$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402671.roa File: AS402671.roa (raw, json) Hash identifier: IBzdh93ah/OLl2rTAaiqX3Ti0vSWB3EcE5oxM0jW220= Subject key identifier: 48:E2:21:90:80:9D:85:0A:AA:79:C6:0A:5C:1D:8D:86:06:99:6A:1B Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 5DC685C86ADC21F0C4A4FFE957B2EF7D8F688D59 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402671.roa Signing time: Thu 24 Sep 2026 07:46:19 +0000 ROA not before: Thu 24 Sep 2026 07:41:19 +0000 ROA not after: Thu 23 Sep 2027 07:46:19 +0000 asID: 402671 IP address blocks: 104.234.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:04:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:c6:85:c8:6a:dc:21:f0:c4:a4:ff:e9:57:b2:ef:7d:8f:68:8d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 24 07:41:19 2026 GMT Not After : Sep 23 07:46:19 2027 GMT Subject: CN=48E22190809D850AAA79C60A5C1D8D8606996A1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1b:87:d6:c2:b7:d4:68:50:73:3e:09:5d:97: 11:22:70:60:47:94:cd:3d:e5:42:6f:d6:d0:68:1a: 27:61:41:ad:aa:83:b4:8b:bc:61:fc:37:f2:41:4c: e2:15:e3:0e:35:ef:f8:16:40:d5:21:bf:c2:88:ff: 57:10:5c:9c:b3:61:d3:71:19:71:ef:53:aa:52:e5: 00:ff:0f:f3:c6:98:e8:8c:5d:af:87:c8:ee:6d:9a: 61:43:2f:bc:ba:d5:ca:07:5c:4a:b5:69:8b:87:09: 6a:ed:b6:7c:4c:8b:f1:56:c3:ff:70:3a:46:74:04: 8c:3e:eb:16:b6:22:af:06:dc:c2:27:e6:75:48:36: a6:10:df:21:25:79:f5:0c:19:2e:9b:49:32:15:3d: ab:13:f8:3c:8b:58:97:31:63:a6:df:75:f3:e5:32: c9:d9:30:79:fe:98:c3:63:03:d4:5d:ad:79:97:83: 3b:7c:0d:21:72:78:41:bd:55:e7:50:ab:5f:ee:73: fa:99:00:53:d7:9c:52:61:74:6a:74:0e:5c:af:6a: 6a:c4:3f:50:c8:8e:6f:4f:8c:2a:e7:3c:3f:d7:68: d8:77:8c:ff:ee:d1:66:82:6d:42:57:6a:7f:be:c9: 2b:9a:2b:c7:dd:3d:f6:22:96:6a:75:30:46:5c:1a: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E2:21:90:80:9D:85:0A:AA:79:C6:0A:5C:1D:8D:86:06:99:6A:1B X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402671.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.238.0/24 Signature Algorithm: sha256WithRSAEncryption 21:6a:af:a1:4e:0c:f3:a9:cf:81:da:42:59:76:63:f6:a7:84: 52:ab:ae:8a:9e:09:3c:60:1d:ec:bf:77:30:a2:8e:b0:17:14: da:25:3f:27:9a:3a:33:42:b6:bc:45:ee:ab:1f:9f:66:3b:31: fd:f2:ed:03:42:e6:9d:2f:1e:e5:e7:af:66:91:7d:65:ec:6a: 36:7f:0d:14:5c:4a:b4:89:1d:28:37:c9:18:5f:0c:fc:2b:ad: ca:58:de:9d:9a:7c:47:15:d6:35:86:6b:96:b0:67:7f:e5:56: 66:75:33:23:d8:b9:ca:ad:24:88:60:af:a0:53:9c:16:7f:f6: 6e:27:d6:57:41:dc:87:0f:83:3a:9b:88:ac:a2:29:1d:d6:14: a8:97:30:26:ef:e9:8d:a5:39:f2:a5:44:86:60:bb:d6:b9:a9: 16:a0:92:d5:a6:1f:ce:69:0b:39:4a:d5:54:bd:e3:f1:85:d0: 04:48:0d:96:2f:58:34:24:8f:fc:0d:ae:9b:80:f7:5d:58:97: 19:d6:80:2d:8f:2b:14:d8:e2:76:4f:90:eb:9b:c1:ef:b0:79: d4:fb:94:9a:71:ed:c2:ef:6c:d5:2b:fb:ed:1a:70:7a:3c:26: 54:c0:98:bc:35:be:0d:bf:c7:ef:84:67:fa:d1:92:bf:72:72: 7f:06:49:b7 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUXcaFyGrcIfDEpP/pV7LvfY9ojVkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwOTI0MDc0MTE5WhcNMjcwOTIzMDc0NjE5 WjAzMTEwLwYDVQQDEyg0OEUyMjE5MDgwOUQ4NTBBQUE3OUM2MEE1QzFEOEQ4NjA2 OTk2QTFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthuH1sK31GhQ cz4JXZcRInBgR5TNPeVCb9bQaBonYUGtqoO0i7xh/DfyQUziFeMONe/4FkDVIb/C iP9XEFycs2HTcRlx71OqUuUA/w/zxpjojF2vh8jubZphQy+8utXKB1xKtWmLhwlq 7bZ8TIvxVsP/cDpGdASMPusWtiKvBtzCJ+Z1SDamEN8hJXn1DBkum0kyFT2rE/g8 i1iXMWOm33Xz5TLJ2TB5/pjDYwPUXa15l4M7fA0hcnhBvVXnUKtf7nP6mQBT15xS YXRqdA5cr2pqxD9QyI5vT4wq5zw/12jYd4z/7tFmgm1CV2p/vskrmivH3T32IpZq dTBGXBptYQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFEjiIZCAnYUKqnnGClwdjYYG mWobMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMjY3MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq7jANBgkqhkiG9w0BAQsFAAOC AQEAIWqvoU4M86nPgdpCWXZj9qeEUquuip4JPGAd7L93MKKOsBcU2iU/J5o6M0K2 vEXuqx+fZjsx/fLtA0LmnS8e5eevZpF9ZexqNn8NFFxKtIkdKDfJGF8M/Cutylje nZp8RxXWNYZrlrBnf+VWZnUzI9i5yq0kiGCvoFOcFn/2bifWV0Hchw+DOpuIrKIp HdYUqJcwJu/pjaU58qVEhmC71rmpFqCS1aYfzmkLOUrVVL3j8YXQBEgNli9YNCSP /A2um4D3XViXGdaALY8rFNjidk+Q65vB77B51PuUmnHtwu9s1Sv77RpwejwmVMCY vDW+Db/H74Rn+tGSv3JyfwZJtw== -----END CERTIFICATE-----Generated at Thu Sep 24 17:36:39 2026 by rpki-client