:6c:e7:9f:56:f4:fa:cd:df:3f:b5:9c:84: b5:28:89:af:ca:58:8a:66:c9:91:a9:2a:e2:bb:e6: 68:a8:98:7b:f0:b2:85:3a:95:1e:32:7f:f6:a5:6f: 8b:43:06:fc:dc:f8:f7:75:f5:f0:5f:a7:9e:0d:0b: b3:db:61:d8:4c:eb:d2:bf:76:ab:41:05:d3:61:92: dc:c0:8c:35:4c:29:6a:ef:55:54:ee:a0:a4:b5:32: 88:8e:e9:82:76:89:59:20:7f:ba:17:80:8f:7e:03: a6:43:1a:44:93:d6:91:83:c1:9b:0c:93:43:76:c2: 7d:ba:a4:ee:4b:1f:77:d6:00:81:a9:b9:92:cc:f7: 44:ff:3f:68:6d:53:6a:ec:26:32:c2:49:31:ba:20: 02:69:10:a1:f6:c9:cb:02:65:fb:2d:55:96:1b:da: e2:a9:be:0e:14:34:15:b4:65:9a:61:bd:60:65:17: a6:33:cc:cc:9c:52:f4:08:7e:d4:de:b0:ea:b7:82: 3f:a8:24:47:eb:72:fb:c6:0d:1d:19:fd:21:b1:3d: a0:b2:d3:91:eb:78:3c:eb:53:99:f9:ca:d2:32:5d: 25:96:4a:ae:94:94:c7:bd:d1:1b:c6:f0:a6:f5:01: bc:ff:78:90:0f:c4:00:a3:2e:de:26:ed:f8:22:5f: a0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:75:55:0B:49:73:54:44:BB:29:0E:AE:99:70:FF:E7:C7:46:3D:2B X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS61317.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.38.0/23 104.234.128.0/23 104.234.144.0/24 104.234.148.0/24 104.234.186.0/24 206.53.54.0/24 Signature Algorithm: sha256WithRSAEncryption aa:f9:98:0d:b6:c2:65:33:6a:6a:71:df:e0:22:9a:8d:00:eb: 35:66:93:97:6f:fb:53:90:90:c4:da:c7:18:f1:56:c2:e0:2a: 9e:2a:cb:27:33:3e:57:61:d5:17:15:81:d6:c2:70:ec:08:f3: 59:34:fb:51:f2:f0:b3:44:e4:0c:f8:df:37:4d:04:f4:4c:3a: 03:9b:4d:11:c7:7a:74:69:19:b9:87:87:a4:17:37:0f:01:ad: 87:6a:5a:b4:09:f0:6b:d3:7d:56:ff:f9:43:64:37:75:34:54: 70:63:ce:00:a7:85:0c:77:43:0f:0c:f1:29:72:31:ea:e6:b9: c7:90:cb:a6:80:9e:88:59:7f:a9:57:2e:b4:85:e8:86:ce:2c: 12:2d:cf:81:f9:69:44:4f:60:34:d5:59:e1:4a:9a:8c:26:dd: 5b:6d:cb:c9:15:de:08:87:f9:3b:ac:f2:44:c1:4a:1d:8e:d0: a6:3b:3f:03:7b:e6:98:64:91:16:ee:9a:5c:3c:9d:5a:ab:ad: be:09:4e:c9:85:5f:9a:16:99:93:b5:d2:a5:63:12:15:d0:76: 02:6e:da:eb:fc:24:44:e6:8d:2d:00:f1:f6:c0:80:fd:54:7a: 08:ad:c2:f4:f3:e8:92:08:2a:06:68:01:f5:65:26:60:0a:58: 46:31:8e:5f -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIUTGhaF1mGEhlCf+46g+YVNUL1qkIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzA0MTU1NzIwWhcNMjYwMzAzMTYwMjIw WjAzMTEwLwYDVQQDEygyMzc1NTUwQjQ5NzM1NDQ0QkIyOTBFQUU5OTcwRkZFN0M3 NDYzRDJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0Rs559W9PrN 3z+1nIS1KImvyliKZsmRqSriu+ZoqJh78LKFOpUeMn/2pW+LQwb83Pj3dfXwX6ee DQuz22HYTOvSv3arQQXTYZLcwIw1TClq71VU7qCktTKIjumCdolZIH+6F4CPfgOm QxpEk9aRg8GbDJNDdsJ9uqTuSx931gCBqbmSzPdE/z9obVNq7CYywkkxuiACaRCh 9snLAmX7LVWWG9riqb4OFDQVtGWaYb1gZRemM8zMnFL0CH7U3rDqt4I/qCRH63L7 xg0dGf0hsT2gstOR63g861OZ+crSMl0llkqulJTHvdEbxvCm9QG8/3iQD8QAoy7e Ju34Il+glwIDAQABo4ICnDCCApgwHQYDVR0OBBYEFCN1VQtJc1REuykOrplw/+fH Rj0rMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzYxMzE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0G CCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBaOomAwQBaOqAAwQAaOqQAwQAaOqU AwQAaOq6AwQAzjU2MA0GCSqGSIb3DQEBCwUAA4IBAQCq+ZgNtsJlM2pqcd/gIpqN AOs1ZpOXb/tTkJDE2scY8VbC4CqeKssnMz5XYdUXFYHWwnDsCPNZNPtR8vCzROQM +N83TQT0TDoDm00Rx3p0aRm5h4ekFzcPAa2Halq0CfBr031W//lDZDd1NFRwY84A p4UMd0MPDPEpcjHq5rnHkMumgJ6IWX+pVy60heiGziwSLc+B+WlET2A01VnhSpqM Jt1bbcvJFd4Ih/k7rPJEwUodjtCmOz8De+aYZJEW7ppcPJ1aq62+CU7JhV+aFpmT tdKlYxIV0HYCbtrr/CRE5o0tAPH2wID9VHoIrcL08+iSCCoGaAH1ZSZgClhGMY5f -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:55 2025 by rpki-client