$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: SZuCDyhrslDqYmv34hHv12Rv2rHrAmjITwC7irO47Oc= Subject key identifier: 5E:34:9F:94:A4:3E:F8:E4:74:CF:1F:38:89:DF:AD:17:66:D2:EB:C1 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 64FE5A92E9738E8CA79190723D0E0D40B0584B74 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa Signing time: Thu 24 Apr 2025 22:46:18 +0000 ROA not before: Thu 24 Apr 2025 22:41:18 +0000 ROA not after: Thu 23 Apr 2026 22:46:18 +0000 asID: 396356 IP address blocks: 104.234.101.0/24 maxlen: 24 104.234.125.0/24 maxlen: 24 104.234.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:38:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fe:5a:92:e9:73:8e:8c:a7:91:90:72:3d:0e:0d:40:b0:58:4b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 24 22:41:18 2025 GMT Not After : Apr 23 22:46:18 2026 GMT Subject: CN=5E349F94A43EF8E474CF1F3889DFAD1766D2EBC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c7:39:24:6d:c1:8b:61:3b:d9:55:1d:80:5a: 46:59:45:f3:c2:10:b7:8a:35:d0:fc:8c:ed:da:00: 99:4f:21:0e:1d:ed:70:eb:69:e6:46:ae:8a:a3:9d: 97:e1:c5:c6:fa:51:56:a3:21:81:04:b3:ef:44:05: 1e:a1:42:73:17:71:6a:d9:88:7a:69:02:d2:73:f1: 28:bf:ea:3e:ea:ea:70:4c:64:4e:25:13:3d:c5:32: e8:08:2b:8d:a1:f2:21:4d:f9:9c:d8:d7:c4:df:cf: e9:5e:d0:7c:82:dc:14:44:ad:f0:cf:e0:be:8e:d5: 0f:fa:e8:ad:95:d7:a4:ba:5b:11:c4:c3:51:72:b1: 15:49:d9:73:c6:bc:a8:de:f1:f2:aa:cd:a2:e6:cf: 2e:2d:c0:3e:74:c4:b5:bb:80:3f:3e:f7:13:f9:62: ea:bb:33:7f:93:0f:67:be:6c:c7:08:45:6e:66:06: 9e:61:ff:36:d4:c2:7a:31:4d:ad:2b:ed:71:1f:4a: d1:75:be:de:55:d9:af:86:b7:12:1e:9c:e6:f0:7a: a6:55:15:02:68:7c:e1:37:01:d9:c9:bf:6c:6b:d0: c7:12:96:be:a7:74:b1:2d:70:b2:2d:46:b5:da:c0: fa:a8:21:79:b9:a5:7d:84:c1:b9:85:f5:a1:0e:0e: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:34:9F:94:A4:3E:F8:E4:74:CF:1F:38:89:DF:AD:17:66:D2:EB:C1 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.101.0/24 104.234.125.0/24 104.234.140.0/24 Signature Algorithm: sha256WithRSAEncryption 70:7f:99:db:fc:40:02:1c:bd:32:71:d9:ff:9f:af:c0:a2:17: ca:f5:6d:ea:00:2d:a8:a5:67:02:1e:5c:98:03:b1:1f:57:b6: 23:3a:98:17:28:67:62:a0:25:9a:33:53:57:58:12:2e:1a:95: 45:40:59:6e:15:16:5a:1d:a2:16:01:16:d3:f0:6b:92:9d:f8: 49:8b:23:6e:dc:cc:5b:aa:96:13:ec:36:a6:6c:c8:f3:22:35: b1:b4:f3:19:ad:8e:53:60:6c:8c:61:50:a8:f5:4a:f0:19:19: d8:05:7b:6f:85:91:72:86:dc:1d:6a:33:b7:28:95:3b:d8:fa: 17:8b:8f:93:85:c7:7d:70:2c:18:de:9f:fa:fd:e5:75:da:d6: 5f:25:10:65:b8:db:e9:e2:02:26:74:45:06:18:fa:5e:19:90: 9b:65:e8:50:ad:6c:78:38:62:aa:2d:65:e3:1d:b8:e9:dd:73: 2f:0d:1c:f1:fd:fd:67:b9:3c:d9:72:4a:cf:41:0b:03:6a:f5: 33:b3:ac:70:fc:ff:18:6f:08:fd:c4:6f:ed:54:1c:48:e2:fc: e8:5e:f3:f4:36:7b:3b:31:22:81:65:60:0f:e0:fa:9a:50:2d: 2e:af:71:d9:2e:3c:aa:2b:f2:22:5f:da:9b:0a:f8:ba:ed:3e: cf:23:58:b3 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUZP5akulzjoynkZByPQ4NQLBYS3QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNDI0MjI0MTE4WhcNMjYwNDIzMjI0NjE4 WjAzMTEwLwYDVQQDEyg1RTM0OUY5NEE0M0VGOEU0NzRDRjFGMzg4OURGQUQxNzY2 RDJFQkMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksc5JG3Bi2E7 2VUdgFpGWUXzwhC3ijXQ/Izt2gCZTyEOHe1w62nmRq6Ko52X4cXG+lFWoyGBBLPv RAUeoUJzF3Fq2Yh6aQLSc/Eov+o+6upwTGROJRM9xTLoCCuNofIhTfmc2NfE38/p XtB8gtwURK3wz+C+jtUP+uitldekulsRxMNRcrEVSdlzxryo3vHyqs2i5s8uLcA+ dMS1u4A/PvcT+WLquzN/kw9nvmzHCEVuZgaeYf821MJ6MU2tK+1xH0rRdb7eVdmv hrcSHpzm8HqmVRUCaHzhNwHZyb9sa9DHEpa+p3SxLXCyLUa12sD6qCF5uaV9hMG5 hfWhDg5x8QIDAQABo4ICizCCAocwHQYDVR0OBBYEFF40n5SkPvjkdM8fOInfrRdm 0uvBMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqZQMEAGjqfQMEAGjqjDANBgkq hkiG9w0BAQsFAAOCAQEAcH+Z2/xAAhy9MnHZ/5+vwKIXyvVt6gAtqKVnAh5cmAOx H1e2IzqYFyhnYqAlmjNTV1gSLhqVRUBZbhUWWh2iFgEW0/Brkp34SYsjbtzMW6qW E+w2pmzI8yI1sbTzGa2OU2BsjGFQqPVK8BkZ2AV7b4WRcobcHWoztyiVO9j6F4uP k4XHfXAsGN6f+v3lddrWXyUQZbjb6eICJnRFBhj6XhmQm2XoUK1seDhiqi1l4x24 6d1zLw0c8f39Z7k82XJKz0ELA2r1M7OscPz/GG8I/cRv7VQcSOL86F7z9DZ7OzEi gWVgD+D6mlAtLq9x2S48qivyIl/amwr4uu0+zyNYsw== -----END CERTIFICATE-----Generated at Wed May 7 01:13:45 2025 by rpki-client