$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa File: AS401681.roa (raw, json) Hash identifier: joAvDW1dtoNPvriPdRHOWoEn15xdm8FnfcDrcBCDovU= Subject key identifier: 3D:C0:19:B7:CB:1F:E2:01:64:D0:A7:4A:7A:E1:E7:23:37:86:40:84 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 68670211944C6EF778269910B34B5C142394874A Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa Signing time: Sun 17 Aug 2025 17:37:24 +0000 ROA not before: Sun 17 Aug 2025 17:32:24 +0000 ROA not after: Sun 16 Aug 2026 17:37:24 +0000 asID: 401681 IP address blocks: 104.234.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 00:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:67:02:11:94:4c:6e:f7:78:26:99:10:b3:4b:5c:14:23:94:87:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 17 17:32:24 2025 GMT Not After : Aug 16 17:37:24 2026 GMT Subject: CN=3DC019B7CB1FE20164D0A74A7AE1E72337864084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:d3:42:da:db:c6:8c:e3:38:ab:1c:e1:87: e2:ca:4d:f6:da:4f:ac:5a:94:24:06:ce:f6:88:76: e8:6b:48:06:94:ab:91:35:ab:11:25:73:5d:2e:c2: 9f:56:9c:66:e9:f4:6d:54:ae:ce:bd:d9:7d:6d:6c: 2c:98:c8:2d:2b:7a:fe:17:36:35:e4:d2:67:3f:73: 67:28:52:0e:2e:84:fd:ba:aa:bb:68:49:2a:6e:7d: 3b:c6:ef:e0:1a:3b:26:dc:56:c3:6d:92:b6:99:4a: 96:19:a5:46:0a:ec:4a:9c:18:f0:c5:ab:55:35:d5: 7d:f5:44:e5:a6:ac:f1:17:8e:a2:ba:9c:80:64:e6: ee:e4:3a:ed:48:9d:f8:67:36:c1:12:65:b7:2f:56: e4:79:72:62:bd:0a:dd:af:82:23:d4:a7:a9:d3:e3: 7c:84:ed:b4:b6:e1:5e:77:cb:e7:3c:eb:a5:9f:28: aa:95:04:40:1f:44:4d:69:35:3a:cc:a6:5c:ea:83: 45:52:63:b9:91:90:3d:40:72:b4:4b:eb:a3:c2:aa: ef:df:ab:dd:b1:9c:e6:54:d9:be:bc:53:78:dd:17: 03:cc:75:23:c9:04:1f:aa:9f:42:57:29:9e:a2:74: 6c:74:7d:46:89:aa:7b:75:cd:6c:79:1b:1d:8d:5d: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:C0:19:B7:CB:1F:E2:01:64:D0:A7:4A:7A:E1:E7:23:37:86:40:84 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.156.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:5f:be:4b:85:b4:b7:96:05:fb:e4:4d:fc:57:a9:75:ce:d0: 42:0a:3d:12:41:14:f4:53:86:e7:8b:e9:1b:48:5e:98:f9:9d: c3:58:bb:91:5b:b1:77:3c:51:10:33:3d:d0:2a:a2:97:f6:83: a6:d4:29:58:b9:ff:00:d1:89:91:62:8d:d8:e4:36:b1:dc:d8: 74:02:0d:0d:5e:72:2d:75:20:c8:18:b9:1d:5e:05:4c:ba:07: 2a:59:c0:5a:4e:ad:aa:23:cc:24:1a:04:4e:11:35:a8:39:1f: ea:43:d2:df:ea:7f:27:8d:d5:34:f0:9c:bc:a8:f0:d9:2d:71: 76:a3:f9:5d:1f:5b:0b:1e:6c:8b:b8:83:08:95:8e:d1:a6:64: b0:d7:5c:0b:ae:f2:ca:ac:03:e7:3d:42:53:a5:9f:66:f6:3a: 72:fe:7b:c1:70:b6:a8:76:c6:b6:b4:96:b1:96:b7:50:c8:1d: 7d:ef:50:68:0f:23:15:0c:26:22:be:f5:3f:76:5f:48:0e:76: 68:fb:fb:e6:3b:37:f2:9d:3b:dd:6b:67:3e:b0:57:90:4b:8c: 38:e0:de:a0:3c:09:c1:cf:e5:10:fe:c3:a1:80:6c:9b:ff:93: 59:cf:21:3b:36:ab:75:c4:d7:28:6e:3d:0b:ff:7d:f2:d3:2b: 5d:46:ea:fa -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUaGcCEZRMbvd4JpkQs0tcFCOUh0owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODE3MTczMjI0WhcNMjYwODE2MTczNzI0 WjAzMTEwLwYDVQQDEygzREMwMTlCN0NCMUZFMjAxNjREMEE3NEE3QUUxRTcyMzM3 ODY0MDg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti7TQtrbxozj OKsc4Yfiyk322k+sWpQkBs72iHboa0gGlKuRNasRJXNdLsKfVpxm6fRtVK7Ovdl9 bWwsmMgtK3r+FzY15NJnP3NnKFIOLoT9uqq7aEkqbn07xu/gGjsm3FbDbZK2mUqW GaVGCuxKnBjwxatVNdV99UTlpqzxF46iupyAZObu5DrtSJ34ZzbBEmW3L1bkeXJi vQrdr4Ij1Kep0+N8hO20tuFed8vnPOulnyiqlQRAH0RNaTU6zKZc6oNFUmO5kZA9 QHK0S+ujwqrv36vdsZzmVNm+vFN43RcDzHUjyQQfqp9CVymeonRsdH1Giap7dc1s eRsdjV3gUwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFD3AGbfLH+IBZNCnSnrh5yM3 hkCEMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTY4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqnDANBgkqhkiG9w0BAQsFAAOC AQEATF++S4W0t5YF++RN/Fepdc7QQgo9EkEU9FOG54vpG0hemPmdw1i7kVuxdzxR EDM90Cqil/aDptQpWLn/ANGJkWKN2OQ2sdzYdAINDV5yLXUgyBi5HV4FTLoHKlnA Wk6tqiPMJBoEThE1qDkf6kPS3+p/J43VNPCcvKjw2S1xdqP5XR9bCx5si7iDCJWO 0aZksNdcC67yyqwD5z1CU6WfZvY6cv57wXC2qHbGtrSWsZa3UMgdfe9QaA8jFQwm Ir71P3ZfSA52aPv75js38p073WtnPrBXkEuMOODeoDwJwc/lEP7DoYBsm/+TWc8h OzardcTXKG49C/998tMrXUbq+g== -----END CERTIFICATE-----Generated at Sat Aug 23 16:53:23 2025 by rpki-client