$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: nmsR9c4thM1KGZjPbws4+jbq4sgUECEQ7K1JBEZbZj8= Subject key identifier: 5B:FA:C2:48:EE:6D:E6:E1:B1:CF:41:4F:29:0C:06:A4:E7:1E:89:73 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 3C2B9F3005D52C1F6517A3920734857E45338D74 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa Signing time: Thu 09 Jul 2026 15:29:20 +0000 ROA not before: Thu 09 Jul 2026 15:24:20 +0000 ROA not after: Thu 08 Jul 2027 15:29:20 +0000 asID: 212238 IP address blocks: 104.234.61.0/24 maxlen: 24 104.234.120.0/24 maxlen: 24 104.234.149.0/24 maxlen: 24 104.234.196.0/24 maxlen: 24 104.234.208.0/24 maxlen: 24 104.234.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 23:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2b:9f:30:05:d5:2c:1f:65:17:a3:92:07:34:85:7e:45:33:8d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 9 15:24:20 2026 GMT Not After : Jul 8 15:29:20 2027 GMT Subject: CN=5BFAC248EE6DE6E1B1CF414F290C06A4E71E8973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:68:ab:c0:4a:09:47:9c:6a:1d:a3:0b:ed: 84:78:47:f9:63:de:1a:7b:6c:ed:f2:d5:fb:ac:99: 3d:6c:01:cf:f8:67:ff:51:21:b3:1f:61:d0:01:1e: 4c:d8:50:37:69:3c:7b:db:eb:d7:c2:59:21:91:04: b6:de:9c:19:e2:90:46:a2:6f:29:ca:e2:b6:1c:6a: 39:b0:b4:dd:e5:b0:c6:15:da:47:57:78:26:45:7f: b1:7a:c7:77:5e:b6:61:6d:e6:44:69:f7:45:20:f8: c6:81:0f:e0:d6:30:0e:7e:9b:09:28:8a:3a:a6:3e: 7b:0b:48:f5:df:01:e3:d7:7b:da:61:a7:25:6d:8b: b3:5e:54:fc:20:4b:46:41:a9:58:ca:7e:9f:e4:dc: b8:40:dd:b1:b8:47:4f:a3:43:99:ce:93:dc:d9:12: 9d:3a:1c:dc:b9:d8:6c:d1:b6:f8:d0:7d:ae:90:d3: 94:ac:6e:94:08:ef:6a:87:2c:f6:55:93:51:8d:e0: 61:3a:0a:50:ab:6e:da:86:07:40:b6:52:df:a1:4b: 63:54:6d:8a:a8:24:c5:3b:2f:77:7a:84:55:c9:99: 31:63:d6:fb:89:a6:6e:d3:c7:1e:88:a9:31:5a:c1: 0b:90:0b:a2:64:9f:fa:af:cf:64:72:81:f7:a9:5d: 4a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FA:C2:48:EE:6D:E6:E1:B1:CF:41:4F:29:0C:06:A4:E7:1E:89:73 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.61.0/24 104.234.120.0/24 104.234.149.0/24 104.234.196.0/24 104.234.208.0/24 104.234.240.0/24 Signature Algorithm: sha256WithRSAEncryption 34:3b:5b:78:f8:90:6a:c1:c0:c4:59:a4:c4:f4:d7:07:a4:c7: 24:e9:d4:69:a3:30:27:dd:e3:fa:b7:af:0b:9b:41:e4:2e:fd: 65:9a:94:77:dd:10:6d:17:08:29:23:28:36:eb:82:cf:00:08: 68:48:ca:56:53:53:b1:4f:bf:1b:1c:f2:e2:43:e1:e1:14:82: 3f:83:81:af:cb:ec:ec:62:04:77:96:a5:07:05:44:16:85:e5: 5a:b4:6c:51:05:2c:69:89:0c:b8:d4:6d:ee:52:b0:ba:39:47: 7d:4c:a3:d3:df:14:1b:13:f2:43:72:5f:5e:5f:51:84:9d:6b: 2e:b6:f8:a3:ec:ed:7d:be:01:aa:0b:97:3f:ff:58:47:d5:93: 67:9c:0e:4e:93:1f:d9:e0:f7:90:c4:c6:af:f4:21:dc:43:b1: 21:d2:75:70:53:1f:a9:93:31:f8:0e:12:0f:f3:11:39:02:57: d1:74:8c:20:2b:13:ad:8c:61:92:c2:25:f1:1d:ef:24:9f:d0: 01:17:59:f9:b6:f8:d1:ab:e5:3a:4f:5d:e6:57:65:9c:48:cf: b6:83:47:a3:07:dc:2c:fc:92:a0:a1:b9:a4:09:ab:13:8a:54: 6e:b1:c8:e4:62:8a:02:5b:a0:7f:f3:1e:23:de:f5:c2:9c:4f: d5:f1:1f:f8 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUPCufMAXVLB9lF6OSBzSFfkUzjXQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNzA5MTUyNDIwWhcNMjcwNzA4MTUyOTIw WjAzMTEwLwYDVQQDEyg1QkZBQzI0OEVFNkRFNkUxQjFDRjQxNEYyOTBDMDZBNEU3 MUU4OTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgJoq8BKCUec ah2jC+2EeEf5Y94ae2zt8tX7rJk9bAHP+Gf/USGzH2HQAR5M2FA3aTx72+vXwlkh kQS23pwZ4pBGom8pyuK2HGo5sLTd5bDGFdpHV3gmRX+xesd3XrZhbeZEafdFIPjG gQ/g1jAOfpsJKIo6pj57C0j13wHj13vaYaclbYuzXlT8IEtGQalYyn6f5Ny4QN2x uEdPo0OZzpPc2RKdOhzcudhs0bb40H2ukNOUrG6UCO9qhyz2VZNRjeBhOgpQq27a hgdAtlLfoUtjVG2KqCTFOy93eoRVyZkxY9b7iaZu08ceiKkxWsELkAuiZJ/6r89k coH3qV1KCQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFv6wkjubebhsc9BTykMBqTn HolzMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA9 BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAGjqPQMEAGjqeAMEAGjqlQMEAGjq xAMEAGjq0AMEAGjq8DANBgkqhkiG9w0BAQsFAAOCAQEANDtbePiQasHAxFmkxPTX B6THJOnUaaMwJ93j+revC5tB5C79ZZqUd90QbRcIKSMoNuuCzwAIaEjKVlNTsU+/ Gxzy4kPh4RSCP4OBr8vs7GIEd5alBwVEFoXlWrRsUQUsaYkMuNRt7lKwujlHfUyj 098UGxPyQ3JfXl9RhJ1rLrb4o+ztfb4BqguXP/9YR9WTZ5wOTpMf2eD3kMTGr/Qh 3EOxIdJ1cFMfqZMx+A4SD/MROQJX0XSMICsTrYxhksIl8R3vJJ/QARdZ+bb40avl Ok9d5ldlnEjPtoNHowfcLPySoKG5pAmrE4pUbrHI5GKKAlugf/MeI971wpxP1fEf +A== -----END CERTIFICATE-----Generated at Fri Jul 24 03:31:38 2026 by rpki-client