$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: xdFCvHUVyYqtozwaTwhF+69M2Mv5EO0+BDGFb8UcvSM= Subject key identifier: 80:12:D1:6E:34:DD:87:62:B7:34:1F:34:DD:67:3B:DD:04:21:55:A0 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 6DD791D3B39DB4465F6D6CF2F8435982C667B36A Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401838.roa Signing time: Wed 13 Aug 2025 05:14:24 +0000 ROA not before: Wed 13 Aug 2025 05:09:24 +0000 ROA not after: Wed 12 Aug 2026 05:14:24 +0000 asID: 401838 IP address blocks: 104.234.2.0/24 maxlen: 24 104.234.9.0/24 maxlen: 24 104.234.28.0/24 maxlen: 24 104.234.82.0/24 maxlen: 24 104.234.88.0/24 maxlen: 24 104.234.232.0/24 maxlen: 24 206.53.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 00:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:d7:91:d3:b3:9d:b4:46:5f:6d:6c:f2:f8:43:59:82:c6:67:b3:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 13 05:09:24 2025 GMT Not After : Aug 12 05:14:24 2026 GMT Subject: CN=8012D16E34DD8762B7341F34DD673BDD042155A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:f9:d9:1d:03:77:35:73:8e:e0:7f:d6:3e: 42:7c:02:2d:99:20:7b:d6:27:38:e9:c1:58:77:7b: e2:2a:9f:d1:a9:85:02:99:76:b1:76:2c:16:b4:ea: af:ae:d4:9b:bd:62:fb:7e:4e:73:42:b8:73:8a:eb: e9:d4:81:8d:b8:b3:5b:12:da:64:73:fe:62:f0:f5: 0c:00:48:0f:f5:91:53:72:19:15:71:9a:66:79:da: a8:9d:b9:82:b6:7e:70:8a:52:26:d5:c2:9d:f3:bf: ff:ec:92:1b:f0:a9:9c:69:68:fd:52:65:4f:53:a4: 30:e9:60:03:82:d4:07:e1:11:92:f9:75:e6:38:69: b6:94:6c:57:cc:a2:23:23:af:a7:28:9d:a6:f7:da: ed:6a:1e:82:b3:af:a8:91:ab:9b:3f:ae:16:7e:8b: 1d:36:85:e7:ec:07:79:72:2d:48:3f:a2:56:53:78: 65:69:3f:ab:40:2a:33:ff:94:20:48:60:9b:fe:97: 76:6e:96:0c:15:7a:c3:ea:7b:94:35:05:ac:17:7d: f5:a9:b4:19:9a:93:e1:71:fd:89:8e:85:17:55:6b: 02:33:da:34:92:7c:c5:19:40:92:81:6a:f9:c0:30: 7e:a8:ce:51:44:a1:91:42:94:5f:dd:e6:74:e9:cf: 99:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:D1:6E:34:DD:87:62:B7:34:1F:34:DD:67:3B:DD:04:21:55:A0 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.2.0/24 104.234.9.0/24 104.234.28.0/24 104.234.82.0/24 104.234.88.0/24 104.234.232.0/24 206.53.57.0/24 Signature Algorithm: sha256WithRSAEncryption 03:c2:9a:cf:f2:b8:2e:77:55:73:6d:5b:16:b5:80:08:dc:d4: 1a:90:9e:80:9f:15:ae:4d:81:30:c0:01:a0:95:3e:60:98:f8: 91:13:14:0d:3c:45:05:6c:5f:05:22:58:6f:9c:d5:7e:91:1d: 5c:7d:21:bb:a2:ce:42:68:50:24:92:2a:b5:49:af:51:67:11: 07:97:77:38:5d:8b:5e:0f:b9:b2:3e:93:d9:cd:57:ea:87:37: 1b:a1:e4:69:5b:57:9a:ff:b0:0e:7e:ef:1c:0f:17:74:70:89: 54:dd:aa:16:d3:17:ba:a2:11:22:67:fc:a3:b9:f2:5e:ad:97: 94:1e:46:59:fa:53:77:83:e0:24:c8:4e:d7:38:c4:f3:cb:d8: 2d:6f:e2:0a:c1:08:a7:10:65:4b:54:85:3a:dc:cc:22:f5:a1: ce:d6:68:46:0b:34:a4:1b:71:e1:b7:85:d7:ed:ff:7b:93:07: 51:e6:8d:0a:1b:c0:15:79:d9:ff:f3:98:44:f4:c1:22:f8:8c: e0:16:7f:bd:2c:56:05:f4:2b:ea:d0:c0:b8:97:de:71:49:df: a3:cf:ed:b9:64:fd:54:4f:bd:a2:b3:44:dc:33:83:92:91:f6: df:68:f9:33:f9:29:5a:28:26:99:75:ce:7c:ae:68:e7:3d:72: 95:8f:64:33 -----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIUbdeR07OdtEZfbWzy+ENZgsZns2owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODEzMDUwOTI0WhcNMjYwODEyMDUxNDI0 WjAzMTEwLwYDVQQDEyg4MDEyRDE2RTM0REQ4NzYyQjczNDFGMzRERDY3M0JERDA0 MjE1NUEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybz52R0DdzVz juB/1j5CfAItmSB71ic46cFYd3viKp/RqYUCmXaxdiwWtOqvrtSbvWL7fk5zQrhz iuvp1IGNuLNbEtpkc/5i8PUMAEgP9ZFTchkVcZpmedqonbmCtn5wilIm1cKd87// 7JIb8KmcaWj9UmVPU6Qw6WADgtQH4RGS+XXmOGm2lGxXzKIjI6+nKJ2m99rtah6C s6+okaubP64WfosdNoXn7Ad5ci1IP6JWU3hlaT+rQCoz/5QgSGCb/pd2bpYMFXrD 6nuUNQWsF331qbQZmpPhcf2JjoUXVWsCM9o0knzFGUCSgWr5wDB+qM5RRKGRQpRf 3eZ06c+ZFQIDAQABo4ICozCCAp8wHQYDVR0OBBYEFIAS0W403YditzQfNN1nO90E IVWgMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBD BggrBgEFBQcBBwEB/wQ0MDIwMAQCAAEwKgMEAGjqAgMEAGjqCQMEAGjqHAMEAGjq UgMEAGjqWAMEAGjq6AMEAM41OTANBgkqhkiG9w0BAQsFAAOCAQEAA8Kaz/K4LndV c21bFrWACNzUGpCegJ8Vrk2BMMABoJU+YJj4kRMUDTxFBWxfBSJYb5zVfpEdXH0h u6LOQmhQJJIqtUmvUWcRB5d3OF2LXg+5sj6T2c1X6oc3G6HkaVtXmv+wDn7vHA8X dHCJVN2qFtMXuqIRImf8o7nyXq2XlB5GWfpTd4PgJMhO1zjE88vYLW/iCsEIpxBl S1SFOtzMIvWhztZoRgs0pBtx4beF1+3/e5MHUeaNChvAFXnZ//OYRPTBIviM4BZ/ vSxWBfQr6tDAuJfecUnfo8/tuWT9VE+9orNE3DODkpH232j5M/kpWigmmXXOfK5o 5z1ylY9kMw== -----END CERTIFICATE-----Generated at Sat Aug 23 14:40:37 2025 by rpki-client