$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: w9UN4o6klpdBXB1sS/TUoWBOGPqXNRGzg0gtiCgneRY= Subject key identifier: 60:77:43:97:DF:8F:9B:69:C8:08:03:24:0A:47:21:9B:A7:F9:EA:20 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6B018CF833E676A080022B11F49086087F052A0A Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa Signing time: Tue 02 Sep 2025 11:02:15 +0000 ROA not before: Tue 02 Sep 2025 10:57:15 +0000 ROA not after: Tue 01 Sep 2026 11:02:15 +0000 asID: 396356 IP address blocks: 104.234.101.0/24 maxlen: 24 104.234.125.0/24 maxlen: 24 104.234.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:01:8c:f8:33:e6:76:a0:80:02:2b:11:f4:90:86:08:7f:05:2a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 2 10:57:15 2025 GMT Not After : Sep 1 11:02:15 2026 GMT Subject: CN=60774397DF8F9B69C80803240A47219BA7F9EA20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:2d:ae:fe:fe:e6:e5:61:ae:8b:e1:2b:3f: 0b:da:d3:f8:c1:c5:33:a9:b4:27:11:d7:1b:9b:a7: 16:78:20:dd:f5:7f:3a:25:f6:5d:46:38:f3:b8:9b: cd:7d:25:6e:30:4e:90:14:ff:bc:4f:f0:d8:de:cd: cc:43:1c:f9:5f:b0:8f:77:94:6e:cb:b6:f0:0f:19: 1f:8e:0f:72:41:c1:37:46:25:8e:5d:3d:f3:da:22: ea:51:1a:45:f0:59:4c:bd:3a:7a:78:b2:43:8e:76: 7e:f8:ec:2a:5c:62:55:66:f8:c9:89:6a:72:07:d2: 6f:98:72:2d:12:e2:75:ef:33:36:98:9e:6a:07:11: c1:fd:5e:2a:07:76:6e:b5:9b:8c:83:16:95:83:c7: 29:da:de:e3:7e:a0:06:e7:f8:2b:00:2b:d3:86:50: e4:60:60:4f:56:fd:48:df:79:fa:60:a4:5c:de:ae: 61:15:1c:51:70:a6:87:ea:d1:a9:48:05:ab:b0:36: cd:43:fd:65:bc:6e:fc:68:fe:6a:61:b7:48:ec:59: 24:40:3d:83:ea:aa:34:57:19:9c:66:8d:8a:c4:5d: 09:54:ec:43:a7:56:5e:01:ae:86:41:26:da:b8:02: 06:df:2e:67:e8:f8:1e:b7:82:87:eb:a9:51:39:e2: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:77:43:97:DF:8F:9B:69:C8:08:03:24:0A:47:21:9B:A7:F9:EA:20 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.101.0/24 104.234.125.0/24 104.234.140.0/24 Signature Algorithm: sha256WithRSAEncryption b5:4c:08:f6:8e:0c:b6:c2:91:49:62:dc:3c:2a:b9:2b:cb:0a: e0:b0:92:9f:c7:c1:eb:14:50:3b:a3:53:09:28:3d:db:c3:f1: f4:18:76:ed:d9:68:31:89:91:e9:65:92:db:51:2a:99:57:e0: 0e:1c:6f:ab:b4:ea:7b:34:89:12:08:39:7b:c3:3a:74:55:fe: 53:a7:76:d8:38:8d:36:cb:4b:fb:7e:12:8c:6f:81:49:07:60: 39:f4:f5:29:5b:fd:5f:56:64:0a:ba:4c:35:86:66:91:84:e5: 4b:46:3b:2c:b0:d0:04:81:66:09:ff:41:4e:96:14:43:ce:80: 12:e4:5f:d5:cf:02:e9:bc:97:c5:3b:72:68:8c:e5:14:81:dc: 7f:97:31:22:7c:27:e6:1b:0e:0c:92:57:b3:49:76:88:d5:68: 7e:64:2c:f0:01:8e:9b:1f:1a:41:47:89:a0:9d:6b:5d:ab:af: 3f:55:86:fe:fb:0d:ac:88:0f:75:3c:80:5a:6d:34:55:71:3e: a6:db:dc:d2:5a:ac:9a:a1:63:54:3f:37:5b:a0:97:c4:99:27: c4:2e:a8:0f:80:10:ad:77:82:69:22:0a:0f:4a:11:f3:ca:84: 17:24:85:2e:13:e1:0e:b7:16:9f:4f:e4:29:2d:61:ee:7b:e2: 68:97:c1:05 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUawGM+DPmdqCAAisR9JCGCH8FKgowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwOTAyMTA1NzE1WhcNMjYwOTAxMTEwMjE1 WjAzMTEwLwYDVQQDEyg2MDc3NDM5N0RGOEY5QjY5QzgwODAzMjQwQTQ3MjE5QkE3 RjlFQTIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FYtrv7+5uVh rovhKz8L2tP4wcUzqbQnEdcbm6cWeCDd9X86JfZdRjjzuJvNfSVuME6QFP+8T/DY 3s3MQxz5X7CPd5Ruy7bwDxkfjg9yQcE3RiWOXT3z2iLqURpF8FlMvTp6eLJDjnZ+ +OwqXGJVZvjJiWpyB9JvmHItEuJ17zM2mJ5qBxHB/V4qB3ZutZuMgxaVg8cp2t7j fqAG5/grACvThlDkYGBPVv1I33n6YKRc3q5hFRxRcKaH6tGpSAWrsDbNQ/1lvG78 aP5qYbdI7FkkQD2D6qo0VxmcZo2KxF0JVOxDp1ZeAa6GQSbauAIG3y5n6Pget4KH 66lROeJnbwIDAQABo4ICizCCAocwHQYDVR0OBBYEFGB3Q5ffj5tpyAgDJApHIZun +eogMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqZQMEAGjqfQMEAGjqjDANBgkq hkiG9w0BAQsFAAOCAQEAtUwI9o4MtsKRSWLcPCq5K8sK4LCSn8fB6xRQO6NTCSg9 28Px9Bh27dloMYmR6WWS21EqmVfgDhxvq7TqezSJEgg5e8M6dFX+U6d22DiNNstL +34SjG+BSQdgOfT1KVv9X1ZkCrpMNYZmkYTlS0Y7LLDQBIFmCf9BTpYUQ86AEuRf 1c8C6byXxTtyaIzlFIHcf5cxInwn5hsODJJXs0l2iNVofmQs8AGOmx8aQUeJoJ1r XauvP1WG/vsNrIgPdTyAWm00VXE+ptvc0lqsmqFjVD83W6CXxJknxC6oD4AQrXeC aSIKD0oR88qEFySFLhPhDrcWn0/kKS1h7nviaJfBBQ== -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:54 2025 by rpki-client