$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151704.roa File: AS151704.roa (raw, json) Hash identifier: ghbhU0O45bDRvTZecQWgBLdaeIlvNlu3XqBKNPKC+LY= Subject key identifier: 83:0D:DD:9E:DD:F3:08:9B:71:8E:AC:34:D2:29:E4:3C:19:46:D9:A5 Certificate issuer: /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Certificate serial: 062E70E892524A375FAD8249DF31BF218497C881 Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151704.roa Signing time: Sun 08 Jun 2025 14:58:49 +0000 ROA not before: Sun 08 Jun 2025 14:53:49 +0000 ROA not after: Sun 07 Jun 2026 14:58:49 +0000 asID: 151704 IP address blocks: 157.254.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 20:31:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2e:70:e8:92:52:4a:37:5f:ad:82:49:df:31:bf:21:84:97:c8:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2 Validity Not Before: Jun 8 14:53:49 2025 GMT Not After : Jun 7 14:58:49 2026 GMT Subject: CN=830DDD9EDDF3089B718EAC34D229E43C1946D9A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c2:0c:8f:36:ec:fa:61:f1:95:c7:83:7b:0d: 00:00:9c:fe:ca:e9:12:cb:3b:7b:58:d4:cc:bb:f7: 41:be:3d:9e:5c:6d:04:56:80:c6:51:9e:f0:d3:6b: 39:20:20:41:e5:e9:a3:9b:6c:48:be:12:d1:52:e5: bb:9c:73:57:33:5d:80:4e:1d:f1:97:3b:70:20:56: 1e:74:ad:b7:56:9c:e1:cb:bb:c2:e9:5b:34:ed:ee: c8:1b:8a:de:7b:6d:cb:a4:31:8f:ba:cb:43:ba:13: 74:cf:3d:52:19:e1:5c:f6:02:80:c7:e5:91:f6:a3: 79:ba:51:57:7a:54:c0:78:34:2d:de:62:72:66:82: c2:a9:bd:a9:e8:9e:1c:41:41:dc:fa:d5:f2:ab:c8: c1:ba:35:9c:69:cd:4b:f2:d5:ad:26:92:2b:f2:e5: c2:df:31:b0:c1:5a:90:1a:04:24:ff:cc:0d:49:d9: 96:d2:21:af:08:a0:d7:aa:15:09:9c:9d:ea:40:f1: 10:42:bb:b8:f2:e7:e3:97:93:de:3c:16:91:5e:7a: 8d:b4:aa:d9:da:9c:62:66:e7:e9:7b:db:9d:f4:d6: c9:70:60:2a:2c:8d:98:69:81:18:e4:42:a2:cc:5f: 26:d2:0e:f2:b3:0f:91:6b:82:2b:7f:20:c9:89:52: 0a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0D:DD:9E:DD:F3:08:9B:71:8E:AC:34:D2:29:E4:3C:19:46:D9:A5 X509v3 Authority Key Identifier: keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS151704.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.254.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:5e:6b:40:0b:41:9c:bc:1c:ad:04:d2:ce:f3:35:44:24:79: 78:9f:61:10:90:1e:f7:9e:47:3f:88:47:6a:dd:7c:02:a8:ec: 26:ad:b8:f9:84:ff:f8:12:8a:fb:17:05:81:d7:41:73:95:b6: 92:52:c0:1a:f3:b1:b3:a7:38:8d:df:64:fe:5e:28:59:fb:3c: 7a:87:f0:0c:19:6e:4b:18:71:9a:de:02:b6:d1:d7:4e:a9:ef: 65:26:60:86:68:38:a8:71:50:b5:08:46:8d:df:ee:4f:83:29: 4d:c9:f2:24:13:95:ea:a9:c0:84:d1:17:7f:ec:f8:cc:ce:63: b2:32:a8:e7:65:56:6c:95:e8:be:d2:ce:42:0f:1d:6a:54:45: bd:fb:b0:c0:3f:89:14:fa:03:1b:29:c4:98:33:fb:60:04:3f: 38:10:c1:8c:0b:c3:71:54:eb:5f:10:04:03:dc:59:3b:a9:9f: 33:a3:1a:c8:53:d0:c0:df:34:e5:e2:40:df:25:c6:e1:c2:7d: 68:a4:50:56:bf:aa:13:94:45:3c:9d:a5:37:1a:45:1d:a7:df: 13:10:46:19:72:c8:14:54:a2:62:84:b8:da:ef:b4:d9:1d:8d: 11:fe:39:76:9f:df:86:58:6d:bd:73:8a:b7:a2:00:02:64:b0: 47:f6:40:c1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUBi5w6JJSSjdfrYJJ3zG/IYSXyIEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4 NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjA4MTQ1MzQ5WhcNMjYwNjA3MTQ1ODQ5 WjAzMTEwLwYDVQQDEyg4MzBEREQ5RURERjMwODlCNzE4RUFDMzREMjI5RTQzQzE5 NDZEOUE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicIMjzbs+mHx lceDew0AAJz+yukSyzt7WNTMu/dBvj2eXG0EVoDGUZ7w02s5ICBB5emjm2xIvhLR UuW7nHNXM12ATh3xlztwIFYedK23Vpzhy7vC6Vs07e7IG4ree23LpDGPustDuhN0 zz1SGeFc9gKAx+WR9qN5ulFXelTAeDQt3mJyZoLCqb2p6J4cQUHc+tXyq8jBujWc ac1L8tWtJpIr8uXC3zGwwVqQGgQk/8wNSdmW0iGvCKDXqhUJnJ3qQPEQQru48ufj l5PePBaRXnqNtKrZ2pxiZufpe9ud9NbJcGAqLI2YaYEY5EKizF8m0g7ysw+Ra4Ir fyDJiVIK5QIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIMN3Z7d8wibcY6sNNIp5DwZ RtmlMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5 ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3 ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0 NTNiN2IvMC9BUzE1MTcwNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAJ3+GDANBgkqhkiG9w0BAQsFAAOC AQEAil5rQAtBnLwcrQTSzvM1RCR5eJ9hEJAe955HP4hHat18AqjsJq24+YT/+BKK +xcFgddBc5W2klLAGvOxs6c4jd9k/l4oWfs8eofwDBluSxhxmt4CttHXTqnvZSZg hmg4qHFQtQhGjd/uT4MpTcnyJBOV6qnAhNEXf+z4zM5jsjKo52VWbJXovtLOQg8d alRFvfuwwD+JFPoDGynEmDP7YAQ/OBDBjAvDcVTrXxAEA9xZO6mfM6MayFPQwN80 5eJA3yXG4cJ9aKRQVr+qE5RFPJ2lNxpFHaffExBGGXLIFFSiYoS42u+02R2NEf45 dp/fhlhtvXOKt6IAAmSwR/ZAwQ== -----END CERTIFICATE-----Generated at Sun Jun 29 00:33:58 2025 by rpki-client