$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: HAv7vua9Slu6F8WF+JpXT+LT7b69AHyJIdNwb/Cd3yI= Subject key identifier: 62:E1:A8:DF:3B:CF:B7:B4:9F:CB:D1:16:E7:87:0D:38:E0:E9:AD:B6 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 2EACC385BD8BE6FAFFFC38B69F46B457FF2496F6 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa Signing time: Fri 15 Aug 2025 07:52:33 +0000 ROA not before: Fri 15 Aug 2025 07:47:33 +0000 ROA not after: Fri 14 Aug 2026 07:52:33 +0000 asID: 9304 IP address blocks: 40.27.76.0/22 maxlen: 24 40.27.93.0/24 maxlen: 24 40.27.192.0/22 maxlen: 24 40.27.220.0/24 maxlen: 24 40.27.221.0/24 maxlen: 24 40.27.222.0/24 maxlen: 24 40.27.223.0/24 maxlen: 24 40.27.231.0/24 maxlen: 24 40.27.240.0/24 maxlen: 24 40.27.241.0/24 maxlen: 24 40.27.242.0/24 maxlen: 24 40.183.88.0/22 maxlen: 24 40.183.150.0/24 maxlen: 24 40.183.153.0/24 maxlen: 24 40.183.206.0/23 maxlen: 23 40.183.224.0/23 maxlen: 24 40.183.226.0/23 maxlen: 23 40.183.228.0/23 maxlen: 24 40.183.230.0/23 maxlen: 24 40.183.232.0/23 maxlen: 24 40.183.237.0/24 maxlen: 24 40.183.241.0/24 maxlen: 24 40.183.242.0/24 maxlen: 24 40.183.243.0/24 maxlen: 24 40.183.244.0/24 maxlen: 24 40.183.245.0/24 maxlen: 24 40.183.246.0/24 maxlen: 24 40.183.247.0/24 maxlen: 24 40.183.252.0/24 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.183.0/24 maxlen: 24 40.223.192.0/24 maxlen: 24 40.223.193.0/24 maxlen: 24 40.223.194.0/24 maxlen: 24 40.223.245.0/24 maxlen: 24 40.223.247.0/24 maxlen: 24 40.223.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ac:c3:85:bd:8b:e6:fa:ff:fc:38:b6:9f:46:b4:57:ff:24:96:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Aug 15 07:47:33 2025 GMT Not After : Aug 14 07:52:33 2026 GMT Subject: CN=62E1A8DF3BCFB7B49FCBD116E7870D38E0E9ADB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:8d:20:8b:09:c4:d3:3c:f6:0f:24:a2:eb: 8b:1c:c5:11:63:d0:d0:f7:96:e2:8d:63:f2:ed:ec: 0e:ec:32:35:c2:90:00:7d:9a:16:d4:6c:ef:79:5c: 48:a0:5d:37:c3:07:29:6f:ec:7c:8a:91:cd:a5:12: 9c:ea:46:03:cf:9e:6a:56:db:b0:72:8f:41:e0:4c: 7a:a1:ea:2d:cd:57:a5:32:2d:5f:93:4d:06:a7:ca: 11:c2:dd:50:3e:48:09:86:a1:68:71:73:ec:15:cb: 0d:46:bc:1d:fd:b5:0a:3d:dc:e7:f5:70:b8:57:e0: 9e:d6:a2:97:4d:4d:9e:22:4c:d8:87:d2:b1:02:d5: b3:51:c3:26:ca:aa:f0:c1:07:70:cd:43:97:2e:1a: 46:67:df:5a:8c:50:8d:44:80:f3:d2:9d:c0:aa:f2: d4:73:68:f0:e8:7e:3c:f1:39:f6:aa:bc:54:e4:78: 8e:37:2d:b4:bc:d3:87:38:a7:0e:72:e0:19:80:1c: 5d:88:31:3d:c8:88:a1:c1:1a:76:be:45:26:67:e8: 58:85:0e:89:12:b8:c5:ee:f1:8b:d7:ab:98:61:3e: 97:52:de:a7:bb:c8:a2:00:e5:9a:36:9c:05:f9:33: 87:ba:e8:c0:1a:c8:d1:57:8c:88:7a:93:31:0f:cc: db:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E1:A8:DF:3B:CF:B7:B4:9F:CB:D1:16:E7:87:0D:38:E0:E9:AD:B6 