$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa File: AS16276.roa (raw, json) Hash identifier: X6r09QFp5KE+csO8uuy1XvGzTAI1Ua4vSidQooqXWQ4= Subject key identifier: 32:64:9D:9C:BB:97:C3:05:37:DD:91:A2:32:FE:7D:04:F3:A2:B1:A6 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 195669FCA8131271F58BCE1DFB80AC19EDAA63A7 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa Signing time: Sun 22 Mar 2026 10:47:13 +0000 ROA not before: Sun 22 Mar 2026 10:42:13 +0000 ROA not after: Sun 21 Mar 2027 10:47:13 +0000 asID: 16276 IP address blocks: 104.234.3.0/24 maxlen: 24 104.234.50.0/24 maxlen: 24 104.234.94.0/24 maxlen: 24 104.234.135.0/24 maxlen: 24 104.234.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:56:69:fc:a8:13:12:71:f5:8b:ce:1d:fb:80:ac:19:ed:aa:63:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 22 10:42:13 2026 GMT Not After : Mar 21 10:47:13 2027 GMT Subject: CN=32649D9CBB97C30537DD91A232FE7D04F3A2B1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:54:b8:a8:49:2b:22:d4:35:0f:43:c0:45:1d: 9e:aa:e7:f2:76:75:45:ae:58:b1:03:df:03:a2:e9: c7:bb:82:62:3a:a8:3e:4a:ad:1e:ba:c0:f3:10:3d: 17:c0:65:42:ab:01:40:b0:cb:0f:bb:5b:1d:1b:85: e4:65:8b:c3:c4:c4:65:f3:ed:5f:6c:db:c9:44:f6: 72:27:d6:f2:68:98:5d:04:51:73:dc:2a:e1:03:ab: db:d1:c7:d0:cf:b1:b6:e1:50:fd:0e:f8:71:70:49: f7:60:09:9f:2e:1c:47:a7:ba:56:8b:24:2c:c8:c7: 8e:21:bd:e6:0d:5d:61:39:0b:87:fc:22:48:64:05: eb:51:e7:48:29:95:cc:88:80:ce:da:66:be:3c:ce: c6:0f:2c:bc:8b:11:f6:d7:2c:ec:d5:6a:03:23:0e: 05:76:82:03:a5:59:e9:48:d9:28:60:90:c6:31:47: d1:9a:02:28:5c:3f:df:d2:5e:a7:37:6e:87:84:a1: 47:d8:4a:80:fb:7d:4a:dd:a3:be:c2:b5:95:64:7a: cd:a9:cf:ac:57:68:cc:15:0d:be:1f:fa:11:d9:e9: 9d:50:ec:72:18:ae:9a:67:6e:1d:0f:10:02:32:fb: f9:d2:8f:f9:00:d2:47:07:61:57:b4:bc:28:7a:d4: 59:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:64:9D:9C:BB:97:C3:05:37:DD:91:A2:32:FE:7D:04:F3:A2:B1:A6 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS16276.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.3.0/24 104.234.50.0/24 104.234.94.0/24 104.234.135.0/24 104.234.168.0/24 Signature Algorithm: sha256WithRSAEncryption 50:fc:e4:bc:de:2c:04:4a:7c:86:dc:b7:ae:5c:be:40:a1:ec: 6d:e1:b6:ff:c3:ef:31:95:be:7c:d0:57:25:ef:94:2e:ec:be: 5a:e8:a5:2b:29:de:23:38:5c:20:ad:fa:b2:f9:89:de:76:77: d2:47:ee:f6:56:f2:2d:e2:98:f2:18:5c:b2:ea:5a:70:a3:52: 6c:00:65:f1:6d:65:d5:b7:1b:62:20:a8:b5:f9:a7:56:21:72: c3:49:db:10:56:de:e1:96:6e:c5:1b:ab:bf:57:ae:62:ed:44: b7:84:b0:a4:d5:23:09:50:e2:dc:fe:31:be:16:c1:0e:2f:ed: 93:ab:c4:f6:94:4b:29:aa:2f:d2:3d:51:0f:95:16:f6:a4:ac: 4e:dd:15:70:0b:6d:de:40:be:28:5c:4f:a2:e4:14:fa:4a:cc: fb:ec:06:64:12:4b:85:8e:8b:18:6b:fc:f7:39:2c:8b:de:ce: a6:35:f0:08:8d:bd:6d:3d:45:ff:eb:80:89:49:5f:6b:02:ee: 9b:f0:74:ae:73:a9:64:49:ad:b7:7d:e1:97:36:5b:a1:4f:db: 39:b7:e2:0b:6f:0c:aa:89:df:15:4c:93:0d:79:57:91:51:f2: 4b:41:27:a8:6f:69:a6:f0:2c:ac:a0:af:06:1c:02:ae:8b:55: 90:7c:69:be -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUGVZp/KgTEnH1i84d+4CsGe2qY6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzIyMTA0MjEzWhcNMjcwMzIxMTA0NzEz WjAzMTEwLwYDVQQDEygzMjY0OUQ5Q0JCOTdDMzA1MzdERDkxQTIzMkZFN0QwNEYz QTJCMUE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslS4qEkrItQ1 D0PARR2equfydnVFrlixA98DounHu4JiOqg+Sq0eusDzED0XwGVCqwFAsMsPu1sd G4XkZYvDxMRl8+1fbNvJRPZyJ9byaJhdBFFz3CrhA6vb0cfQz7G24VD9DvhxcEn3 YAmfLhxHp7pWiyQsyMeOIb3mDV1hOQuH/CJIZAXrUedIKZXMiIDO2ma+PM7GDyy8 ixH21yzs1WoDIw4FdoIDpVnpSNkoYJDGMUfRmgIoXD/f0l6nN26HhKFH2EqA+31K 3aO+wrWVZHrNqc+sV2jMFQ2+H/oR2emdUOxyGK6aZ24dDxACMvv50o/5ANJHB2FX tLwoetRZLQIDAQABo4ICljCCApIwHQYDVR0OBBYEFDJknZy7l8MFN92RojL+fQTz orGmMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE2Mjc2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOoDAwQAaOoyAwQAaOpeAwQAaOqH AwQAaOqoMA0GCSqGSIb3DQEBCwUAA4IBAQBQ/OS83iwESnyG3LeuXL5Aoext4bb/ w+8xlb580Fcl75Qu7L5a6KUrKd4jOFwgrfqy+YnednfSR+72VvIt4pjyGFyy6lpw o1JsAGXxbWXVtxtiIKi1+adWIXLDSdsQVt7hlm7FG6u/V65i7US3hLCk1SMJUOLc /jG+FsEOL+2Tq8T2lEspqi/SPVEPlRb2pKxO3RVwC23eQL4oXE+i5BT6Ssz77AZk EkuFjosYa/z3OSyL3s6mNfAIjb1tPUX/64CJSV9rAu6b8HSuc6lkSa23feGXNluh T9s5t+ILbwyqid8VTJMNeVeRUfJLQSeob2mm8CysoK8GHAKui1WQfGm+ -----END CERTIFICATE-----Generated at Thu Mar 26 11:46:08 2026 by rpki-client