$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa File: AS399486.roa (raw, json) Hash identifier: HTf/LqW+RfHc540rEXwGWelWasIkH85xwRYd8YhhvPA= Subject key identifier: 57:3C:02:E6:E4:DA:81:6D:34:E4:BB:17:6B:1A:6D:33:F2:99:70:77 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5F049A3438B9CE3000BBECBAD5B375E8D10C84FF Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa Signing time: Sun 28 Sep 2025 13:29:45 +0000 ROA not before: Sun 28 Sep 2025 13:24:45 +0000 ROA not after: Sun 27 Sep 2026 13:29:45 +0000 asID: 399486 IP address blocks: 104.234.204.0/24 maxlen: 24 104.234.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:04:9a:34:38:b9:ce:30:00:bb:ec:ba:d5:b3:75:e8:d1:0c:84:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 28 13:24:45 2025 GMT Not After : Sep 27 13:29:45 2026 GMT Subject: CN=573C02E6E4DA816D34E4BB176B1A6D33F2997077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dd:c3:60:4f:8b:37:43:44:ee:27:4f:59:8c: 47:01:71:71:31:b9:83:ff:fe:f9:55:64:29:64:30: 07:9d:1c:6e:6d:d4:dc:c8:c9:e6:c6:82:4e:4f:f8: 06:ca:4b:66:36:38:86:7e:43:fb:58:25:16:b8:79: 05:90:f1:42:cd:7b:82:ad:f0:ea:5d:fc:05:e9:84: 25:87:48:cb:3b:aa:92:b8:eb:4f:09:20:f1:a3:c2: 4f:af:14:22:ec:de:5f:21:8d:6c:ba:6d:9b:b7:03: a6:3a:c5:89:8a:6a:7a:6b:b9:d4:63:60:ed:d0:17: 2f:3f:35:15:56:64:98:6b:3b:2a:e4:44:70:e2:50: 2c:bb:74:83:fd:f0:00:4e:71:fb:38:0f:43:61:3b: bd:ed:d5:e7:24:43:51:75:03:ac:9a:0c:6c:02:0d: e9:81:85:97:36:e6:45:cc:69:56:46:b6:46:91:fc: 22:6f:4b:89:57:53:4d:4c:2b:a9:b5:5e:21:d5:12: 0b:26:2f:f8:b2:db:fe:b8:6e:52:de:06:bf:d6:04: 49:0a:bd:e4:33:d6:ee:66:35:d5:c9:85:d1:6a:f6: 47:00:8c:de:de:c9:6f:d1:d0:44:3b:ec:d6:51:73: 0e:12:97:46:b1:8a:e0:3b:8f:56:a3:27:01:64:78: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3C:02:E6:E4:DA:81:6D:34:E4:BB:17:6B:1A:6D:33:F2:99:70:77 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.204.0/23 Signature Algorithm: sha256WithRSAEncryption 10:e9:93:cd:16:77:69:99:76:40:9e:c9:8c:de:a5:f9:9b:f2: 7d:bc:68:ef:51:49:1e:b2:62:01:0f:bf:9d:19:0a:20:4a:35: f1:fc:f9:75:88:14:87:50:08:74:63:9e:15:6a:13:d8:7a:e1: d6:1a:d1:4e:9c:48:88:ad:09:1a:d9:53:23:89:7a:9a:17:12: 0a:01:f3:9c:3e:85:27:e9:04:46:ea:61:14:3e:9a:cb:d5:0c: d8:d5:96:11:de:75:1a:27:29:c4:3e:60:6e:72:49:41:c3:9b: 62:0e:fa:4c:98:4b:80:ee:26:78:2d:51:89:5f:69:ce:dd:cb: 5f:bf:04:54:0e:c1:9d:6b:e7:bc:56:2d:6d:ed:10:eb:a9:18: b3:08:4d:27:56:ff:35:f2:28:f9:ba:92:56:16:df:78:56:ae: be:90:13:ac:19:6a:b6:01:18:22:7c:d9:9e:cc:dd:fc:f6:03: d6:b4:86:b8:58:14:22:7f:d4:c5:9e:d8:70:17:a3:e3:15:df: 59:66:46:8c:5f:ee:a4:d6:3a:7c:27:09:4f:c0:49:61:f5:a5: 2c:2d:3f:d1:03:23:e4:f4:ef:83:64:b3:9e:c6:47:a9:62:55: a1:3c:f2:bb:4a:18:a0:4b:be:a5:75:46:5d:c0:4a:80:e2:0c: 0c:a8:af:ee -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUXwSaNDi5zjAAu+y61bN16NEMhP8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwOTI4MTMyNDQ1WhcNMjYwOTI3MTMyOTQ1 WjAzMTEwLwYDVQQDEyg1NzNDMDJFNkU0REE4MTZEMzRFNEJCMTc2QjFBNkQzM0Yy OTk3MDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu93DYE+LN0NE 7idPWYxHAXFxMbmD//75VWQpZDAHnRxubdTcyMnmxoJOT/gGyktmNjiGfkP7WCUW uHkFkPFCzXuCrfDqXfwF6YQlh0jLO6qSuOtPCSDxo8JPrxQi7N5fIY1sum2btwOm OsWJimp6a7nUY2Dt0BcvPzUVVmSYazsq5ERw4lAsu3SD/fAATnH7OA9DYTu97dXn JENRdQOsmgxsAg3pgYWXNuZFzGlWRrZGkfwib0uJV1NNTCuptV4h1RILJi/4stv+ uG5S3ga/1gRJCr3kM9buZjXVyYXRavZHAIze3slv0dBEO+zWUXMOEpdGsYrgO49W oycBZHjalwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFc8Aubk2oFtNOS7F2sabTPy mXB3MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5OTQ4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWjqzDANBgkqhkiG9w0BAQsFAAOC AQEAEOmTzRZ3aZl2QJ7JjN6l+Zvyfbxo71FJHrJiAQ+/nRkKIEo18fz5dYgUh1AI dGOeFWoT2Hrh1hrRTpxIiK0JGtlTI4l6mhcSCgHznD6FJ+kERuphFD6ay9UM2NWW Ed51GicpxD5gbnJJQcObYg76TJhLgO4meC1RiV9pzt3LX78EVA7BnWvnvFYtbe0Q 66kYswhNJ1b/NfIo+bqSVhbfeFauvpATrBlqtgEYInzZnszd/PYD1rSGuFgUIn/U xZ7YcBej4xXfWWZGjF/upNY6fCcJT8BJYfWlLC0/0QMj5PTvg2SznsZHqWJVoTzy u0oYoEu+pXVGXcBKgOIMDKiv7g== -----END CERTIFICATE-----Generated at Mon Oct 20 07:22:57 2025 by rpki-client