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.76.0/22 40.27.93.0/24 40.27.192.0/22 40.27.220.0/22 40.27.231.0/24 40.27.240.0-40.27.242.255 40.183.88.0/22 40.183.150.0/24 40.183.153.0/24 40.183.206.0/23 40.183.224.0-40.183.233.255 40.183.237.0/24 40.183.241.0-40.183.247.255 40.183.252.0/24 40.223.122.0/24 40.223.183.0/24 40.223.192.0-40.223.194.255 40.223.245.0/24 40.223.247.0/24 40.223.252.0/22 Signature Algorithm: sha256WithRSAEncryption 0c:1e:ea:47:22:ec:88:ef:22:ff:92:a8:52:3a:23:c5:71:a4: e0:02:08:27:2c:e5:b1:20:a9:c1:9e:ab:d2:23:33:f5:14:04: f1:b2:0e:fc:b4:f9:73:bb:84:3b:d3:97:13:d4:1b:04:d2:aa: dc:b0:64:5b:75:76:f2:aa:d7:16:bf:77:fd:ba:db:1f:e0:66: bf:bd:fe:62:8d:1a:51:32:a0:fd:a1:99:3a:56:f2:f8:7c:82: d6:1d:d8:32:30:45:b6:11:7d:66:3c:f3:4f:f6:fb:30:a2:4b: 60:9b:99:ad:bf:e7:ae:9b:e1:36:78:99:d2:d0:65:c1:a9:8f: 07:78:55:3a:ed:26:f3:f7:3c:4b:e9:bc:a3:0b:9a:4c:2f:e5: c4:ae:31:4b:ee:24:bf:28:b6:21:7e:b5:ec:1a:66:cd:ae:1a: 0b:b8:20:a4:66:b8:c9:44:75:da:6a:a5:91:62:53:2e:d9:ad: f0:51:10:8e:76:db:50:d0:50:d7:ca:b1:b9:69:6b:17:55:21: 18:90:8d:13:da:64:5d:c6:0e:9d:82:49:f1:ba:80:44:3b:d4: 7c:93:80:58:ba:4d:13:85:fa:07:ca:e4:24:1e:32:77:e3:ea: 7d:d2:04:7b:8f:46:84:93:a2:93:39:97:f9:cb:ae:80:7f:0d: 5f:4b:c3:49 -----BEGIN CERTIFICATE----- MIIGFDCCBPygAwIBAgIULqzDhb2L5vr//Di2n0a0V/8klvYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwODE1MDc0NzMzWhcNMjYwODE0MDc1MjMz WjAzMTEwLwYDVQQDEyg2MkUxQThERjNCQ0ZCN0I0OUZDQkQxMTZFNzg3MEQzOEUw RTlBREI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16KNIIsJxNM8 9g8kouuLHMURY9DQ95bijWPy7ewO7DI1wpAAfZoW1GzveVxIoF03wwcpb+x8ipHN pRKc6kYDz55qVtuwco9B4Ex6oeotzVelMi1fk00Gp8oRwt1QPkgJhqFocXPsFcsN Rrwd/bUKPdzn9XC4V+Ce1qKXTU2eIkzYh9KxAtWzUcMmyqrwwQdwzUOXLhpGZ99a jFCNRIDz0p3AqvLUc2jw6H488Tn2qrxU5HiONy20vNOHOKcOcuAZgBxdiDE9yIih wRp2vkUmZ+hYhQ6JErjF7vGL16uYYT6XUt6nu8iiAOWaNpwF+TOHuujAGsjRV4yI epMxD8zbYwIDAQABo4IDFDCCAxAwHQYDVR0OBBYEFGLhqN87z7e0n8vRFueHDTjg 6a22MB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgbUG CCsGAQUFBwEHAQH/BIGlMIGiMIGfBAIAATCBmAMEAigbTAMEACgbXQMEAigbwAME Aigb3AMEACgb5zAMAwQEKBvwAwQAKBvyAwQCKLdYAwQAKLeWAwQAKLeZAwQBKLfO MAwDBAUot+ADBAEot+gDBAAot+0wDAMEACi38QMEAyi38AMEACi3/AMEACjfegME ACjftzAMAwQGKN/AAwQAKN/CAwQAKN/1AwQAKN/3AwQCKN/8MA0GCSqGSIb3DQEB CwUAA4IBAQAMHupHIuyI7yL/kqhSOiPFcaTgAggnLOWxIKnBnqvSIzP1FATxsg78 tPlzu4Q705cT1BsE0qrcsGRbdXbyqtcWv3f9utsf4Ga/vf5ijRpRMqD9oZk6VvL4 fILWHdgyMEW2EX1mPPNP9vswoktgm5mtv+eum+E2eJnS0GXBqY8HeFU67Sbz9zxL 6byjC5pML+XErjFL7iS/KLYhfrXsGmbNrhoLuCCkZrjJRHXaaqWRYlMu2a3wURCO dttQ0FDXyrG5aWsXVSEYkI0T2mRdxg6dgknxuoBEO9R8k4BYuk0ThfoHyuQkHjJ3 4+p90gR7j0aEk6KTOZf5y66Afw1fS8NJ -----END CERTIFICATE-----Generated at Sat Aug 23 23:43:44 2025 by rpki-client