$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa File: AS401681.roa (raw, json) Hash identifier: HCAbGch6crho/aSLYaag2/ykuQ/rwjmakJV/DmbIWRQ= Subject key identifier: 9D:43:B5:04:6F:CD:AF:10:90:DB:3B:55:5D:1B:71:BF:40:84:78:56 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 035CD3F3046F8887CE6A2A565EBD40C593A18388 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa Signing time: Fri 18 Apr 2025 16:17:31 +0000 ROA not before: Fri 18 Apr 2025 16:12:31 +0000 ROA not after: Fri 17 Apr 2026 16:17:31 +0000 asID: 401681 IP address blocks: 104.234.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 03:41:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:5c:d3:f3:04:6f:88:87:ce:6a:2a:56:5e:bd:40:c5:93:a1:83:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 18 16:12:31 2025 GMT Not After : Apr 17 16:17:31 2026 GMT Subject: CN=9D43B5046FCDAF1090DB3B555D1B71BF40847856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:48:94:18:dc:61:c6:d4:55:02:dd:9c:14:05: 0e:62:5b:27:69:5d:a2:4b:30:f1:19:f0:b7:24:4e: b5:aa:11:3c:c5:6f:a5:f0:1f:f4:bd:e7:7b:fe:32: 5c:45:d3:10:a1:32:aa:b7:7c:02:5f:d0:e3:79:cc: 7b:82:48:19:c4:bd:e1:05:e8:f2:73:07:9c:7f:51: 8a:b5:27:ef:ba:ed:b3:f4:16:57:d7:40:4c:4b:5c: 9b:b3:54:92:c8:fb:04:d7:9d:78:4c:89:cd:4a:03: f4:d2:54:dc:5f:bd:49:d8:62:a3:ea:29:26:a3:91: b7:59:f3:dc:3b:a5:57:f9:0a:6a:dc:01:77:37:ac: 9a:a1:db:99:45:fc:06:21:b9:11:bc:7e:e2:13:f4: 4f:66:fc:c3:1b:aa:ee:bb:f7:c6:b7:78:7b:55:59: 91:40:b7:7b:b3:39:36:87:ca:97:7c:15:b7:c2:f3: 3e:fb:61:34:aa:b5:b6:6c:af:4b:02:91:98:25:32: c3:de:85:06:48:82:e8:8e:30:92:af:49:e1:9d:0f: 04:08:50:fe:48:8c:bd:0d:e8:52:7e:1e:7e:0a:10: 3c:d8:45:72:79:f0:8f:51:f5:d3:70:89:88:38:b2: b1:da:f5:49:03:7e:0e:d5:7e:0b:11:c8:97:79:24: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:B5:04:6F:CD:AF:10:90:DB:3B:55:5D:1B:71:BF:40:84:78:56 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.156.0/24 Signature Algorithm: sha256WithRSAEncryption 38:db:6c:ad:4e:74:52:7f:30:76:46:7d:6c:9e:a9:6f:4b:38: 2d:e9:86:2a:d6:19:3a:3f:37:bf:3e:f4:7c:3d:e0:be:13:4a: da:f8:07:bf:3a:a7:e6:23:13:b4:b6:c8:4d:d4:87:e1:ec:5a: f4:a9:a7:b1:d8:56:25:1d:58:28:59:f5:32:c5:bc:ac:6d:1b: ca:7a:18:d1:46:63:a8:6c:e1:cf:5a:5f:33:ee:a8:19:f0:90: 86:71:fc:3f:fb:97:a0:94:04:ed:f0:f1:53:04:9f:88:ed:b5: 23:d0:ea:d1:fc:41:97:8b:f0:0d:f5:db:37:25:63:12:20:1c: d7:00:a5:11:df:3a:20:b1:20:6d:c5:c7:e5:b6:fd:29:0d:68: 4f:e8:1a:2d:e6:53:7b:9e:d8:b1:86:70:1e:51:2d:9c:6e:34: de:35:b6:ec:0f:a8:3f:91:99:ce:4d:68:f3:a9:a1:ee:08:54: 8c:ff:62:1f:0c:a7:a7:e6:f7:82:4d:c8:a9:1b:e3:8e:4a:2a: d2:30:d4:b4:75:48:56:eb:b3:3f:80:00:f4:e6:2d:4e:a5:f8: 75:97:a1:86:7e:e5:2e:ea:06:d5:dd:8e:33:09:88:32:0b:3f: 11:62:66:75:56:e4:89:82:22:7b:1e:f7:40:c7:93:4a:4a:6c: 6e:b4:1b:6e -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUA1zT8wRviIfOaipWXr1AxZOhg4gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDE4MTYxMjMxWhcNMjYwNDE3MTYxNzMx WjAzMTEwLwYDVQQDEyg5RDQzQjUwNDZGQ0RBRjEwOTBEQjNCNTU1RDFCNzFCRjQw ODQ3ODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkiUGNxhxtRV At2cFAUOYlsnaV2iSzDxGfC3JE61qhE8xW+l8B/0ved7/jJcRdMQoTKqt3wCX9Dj ecx7gkgZxL3hBejycwecf1GKtSfvuu2z9BZX10BMS1ybs1SSyPsE1514TInNSgP0 0lTcX71J2GKj6ikmo5G3WfPcO6VX+Qpq3AF3N6yaoduZRfwGIbkRvH7iE/RPZvzD G6ruu/fGt3h7VVmRQLd7szk2h8qXfBW3wvM++2E0qrW2bK9LApGYJTLD3oUGSILo jjCSr0nhnQ8ECFD+SIy9DehSfh5+ChA82EVyefCPUfXTcImIOLKx2vVJA34O1X4L EciXeSTv3QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJ1DtQRvza8QkNs7VV0bcb9A hHhWMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTY4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqnDANBgkqhkiG9w0BAQsFAAOC AQEAONtsrU50Un8wdkZ9bJ6pb0s4LemGKtYZOj83vz70fD3gvhNK2vgHvzqn5iMT tLbITdSH4exa9KmnsdhWJR1YKFn1MsW8rG0bynoY0UZjqGzhz1pfM+6oGfCQhnH8 P/uXoJQE7fDxUwSfiO21I9Dq0fxBl4vwDfXbNyVjEiAc1wClEd86ILEgbcXH5bb9 KQ1oT+gaLeZTe57YsYZwHlEtnG403jW27A+oP5GZzk1o86mh7ghUjP9iHwynp+b3 gk3IqRvjjkoq0jDUtHVIVuuzP4AA9OYtTqX4dZehhn7lLuoG1d2OMwmIMgs/EWJm dVbkiYIiex73QMeTSkpsbrQbbg== -----END CERTIFICATE-----Generated at Tue May 6 20:43:49 2025 by rpki-client