$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa File: AS23470.roa (raw, json) Hash identifier: RAZf4ejcmZ7pnuZoUZs85xHl280To40s5I/LbQNwMbo= Subject key identifier: E3:14:A6:5B:4D:98:D2:B0:77:67:55:B4:07:37:5C:18:93:F0:DB:27 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6411AC233DA39D1747739DB1B8DB5C3F482470E4 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa Signing time: Wed 11 Mar 2026 05:13:41 +0000 ROA not before: Wed 11 Mar 2026 05:08:41 +0000 ROA not after: Wed 10 Mar 2027 05:13:41 +0000 asID: 23470 IP address blocks: 104.234.139.0/24 maxlen: 24 104.234.142.0/24 maxlen: 24 104.234.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:11:ac:23:3d:a3:9d:17:47:73:9d:b1:b8:db:5c:3f:48:24:70:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 11 05:08:41 2026 GMT Not After : Mar 10 05:13:41 2027 GMT Subject: CN=E314A65B4D98D2B0776755B407375C1893F0DB27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:fb:e0:34:f3:85:23:74:7b:32:37:d3:db: 2f:50:d3:85:2d:a9:33:3d:5e:d1:72:71:bc:72:dc: c0:25:de:1e:83:0f:c7:c1:a4:eb:80:6d:c3:a3:c6: 44:81:93:f2:9b:fb:24:68:1e:a2:be:05:5b:7c:ca: 08:0f:a4:e3:a1:31:1b:f2:1b:49:e2:65:b1:ca:de: 81:6b:56:e5:96:70:f7:50:a0:af:74:95:5c:e5:12: 96:0e:cf:b2:e2:95:ac:d1:11:1d:4a:8d:2f:d7:93: b6:ef:99:63:cd:6e:b3:c1:b9:56:50:08:06:93:cf: e4:02:d0:34:71:36:6a:35:64:8c:4e:a3:3e:55:92: c1:09:7c:cd:0f:ae:fc:5c:76:e3:24:16:33:c8:f1: f8:eb:0a:6e:db:23:ef:53:f4:4b:cb:43:82:0e:f4: c0:ca:2c:bb:ea:c3:cc:08:b6:84:17:f7:99:92:77: d9:d3:2a:bd:e0:c1:f8:8b:77:cb:15:36:c3:bb:50: 48:ce:bc:3f:82:40:02:42:e9:b1:23:3f:4f:2b:dd: 7a:f0:c4:18:da:8e:e7:c5:eb:7e:c2:cc:a0:dd:1f: 65:74:19:29:c7:b2:d6:08:75:34:db:85:14:93:2c: 56:b2:74:c6:d7:1b:28:f9:bb:e4:d3:60:a4:4c:09: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:14:A6:5B:4D:98:D2:B0:77:67:55:B4:07:37:5C:18:93:F0:DB:27 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS23470.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.139.0/24 104.234.142.0/24 104.234.177.0/24 Signature Algorithm: sha256WithRSAEncryption 36:f2:b2:1f:86:a9:9d:ea:d8:5a:d3:c9:a7:06:84:bd:3d:02: a6:ff:1d:21:67:00:05:44:15:c5:32:16:14:c1:ba:38:37:71: ec:ba:b1:f5:36:c5:91:98:02:a6:df:ab:46:94:81:b5:52:0c: 43:39:68:a4:e5:21:78:8a:6f:22:6c:02:60:fa:ee:aa:99:61: bf:cf:c3:70:c8:9b:84:0c:46:81:5e:60:0a:f0:1a:2f:1b:8a: 65:47:72:f2:4c:16:e5:10:57:d9:74:49:94:eb:61:17:ec:ee: 87:fc:75:c6:ae:cd:a8:77:1f:96:fd:f6:71:61:40:7a:00:f3: c3:5a:be:7c:06:42:ae:f6:99:f0:43:91:24:27:d4:63:b9:36: ab:ce:82:19:cf:ab:40:8b:6b:0f:f2:8c:f7:15:d4:4d:5c:8d: 65:24:4b:25:02:4e:6c:ab:db:f7:99:3c:f8:d1:cb:bc:f7:b4: 1e:10:d0:d8:5a:d3:ce:37:6f:1c:52:fc:f8:c0:87:99:28:ea: 67:80:4a:67:33:d2:76:28:c9:18:5b:4a:5a:27:68:8a:82:05: fb:dd:f1:bd:b2:04:a7:09:73:e6:d9:8b:96:1c:63:89:4e:7e: 3e:d1:d3:1e:0b:b2:3d:15:6d:44:ad:11:06:72:f0:5a:3c:ed: 95:41:ec:48 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUZBGsIz2jnRdHc52xuNtcP0gkcOQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzExMDUwODQxWhcNMjcwMzEwMDUxMzQx WjAzMTEwLwYDVQQDEyhFMzE0QTY1QjREOThEMkIwNzc2NzU1QjQwNzM3NUMxODkz RjBEQjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR/74DTzhSN0 ezI309svUNOFLakzPV7RcnG8ctzAJd4egw/HwaTrgG3Do8ZEgZPym/skaB6ivgVb fMoID6TjoTEb8htJ4mWxyt6Ba1bllnD3UKCvdJVc5RKWDs+y4pWs0REdSo0v15O2 75ljzW6zwblWUAgGk8/kAtA0cTZqNWSMTqM+VZLBCXzND678XHbjJBYzyPH46wpu 2yPvU/RLy0OCDvTAyiy76sPMCLaEF/eZknfZ0yq94MH4i3fLFTbDu1BIzrw/gkAC QumxIz9PK9168MQY2o7nxet+wsyg3R9ldBkpx7LWCHU024UUkyxWsnTG1xso+bvk 02CkTAlmtQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFOMUpltNmNKwd2dVtAc3XBiT 8NsnMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIzNDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOqLAwQAaOqOAwQAaOqxMA0GCSqG SIb3DQEBCwUAA4IBAQA28rIfhqmd6tha08mnBoS9PQKm/x0hZwAFRBXFMhYUwbo4 N3HsurH1NsWRmAKm36tGlIG1UgxDOWik5SF4im8ibAJg+u6qmWG/z8NwyJuEDEaB XmAK8BovG4plR3LyTBblEFfZdEmU62EX7O6H/HXGrs2odx+W/fZxYUB6APPDWr58 BkKu9pnwQ5EkJ9RjuTarzoIZz6tAi2sP8oz3FdRNXI1lJEslAk5sq9v3mTz40cu8 97QeENDYWtPON28cUvz4wIeZKOpngEpnM9J2KMkYW0paJ2iKggX73fG9sgSnCXPm 2YuWHGOJTn4+0dMeC7I9FW1ErREGcvBaPO2VQexI -----END CERTIFICATE-----Generated at Thu Mar 26 09:16:15 2026 by rpki-client