$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64267.roa File: AS64267.roa (raw, json) Hash identifier: Sqf8lvvltZk+lNjpoekuDc6MN1XMMJ74o1wFqpQ2MF0= Subject key identifier: 1E:FD:C7:4A:9B:31:72:5F:95:3D:1F:B4:38:3B:97:E3:2D:8A:CF:2B Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1A356B2211449FE3457EA1897501EF4C63A2C6BB Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64267.roa Signing time: Wed 10 Sep 2025 00:29:45 +0000 ROA not before: Wed 10 Sep 2025 00:24:45 +0000 ROA not after: Wed 09 Sep 2026 00:29:45 +0000 asID: 64267 IP address blocks: 104.234.81.0/24 maxlen: 24 104.234.122.0/24 maxlen: 24 104.234.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 07:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:35:6b:22:11:44:9f:e3:45:7e:a1:89:75:01:ef:4c:63:a2:c6:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 10 00:24:45 2025 GMT Not After : Sep 9 00:29:45 2026 GMT Subject: CN=1EFDC74A9B31725F953D1FB4383B97E32D8ACF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f0:49:0f:d2:15:67:2b:ba:b8:6d:a1:f3:fd: e9:0b:e7:ef:a2:a3:30:2a:60:ad:8d:f8:f6:53:bf: 6c:8c:23:4f:bc:0a:03:b5:54:e1:e3:2c:d4:b4:41: 18:f6:60:94:09:e0:74:7f:f4:4c:6d:df:c3:63:b8: 27:67:7a:a4:08:49:4b:3e:ad:a5:af:cc:14:af:84: 77:8a:4f:f0:26:6b:f1:db:7a:b8:a5:b3:ea:38:20: e1:8e:e4:98:83:89:a3:4f:02:32:2f:1d:3b:4b:da: 39:e7:be:b0:e2:e5:55:b3:35:73:e8:d2:ca:59:68: 2e:de:c2:31:84:be:75:4c:b5:25:d6:4c:c8:0c:2a: ea:7b:6e:45:a5:f5:f1:b4:d0:dc:7e:69:3f:e3:c2: 40:d9:65:f7:1f:f1:0d:4d:86:b1:6b:66:54:a7:02: e7:05:8a:1d:2e:ad:ae:17:f2:7b:d0:2a:53:c2:8a: b3:25:cd:21:30:b2:29:74:bb:ec:a1:82:a1:dc:f5: 15:b5:d2:98:69:42:50:17:69:ab:69:6b:fd:c1:fe: 6d:f9:39:be:5b:a7:37:ea:7a:53:25:2a:89:7e:30: e1:2f:d1:f9:8a:5f:7a:7b:5a:5e:f0:8d:28:d0:fc: 1f:51:ac:64:0b:0c:64:5c:b4:df:81:9e:33:11:d1: d8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FD:C7:4A:9B:31:72:5F:95:3D:1F:B4:38:3B:97:E3:2D:8A:CF:2B X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS64267.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.81.0/24 104.234.122.0/24 104.234.138.0/24 Signature Algorithm: sha256WithRSAEncryption 61:f4:c0:3b:ef:24:fd:5f:ae:72:01:36:ee:c0:7b:2f:85:c7: be:06:09:38:6a:b4:01:75:8f:da:59:e2:a7:24:29:db:51:94: b3:bd:b5:58:a9:93:a5:8e:75:52:32:2a:ae:14:ff:43:d8:49: 31:07:33:ae:07:c4:d2:7a:61:0b:1b:24:f9:58:1e:65:7e:62: eb:f1:57:01:ef:2a:3d:16:76:96:8a:ad:d8:c5:c8:ce:78:a6: 73:be:26:18:67:11:5f:50:2b:ad:4d:51:e1:58:d5:d4:dc:d9: c2:6d:68:7a:c9:88:e3:ce:64:68:85:30:c3:ba:6e:98:cf:73: 6e:fa:46:ae:b8:9d:3f:a6:93:b1:bb:e2:2a:0d:f4:a9:d5:10: 97:64:3a:9e:ac:76:40:20:7e:9d:c3:23:bd:b4:8f:8b:4e:4b: 83:3a:51:6e:d7:d7:63:6c:15:75:d9:27:7d:29:d3:27:59:de: 35:53:cd:db:e0:34:5b:6c:9a:a7:c3:84:bd:4d:03:14:54:47: a4:c5:bf:9a:ea:44:25:7e:82:bb:72:d4:4e:81:26:e6:5f:86: ba:4b:9e:a1:18:75:71:29:88:d6:29:1f:c6:3c:8f:66:15:c2: 0f:e5:c0:19:4b:8b:62:98:5d:94:c3:ce:a6:94:e3:c8:e9:98: 5d:2c:d7:76 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUGjVrIhFEn+NFfqGJdQHvTGOixrswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwOTEwMDAyNDQ1WhcNMjYwOTA5MDAyOTQ1 WjAzMTEwLwYDVQQDEygxRUZEQzc0QTlCMzE3MjVGOTUzRDFGQjQzODNCOTdFMzJE OEFDRjJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/BJD9IVZyu6 uG2h8/3pC+fvoqMwKmCtjfj2U79sjCNPvAoDtVTh4yzUtEEY9mCUCeB0f/RMbd/D Y7gnZ3qkCElLPq2lr8wUr4R3ik/wJmvx23q4pbPqOCDhjuSYg4mjTwIyLx07S9o5 576w4uVVszVz6NLKWWgu3sIxhL51TLUl1kzIDCrqe25FpfXxtNDcfmk/48JA2WX3 H/ENTYaxa2ZUpwLnBYodLq2uF/J70CpTwoqzJc0hMLIpdLvsoYKh3PUVtdKYaUJQ F2mraWv9wf5t+Tm+W6c36npTJSqJfjDhL9H5il96e1pe8I0o0PwfUaxkCwxkXLTf gZ4zEdHYrwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFB79x0qbMXJflT0ftDg7l+Mt is8rMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzY0MjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOpRAwQAaOp6AwQAaOqKMA0GCSqG SIb3DQEBCwUAA4IBAQBh9MA77yT9X65yATbuwHsvhce+Bgk4arQBdY/aWeKnJCnb UZSzvbVYqZOljnVSMiquFP9D2EkxBzOuB8TSemELGyT5WB5lfmLr8VcB7yo9FnaW iq3YxcjOeKZzviYYZxFfUCutTVHhWNXU3NnCbWh6yYjjzmRohTDDum6Yz3Nu+kau uJ0/ppOxu+IqDfSp1RCXZDqerHZAIH6dwyO9tI+LTkuDOlFu19djbBV12Sd9KdMn Wd41U83b4DRbbJqnw4S9TQMUVEekxb+a6kQlfoK7ctROgSbmX4a6S56hGHVxKYjW KR/GPI9mFcIP5cAZS4timF2Uw86mlOPI6ZhdLNd2 -----END CERTIFICATE-----Generated at Sun Oct 19 23:05:53 2025 by rpki-client