$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400298.roa File: AS400298.roa (raw, json) Hash identifier: oxwdDLtGhVIwgJHrQpz1V12Gg/OZbH8wPqoIjuaubbc= Subject key identifier: 00:80:C6:9B:5D:94:90:BB:58:E6:12:B1:94:39:FD:EA:5B:DF:41:12 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 51DE15F7A492672295088B6EB51A0EBF9A30478F Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400298.roa Signing time: Wed 25 Mar 2026 22:07:59 +0000 ROA not before: Wed 25 Mar 2026 22:02:59 +0000 ROA not after: Wed 24 Mar 2027 22:07:59 +0000 asID: 400298 IP address blocks: 104.234.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:de:15:f7:a4:92:67:22:95:08:8b:6e:b5:1a:0e:bf:9a:30:47:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 25 22:02:59 2026 GMT Not After : Mar 24 22:07:59 2027 GMT Subject: CN=0080C69B5D9490BB58E612B19439FDEA5BDF4112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:eb:31:c5:f7:13:db:48:ab:82:95:1b:a0: 10:26:0b:46:0c:ad:d0:06:99:0a:63:37:cc:d5:35: 0b:0e:91:a7:69:50:cd:82:f5:6d:b7:d3:8a:55:f9: 2a:1f:ff:98:82:23:ea:3d:a2:f8:24:52:aa:b0:71: 33:3f:02:43:67:1c:8d:b6:49:89:bd:a8:ec:d7:fa: de:54:3a:4b:d2:a4:c2:e4:46:ab:60:ac:f5:32:c2: 71:8b:ac:d6:a2:eb:eb:8e:bd:40:99:b1:16:63:91: 30:77:ae:6d:99:3e:9e:64:b6:cf:d3:30:81:8f:71: cb:a5:37:1e:7e:93:39:76:df:9e:59:f1:bf:37:90: 9b:b7:d7:ca:46:d5:1e:12:9f:1a:a9:9d:70:b6:2f: 93:71:bd:9d:c3:46:6c:70:e4:68:e7:e0:e7:bd:f2: 5a:d4:2a:1d:ff:bb:f6:ec:ad:41:f8:c3:3a:6c:ff: a6:41:69:73:3b:41:9c:a3:7e:d1:55:b2:5e:89:38: b1:5f:f4:93:ba:53:3c:69:5c:db:db:c6:28:fa:d7: 86:36:80:05:72:da:66:29:70:01:f1:c2:95:51:7a: 3a:a4:af:9e:7f:ff:5e:c7:39:31:01:1f:69:d7:06: bc:6a:07:fb:0a:3c:34:d1:09:62:1d:81:fc:ed:21: de:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:80:C6:9B:5D:94:90:BB:58:E6:12:B1:94:39:FD:EA:5B:DF:41:12 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400298.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.133.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:b4:b2:b8:69:f3:79:1d:70:76:5e:83:ad:a4:8a:bb:63:fe: e3:90:bd:e9:c4:ad:bb:1f:9c:3a:c3:b5:e2:f4:1a:0d:89:1d: 65:ba:4c:a1:95:e8:be:28:04:43:db:f9:c8:71:8b:f8:9a:6d: 3b:f4:11:a6:c6:55:02:dc:0f:97:e4:57:f0:0d:50:88:bf:7f: c1:88:bd:b1:32:66:4d:f0:23:84:88:48:ef:19:6e:4d:84:12: 61:b2:95:0e:36:c5:2e:5c:94:70:33:11:8e:70:ee:c3:c4:de: 75:e8:d0:ed:9d:15:e5:01:77:93:0f:17:e4:92:65:39:6d:d3: 60:20:30:10:f4:2b:4b:97:0d:98:40:8a:21:06:da:ba:e9:d1: a3:3b:2e:75:18:3a:7c:bb:4f:0b:f7:bf:f9:0b:44:98:d7:9b: 18:92:4d:5f:29:8f:f9:fc:24:b9:0f:38:4d:e7:1c:2e:ba:91: 4b:be:f4:23:12:7d:93:7e:1d:17:a7:ad:ac:75:94:0c:51:2f: b1:a1:d6:aa:1c:16:b7:a3:02:c8:ae:30:2c:0b:1e:19:f7:4f: fa:7c:c4:88:2e:93:ea:3c:b6:d6:ed:8e:81:67:ba:58:5f:3f: 07:8e:04:8d:0c:4c:36:48:9f:a5:2a:5d:18:a4:55:df:97:52: 63:72:fa:b1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUUd4V96SSZyKVCItutRoOv5owR48wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzI1MjIwMjU5WhcNMjcwMzI0MjIwNzU5 WjAzMTEwLwYDVQQDEygwMDgwQzY5QjVEOTQ5MEJCNThFNjEyQjE5NDM5RkRFQTVC REY0MTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpDrMcX3E9tI q4KVG6AQJgtGDK3QBpkKYzfM1TULDpGnaVDNgvVtt9OKVfkqH/+YgiPqPaL4JFKq sHEzPwJDZxyNtkmJvajs1/reVDpL0qTC5EarYKz1MsJxi6zWouvrjr1AmbEWY5Ew d65tmT6eZLbP0zCBj3HLpTcefpM5dt+eWfG/N5Cbt9fKRtUeEp8aqZ1wti+Tcb2d w0ZscORo5+DnvfJa1Cod/7v27K1B+MM6bP+mQWlzO0Gco37RVbJeiTixX/STulM8 aVzb28Yo+teGNoAFctpmKXAB8cKVUXo6pK+ef/9exzkxAR9p1wa8agf7Cjw00Qli HYH87SHeHwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFACAxptdlJC7WOYSsZQ5/epb 30ESMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDI5OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqhTANBgkqhkiG9w0BAQsFAAOC AQEAmrSyuGnzeR1wdl6DraSKu2P+45C96cStux+cOsO14vQaDYkdZbpMoZXovigE Q9v5yHGL+JptO/QRpsZVAtwPl+RX8A1QiL9/wYi9sTJmTfAjhIhI7xluTYQSYbKV DjbFLlyUcDMRjnDuw8TedejQ7Z0V5QF3kw8X5JJlOW3TYCAwEPQrS5cNmECKIQba uunRozsudRg6fLtPC/e/+QtEmNebGJJNXymP+fwkuQ84TeccLrqRS770IxJ9k34d F6etrHWUDFEvsaHWqhwWt6MCyK4wLAseGfdP+nzEiC6T6jy21u2OgWe6WF8/B44E jQxMNkifpSpdGKRV35dSY3L6sQ== -----END CERTIFICATE-----Generated at Thu Mar 26 08:45:18 2026 by rpki-client