$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47813.roa File: AS47813.roa (raw, json) Hash identifier: SqKV9lE7WG0BdbO/gNoqH0TumSRIDPmLtTwpbWwzuUo= Subject key identifier: D9:32:B0:29:7E:FE:11:A2:E3:3E:D5:AD:52:13:48:75:80:D1:05:D3 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4D0D9B8EF6A1E52AD4815AD1FF12B26FD3D06535 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47813.roa Signing time: Mon 01 Sep 2025 14:29:45 +0000 ROA not before: Mon 01 Sep 2025 14:24:45 +0000 ROA not after: Mon 31 Aug 2026 14:29:45 +0000 asID: 47813 IP address blocks: 104.234.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0d:9b:8e:f6:a1:e5:2a:d4:81:5a:d1:ff:12:b2:6f:d3:d0:65:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 1 14:24:45 2025 GMT Not After : Aug 31 14:29:45 2026 GMT Subject: CN=D932B0297EFE11A2E33ED5AD5213487580D105D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b0:c8:25:22:b4:6f:15:77:d5:69:a8:fe:e4: ad:8d:e6:20:a0:ed:da:44:71:63:c5:6a:87:83:c4: 46:fa:00:9c:80:5c:a9:5c:f0:7e:f0:b2:5f:0f:90: 63:dd:0a:73:b2:ac:e8:46:79:ca:d4:dd:48:77:e6: 14:fd:b8:4c:2a:36:da:4b:25:d5:b7:54:e5:c2:34: b9:ce:c7:02:f1:ed:c9:0c:a4:64:c0:21:60:c2:08: e3:64:fb:d6:54:6f:d9:ce:37:74:73:ae:0c:0a:3a: cd:d9:47:6e:69:1a:24:2e:e7:53:3b:eb:1b:4b:62: f0:b5:1d:32:63:17:35:d3:4f:f1:df:12:37:f8:a5: 9f:63:92:a4:be:13:0a:64:22:0a:b4:a0:b5:fb:65: 0c:f7:09:cd:a8:78:9d:dd:07:e9:2f:a2:af:3f:b0: 15:d1:5d:1a:4c:fc:22:c6:59:19:f4:17:39:7f:6a: 10:75:b8:e4:ce:57:a4:d1:a7:8e:4a:87:19:a4:6f: 70:a0:4a:57:48:1b:03:03:69:b7:a3:31:a2:7b:43: 8d:e9:32:28:dc:a1:14:f0:44:b0:ee:dc:a4:1d:47: 61:3b:85:99:74:b0:27:0b:bc:93:c5:1d:b6:3d:fa: 9c:e0:b2:99:60:95:78:5a:0f:81:02:ea:6c:79:df: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:32:B0:29:7E:FE:11:A2:E3:3E:D5:AD:52:13:48:75:80:D1:05:D3 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS47813.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.16.0/24 Signature Algorithm: sha256WithRSAEncryption a1:c4:3b:d8:ac:e9:aa:0b:6a:b0:d7:d5:2c:40:e2:30:00:02: b0:dc:28:a1:62:a7:0e:22:fd:ad:02:a5:b6:b7:96:60:90:0b: 6a:87:59:62:41:33:46:5d:97:71:04:55:a9:a6:ac:ce:aa:1c: 17:6d:cb:27:cd:ce:20:18:23:0c:94:e4:24:9a:98:5e:c3:05: 6f:b6:d9:77:2d:94:43:8d:8d:44:da:53:c7:e1:7e:0e:b3:43: 41:f7:44:56:d9:36:7d:fc:de:12:c4:a8:75:72:26:74:7f:eb: b4:9a:f0:da:c0:22:d9:e0:8d:e3:42:66:6a:94:5c:52:86:1e: 4a:bb:41:34:29:76:1d:b8:ae:09:20:40:2e:54:fd:07:8c:67: 04:fc:0e:b1:3d:f0:0b:95:fa:0f:1e:d2:7f:79:ac:6a:5a:23: 58:92:7f:2d:9d:db:c5:0e:1f:cb:bd:b7:76:b9:42:60:88:ff: 95:c6:15:f1:84:33:e3:44:7c:ce:f1:22:14:e9:fc:cd:1d:d4: 78:57:32:af:4d:7d:57:af:05:a3:a0:d5:63:07:37:a0:27:63: f0:6c:eb:73:75:99:13:f9:8f:a9:61:51:aa:c2:82:d7:15:31: 2a:64:d4:20:49:5b:63:64:51:61:e6:01:91:00:0d:e7:d5:06: 09:4e:6f:93 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUTQ2bjvah5SrUgVrR/xKyb9PQZTUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwOTAxMTQyNDQ1WhcNMjYwODMxMTQyOTQ1 WjAzMTEwLwYDVQQDEyhEOTMyQjAyOTdFRkUxMUEyRTMzRUQ1QUQ1MjEzNDg3NTgw RDEwNUQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7DIJSK0bxV3 1Wmo/uStjeYgoO3aRHFjxWqHg8RG+gCcgFypXPB+8LJfD5Bj3QpzsqzoRnnK1N1I d+YU/bhMKjbaSyXVt1TlwjS5zscC8e3JDKRkwCFgwgjjZPvWVG/Zzjd0c64MCjrN 2UduaRokLudTO+sbS2LwtR0yYxc100/x3xI3+KWfY5KkvhMKZCIKtKC1+2UM9wnN qHid3QfpL6KvP7AV0V0aTPwixlkZ9Bc5f2oQdbjkzlek0aeOSocZpG9woEpXSBsD A2m3ozGie0ON6TIo3KEU8ESw7tykHUdhO4WZdLAnC7yTxR22Pfqc4LKZYJV4Wg+B Aupsed9ZjwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFNkysCl+/hGi4z7VrVITSHWA 0QXTMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQ3ODEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOoQMA0GCSqGSIb3DQEBCwUAA4IB AQChxDvYrOmqC2qw19UsQOIwAAKw3CihYqcOIv2tAqW2t5ZgkAtqh1liQTNGXZdx BFWppqzOqhwXbcsnzc4gGCMMlOQkmphewwVvttl3LZRDjY1E2lPH4X4Os0NB90RW 2TZ9/N4SxKh1ciZ0f+u0mvDawCLZ4I3jQmZqlFxShh5Ku0E0KXYduK4JIEAuVP0H jGcE/A6xPfALlfoPHtJ/eaxqWiNYkn8tndvFDh/Lvbd2uUJgiP+VxhXxhDPjRHzO 8SIU6fzNHdR4VzKvTX1XrwWjoNVjBzegJ2PwbOtzdZkT+Y+pYVGqwoLXFTEqZNQg SVtjZFFh5gGRAA3n1QYJTm+T -----END CERTIFICATE-----Generated at Mon Oct 20 14:57:27 2025 by rpki-client