$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa File: AS401681.roa (raw, json) Hash identifier: v8Zx+od2sGMsAHOC9pXc03f1MGYAIjkUSUO0Xc08JAI= Subject key identifier: 34:83:DA:B1:23:3D:55:EF:EB:ED:8E:7C:55:D5:6A:B8:E7:47:81:B6 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 279A5584FC22001ACEF09E874D37C6098CC5D567 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa Signing time: Wed 18 Mar 2026 04:37:18 +0000 ROA not before: Wed 18 Mar 2026 04:32:18 +0000 ROA not after: Wed 17 Mar 2027 04:37:18 +0000 asID: 401681 IP address blocks: 104.234.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:9a:55:84:fc:22:00:1a:ce:f0:9e:87:4d:37:c6:09:8c:c5:d5:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 18 04:32:18 2026 GMT Not After : Mar 17 04:37:18 2027 GMT Subject: CN=3483DAB1233D55EFEBED8E7C55D56AB8E74781B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:9e:58:49:43:62:33:d6:f3:d2:30:fd:a8: a6:27:b1:9c:58:15:58:db:89:52:38:3a:f5:4d:05: d6:84:d8:e2:d5:96:07:3b:7a:e8:3d:42:e8:e4:83: 19:e5:7c:48:50:0f:cc:a8:24:56:a7:a6:a5:00:f6: 5c:1b:67:f4:1e:0c:18:5d:6f:32:09:37:c4:c8:89: 26:1a:5b:4a:08:97:97:2d:ba:c8:45:cd:69:42:3f: ff:88:19:45:7c:7c:62:50:0e:a0:a8:13:92:0f:55: e3:9b:41:c7:93:a5:03:ba:95:5d:57:1f:a6:43:5a: 66:82:86:5b:8c:d4:ea:b2:a4:d3:f9:cf:7f:13:e2: a7:2e:43:b9:72:42:b5:ad:ff:68:35:25:48:07:5e: eb:a3:41:74:d6:22:93:01:4e:90:98:92:2a:28:18: 06:72:a6:ce:20:ce:92:eb:df:2d:c3:98:1c:e5:b1: 5f:39:cb:72:d3:a2:03:6a:b7:d1:c6:4e:f1:e6:71: be:66:69:e9:8c:35:8f:42:eb:9b:32:c9:a3:58:79: 27:3b:84:45:d3:80:dd:50:43:c1:b0:85:e9:e8:93: 0f:02:47:03:f2:67:0e:dc:83:ce:ae:d5:bb:35:60: 76:20:92:75:fe:52:cc:3c:41:62:d6:a6:37:9e:96: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:83:DA:B1:23:3D:55:EF:EB:ED:8E:7C:55:D5:6A:B8:E7:47:81:B6 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401681.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.156.0/24 Signature Algorithm: sha256WithRSAEncryption 52:5e:7c:bd:1c:92:ec:25:40:a2:66:fb:b3:cb:b5:ad:8d:0c: 68:86:ff:b3:01:11:bf:36:e6:7b:0c:0d:f1:fe:0e:f1:62:88: 5a:5f:ce:ba:57:b3:f0:9a:ee:22:04:92:df:cf:9d:0d:83:6e: 7c:3e:8e:24:8d:3d:fb:04:a4:ae:3d:dd:2f:cf:68:35:39:34: af:ee:6e:72:b5:5b:8c:5a:16:11:02:34:54:61:cb:66:ae:20: 18:6d:9a:45:a1:8b:05:8d:03:30:3b:56:1d:73:79:af:d2:7a: b6:83:80:5d:1c:36:f5:1e:ae:3b:ba:1c:b4:e7:14:20:df:18: 2e:5a:ee:a7:c2:46:a7:0b:ad:65:80:74:cd:b1:9e:24:7b:75: fb:fd:0d:00:8e:a8:7f:77:b5:f9:f4:c9:23:5e:d4:72:16:02: a4:2b:6d:89:58:a3:34:26:f4:14:9d:49:f0:d3:00:de:96:06: ce:13:37:aa:e1:30:2e:13:00:f8:46:6c:e6:e2:84:3c:a3:29: d7:f8:eb:03:22:d4:1f:22:50:45:29:aa:a5:47:d1:dd:78:a3: 33:39:75:a4:d0:82:a7:ba:be:43:92:51:81:a4:7c:30:28:8a: 75:c2:a1:7f:24:cb:13:56:0d:2e:08:33:da:89:53:6d:c5:8a: ba:04:92:f1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUJ5pVhPwiABrO8J6HTTfGCYzF1WcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzE4MDQzMjE4WhcNMjcwMzE3MDQzNzE4 WjAzMTEwLwYDVQQDEygzNDgzREFCMTIzM0Q1NUVGRUJFRDhFN0M1NUQ1NkFCOEU3 NDc4MUI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrCeWElDYjPW 89Iw/aimJ7GcWBVY24lSODr1TQXWhNji1ZYHO3roPULo5IMZ5XxIUA/MqCRWp6al APZcG2f0HgwYXW8yCTfEyIkmGltKCJeXLbrIRc1pQj//iBlFfHxiUA6gqBOSD1Xj m0HHk6UDupVdVx+mQ1pmgoZbjNTqsqTT+c9/E+KnLkO5ckK1rf9oNSVIB17ro0F0 1iKTAU6QmJIqKBgGcqbOIM6S698tw5gc5bFfOcty06IDarfRxk7x5nG+ZmnpjDWP QuubMsmjWHknO4RF04DdUEPBsIXp6JMPAkcD8mcO3IPOrtW7NWB2IJJ1/lLMPEFi 1qY3npadkQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFDSD2rEjPVXv6+2OfFXVarjn R4G2MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTY4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqnDANBgkqhkiG9w0BAQsFAAOC AQEAUl58vRyS7CVAomb7s8u1rY0MaIb/swERvzbmewwN8f4O8WKIWl/Oulez8Jru IgSS38+dDYNufD6OJI09+wSkrj3dL89oNTk0r+5ucrVbjFoWEQI0VGHLZq4gGG2a RaGLBY0DMDtWHXN5r9J6toOAXRw29R6uO7octOcUIN8YLlrup8JGpwutZYB0zbGe JHt1+/0NAI6of3e1+fTJI17UchYCpCttiVijNCb0FJ1J8NMA3pYGzhM3quEwLhMA +EZs5uKEPKMp1/jrAyLUHyJQRSmqpUfR3XijMzl1pNCCp7q+Q5JRgaR8MCiKdcKh fyTLE1YNLggz2olTbcWKugSS8Q== -----END CERTIFICATE-----Generated at Thu Mar 26 11:45:57 2026 by rpki-client