$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS205886.roa File: AS205886.roa (raw, json) Hash identifier: xQlhZpGpL7JXuLdVkwl//eKIct8intyBLeFNTCOi+Jo= Subject key identifier: 6D:1C:D5:67:7E:FE:46:8D:50:FE:ED:31:B1:7E:C2:25:9C:5A:90:63 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 545C8D9E0BDD70DB8C3B4FB1F870899F14FC1293 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS205886.roa Signing time: Sat 18 Oct 2025 09:16:08 +0000 ROA not before: Sat 18 Oct 2025 09:11:08 +0000 ROA not after: Sat 17 Oct 2026 09:16:08 +0000 asID: 205886 IP address blocks: 104.234.56.0/24 maxlen: 24 104.234.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:5c:8d:9e:0b:dd:70:db:8c:3b:4f:b1:f8:70:89:9f:14:fc:12:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 18 09:11:08 2025 GMT Not After : Oct 17 09:16:08 2026 GMT Subject: CN=6D1CD5677EFE468D50FEED31B17EC2259C5A9063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:fc:3f:f0:e6:45:29:9c:5f:aa:d9:50:b6: d8:3e:d7:bc:a0:56:9b:f9:f4:81:29:0a:a6:fe:08: f9:91:49:5d:d3:3a:01:85:99:f0:5b:23:cc:9e:8d: b5:83:7c:66:a1:0f:46:11:f5:7c:ae:5d:13:0e:82: b6:c3:3e:83:54:a2:84:1e:aa:ad:94:5a:79:5c:b1: d5:f6:35:20:97:2f:52:b2:97:db:40:0b:6b:db:5f: 51:26:aa:cc:8f:cb:4b:b5:d4:86:ba:d5:b5:8d:6c: c4:39:16:bd:d3:54:58:fa:ac:1c:31:49:35:4f:8a: 57:ee:4a:e2:47:37:ce:cb:b0:d0:ce:64:f9:4a:13: be:ea:e2:10:70:56:18:7c:db:7e:0d:c2:70:9b:4c: 45:05:6a:4f:5e:ce:0b:4e:8e:2c:c6:f7:b5:68:86: 31:39:3b:48:a8:2e:3a:4c:72:7b:0d:be:fc:b2:0a: a7:f1:fe:f6:6b:b0:fb:ec:4f:42:d6:c4:ad:8a:4e: c8:c6:d6:51:85:37:46:07:db:e2:c3:5e:fc:ef:43: 4c:6e:03:c9:0e:26:11:d6:e0:0a:89:65:15:dc:79: 1d:f2:f5:60:2c:50:08:2b:8f:67:16:7e:33:e7:0c: b1:d8:d6:43:31:56:17:f1:ac:ea:51:4c:8a:76:12: e7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:1C:D5:67:7E:FE:46:8D:50:FE:ED:31:B1:7E:C2:25:9C:5A:90:63 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS205886.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.56.0/24 104.234.247.0/24 Signature Algorithm: sha256WithRSAEncryption b4:9d:ad:0e:97:89:42:1f:25:26:04:bb:08:71:d9:aa:47:87: 87:02:0d:af:34:7b:64:fe:04:8d:25:c4:d9:0d:25:fc:07:f3: c9:e5:ba:4f:0e:4f:76:80:fe:3d:bc:78:9d:66:de:7c:02:70: 89:a4:cd:d2:28:92:97:5b:8e:ac:14:cc:b9:4a:62:89:0f:2d: db:1d:fd:84:a0:16:d0:13:94:9f:c7:8d:99:1a:d2:9d:97:e5: b1:cf:4f:45:5e:45:ec:ca:c6:05:ad:62:5f:78:19:c9:9d:c0: 3d:30:3a:cb:79:1c:07:bf:b4:dc:7b:f2:48:ba:5e:78:3a:fe: f8:ee:94:13:d8:01:22:c3:de:29:bc:f0:24:9e:07:8e:dc:d5: 08:68:a1:8b:7f:87:e5:d2:f4:f6:0f:e8:9b:1c:9f:f3:8f:72: 70:d7:9e:66:9f:60:f1:a5:69:65:33:69:b9:72:ee:60:ca:a4: 17:fe:e7:3d:c2:26:8f:32:2b:ca:5e:03:10:de:41:13:94:18: 36:0a:34:44:c6:19:af:41:a5:e2:de:a1:3b:92:50:3a:e3:38: ae:cf:70:96:17:36:eb:41:df:96:44:17:cd:1e:22:5b:f8:52: d1:0e:67:f0:81:f9:6f:19:bc:88:e2:56:d8:59:e4:73:9f:15: b6:7d:5e:c8 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUVFyNngvdcNuMO0+x+HCJnxT8EpMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDE4MDkxMTA4WhcNMjYxMDE3MDkxNjA4 WjAzMTEwLwYDVQQDEyg2RDFDRDU2NzdFRkU0NjhENTBGRUVEMzFCMTdFQzIyNTlD NUE5MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukj8P/DmRSmc X6rZULbYPte8oFab+fSBKQqm/gj5kUld0zoBhZnwWyPMno21g3xmoQ9GEfV8rl0T DoK2wz6DVKKEHqqtlFp5XLHV9jUgly9SspfbQAtr219RJqrMj8tLtdSGutW1jWzE ORa901RY+qwcMUk1T4pX7kriRzfOy7DQzmT5ShO+6uIQcFYYfNt+DcJwm0xFBWpP Xs4LTo4sxve1aIYxOTtIqC46THJ7Db78sgqn8f72a7D77E9C1sStik7IxtZRhTdG B9viw17870NMbgPJDiYR1uAKiWUV3Hkd8vVgLFAIK49nFn4z5wyx2NZDMVYX8azq UUyKdhLnKwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFG0c1Wd+/kaNUP7tMbF+wiWc WpBjMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIwNTg4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqOAMEAGjq9zANBgkqhkiG9w0B AQsFAAOCAQEAtJ2tDpeJQh8lJgS7CHHZqkeHhwINrzR7ZP4EjSXE2Q0l/AfzyeW6 Tw5PdoD+Pbx4nWbefAJwiaTN0iiSl1uOrBTMuUpiiQ8t2x39hKAW0BOUn8eNmRrS nZflsc9PRV5F7MrGBa1iX3gZyZ3APTA6y3kcB7+03HvySLpeeDr++O6UE9gBIsPe KbzwJJ4HjtzVCGihi3+H5dL09g/omxyf849ycNeeZp9g8aVpZTNpuXLuYMqkF/7n PcImjzIryl4DEN5BE5QYNgo0RMYZr0Gl4t6hO5JQOuM4rs9wlhc260HflkQXzR4i W/hS0Q5n8IH5bxm8iOJW2Fnkc58Vtn1eyA== -----END CERTIFICATE-----Generated at Mon Oct 20 09:07:04 2025 by rpki-client