$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153371.roa File: AS153371.roa (raw, json) Hash identifier: nFzNfTXV0nQ/kYg2mFEjQQJ+peXX8D7QE5HRHLfhC6o= Subject key identifier: A1:AE:24:52:12:C9:CE:7C:86:1C:8A:A8:DC:2F:51:64:B6:26:E1:48 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6051A7F777D01764BAC9EBFF00AA79370ADB4994 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153371.roa Signing time: Mon 11 May 2026 17:35:32 +0000 ROA not before: Mon 11 May 2026 17:30:32 +0000 ROA not after: Mon 10 May 2027 17:35:32 +0000 asID: 153371 IP address blocks: 104.234.24.0/23 maxlen: 24 104.234.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 10:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:51:a7:f7:77:d0:17:64:ba:c9:eb:ff:00:aa:79:37:0a:db:49:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 11 17:30:32 2026 GMT Not After : May 10 17:35:32 2027 GMT Subject: CN=A1AE245212C9CE7C861C8AA8DC2F5164B626E148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:92:76:83:72:6e:e1:90:0d:d6:ea:73:da: a6:4d:31:d0:e8:ad:5b:73:7f:d9:a1:45:40:6e:06: 66:82:b7:95:03:b9:a1:9f:32:c9:df:2f:1b:3b:f6: ca:4d:e7:e7:c2:8e:76:69:f4:6c:1b:21:15:46:be: 16:ad:c8:69:d8:e9:b5:8f:5b:08:bd:19:7a:0f:64: 36:66:65:66:7c:cb:0b:08:6e:19:d8:60:3e:2d:1a: 7b:0a:13:58:ed:5e:99:9b:b6:c3:f1:4f:ab:a7:17: c3:31:03:a2:b4:65:b6:37:b8:b2:a4:a2:98:5e:50: ee:86:ef:3c:df:55:1d:d1:78:0e:e9:67:3f:79:29: db:8b:71:2a:0b:63:95:0b:80:17:24:1b:74:ba:83: 5e:8a:98:af:a6:c5:6d:1c:6e:f4:10:e1:27:fe:2f: 84:af:f7:5a:2a:33:5b:7f:d2:71:87:04:4d:55:f2: 1b:72:e0:67:39:33:50:52:d2:c7:55:db:d0:3f:2b: 5d:7f:60:a3:64:4f:36:7d:f4:7e:72:20:ed:93:03: 3f:c6:c8:58:37:9f:e3:2d:18:ea:1f:a9:a5:b1:86: 75:1a:f6:d1:9e:ba:70:51:e4:10:ba:fa:de:a0:d1: 68:87:40:64:ec:1e:dd:9b:66:d3:e1:88:c8:1f:49: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:24:52:12:C9:CE:7C:86:1C:8A:A8:DC:2F:51:64:B6:26:E1:48 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS153371.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.24.0/23 104.234.36.0/23 Signature Algorithm: sha256WithRSAEncryption 73:3f:c8:22:60:23:33:fc:d3:26:6e:35:f3:2c:33:0e:f9:1c: d0:21:09:49:68:ac:6c:60:78:24:e1:f3:04:16:72:7e:b6:a1: cb:3f:a1:8c:d6:41:d4:7b:c9:11:82:72:af:83:3c:c7:e0:ec: c7:86:08:47:24:c4:91:04:78:f0:43:00:77:b8:64:dc:1b:0a: e8:de:c2:f8:9a:a3:bc:e4:3f:75:cb:db:b0:ef:6b:e8:e9:2d: c3:50:06:60:7d:1b:f1:b7:81:33:3f:16:85:9c:9e:15:5b:a1: 04:22:36:e2:a5:5e:f6:bb:02:a8:c1:dd:71:15:d9:49:9f:a0: 1a:16:ea:a1:a0:ac:11:c0:7a:9f:95:af:cf:36:c5:ae:93:47: 81:9b:c6:e3:25:1a:55:70:46:a4:11:17:ae:7d:47:f2:86:ec: 45:89:3a:01:20:d6:b4:ec:58:1f:86:98:08:c6:6e:3d:37:d7: e0:65:85:ca:8d:f6:8c:2c:a6:5a:12:a9:14:ba:bd:e2:9b:c5: 4f:ce:7b:68:ee:72:8a:26:65:cc:2f:d8:cf:e3:2e:f4:6d:0d: d1:02:5d:a7:ab:2c:9c:64:e0:11:56:af:f0:65:05:a8:61:52: 5c:26:f8:80:7d:bd:02:2a:05:12:6f:5d:2f:eb:77:55:7d:75: a5:66:fe:6f -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUYFGn93fQF2S6yev/AKp5NwrbSZQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNTExMTczMDMyWhcNMjcwNTEwMTczNTMy WjAzMTEwLwYDVQQDEyhBMUFFMjQ1MjEyQzlDRTdDODYxQzhBQThEQzJGNTE2NEI2 MjZFMTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFqSdoNybuGQ Ddbqc9qmTTHQ6K1bc3/ZoUVAbgZmgreVA7mhnzLJ3y8bO/bKTefnwo52afRsGyEV Rr4Wrchp2Om1j1sIvRl6D2Q2ZmVmfMsLCG4Z2GA+LRp7ChNY7V6Zm7bD8U+rpxfD MQOitGW2N7iypKKYXlDuhu8831Ud0XgO6Wc/eSnbi3EqC2OVC4AXJBt0uoNeipiv psVtHG70EOEn/i+Er/daKjNbf9JxhwRNVfIbcuBnOTNQUtLHVdvQPytdf2CjZE82 ffR+ciDtkwM/xshYN5/jLRjqH6mlsYZ1GvbRnrpwUeQQuvreoNFoh0Bk7B7dm2bT 4YjIH0kQGwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFKGuJFISyc58hhyKqNwvUWS2 JuFIMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE1MzM3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAWjqGAMEAWjqJDANBgkqhkiG9w0B AQsFAAOCAQEAcz/IImAjM/zTJm418ywzDvkc0CEJSWisbGB4JOHzBBZyfrahyz+h jNZB1HvJEYJyr4M8x+Dsx4YIRyTEkQR48EMAd7hk3BsK6N7C+JqjvOQ/dcvbsO9r 6Oktw1AGYH0b8beBMz8WhZyeFVuhBCI24qVe9rsCqMHdcRXZSZ+gGhbqoaCsEcB6 n5WvzzbFrpNHgZvG4yUaVXBGpBEXrn1H8obsRYk6ASDWtOxYH4aYCMZuPTfX4GWF yo32jCymWhKpFLq94pvFT857aO5yiiZlzC/Yz+Mu9G0N0QJdp6ssnGTgEVav8GUF qGFSXCb4gH29AioFEm9dL+t3VX11pWb+bw== -----END CERTIFICATE-----Generated at Tue May 12 22:43:29 2026 by rpki-client