$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: Q6g29lBf5fqD3I4i49b8Nv2fXtdLSKHNqAca/64YzL8= Subject key identifier: A2:0E:19:FA:15:05:0E:C2:EB:4E:AF:05:A7:A6:18:FC:4D:29:92:CE Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 21A1DE2EBDD03413FF602DC5700525296C7DFFF4 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa Signing time: Wed 23 Sep 2026 08:31:07 +0000 ROA not before: Wed 23 Sep 2026 08:26:07 +0000 ROA not after: Wed 22 Sep 2027 08:31:07 +0000 asID: 9304 IP address blocks: 104.234.28.0/24 maxlen: 24 104.234.104.0/24 maxlen: 24 104.234.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 23:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a1:de:2e:bd:d0:34:13:ff:60:2d:c5:70:05:25:29:6c:7d:ff:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 23 08:26:07 2026 GMT Not After : Sep 22 08:31:07 2027 GMT Subject: CN=A20E19FA15050EC2EB4EAF05A7A618FC4D2992CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:60:86:b6:d0:02:35:01:73:9d:88:eb:bf: 24:b6:92:ae:d2:ff:d0:68:95:ae:4c:27:bc:07:2f: 71:c6:2e:d1:6a:75:02:64:ed:fb:f6:f6:93:86:88: 55:99:54:a0:72:05:d5:46:c7:1d:6e:03:44:59:1d: d2:58:f2:5d:a8:70:e2:44:72:d5:61:dc:6c:22:e1: 8b:e0:f0:05:2c:45:26:00:f1:37:f1:5d:93:b1:97: c8:46:35:8a:c3:50:3b:0b:56:16:e5:5e:0d:52:61: 61:1f:0d:fc:32:41:f0:02:92:70:05:fd:91:11:47: 1e:53:ba:b9:dc:92:be:c7:27:0a:4b:60:b4:4d:ae: 35:fa:78:7d:aa:ae:6d:83:e4:4b:99:5e:d5:77:8b: e9:f4:9f:48:ef:3e:84:bc:6e:98:55:24:16:48:9d: a6:a0:0a:e4:d8:d1:a2:0d:b1:49:05:ed:8b:23:b0: ff:05:8e:c2:1c:18:63:8a:21:24:94:1d:70:2f:b8: 37:30:7d:81:b4:3c:ad:4c:58:35:32:cb:fd:c2:64: f9:c7:45:9b:33:3a:1e:35:b2:30:3f:f8:46:94:68: 16:23:74:44:c7:e6:30:38:4a:2b:3b:fc:fd:2a:26: f5:3f:43:60:71:bf:0e:34:80:ef:ad:50:2e:e6:01: 60:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0E:19:FA:15:05:0E:C2:EB:4E:AF:05:A7:A6:18:FC:4D:29:92:CE X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.28.0/24 104.234.104.0/24 104.234.184.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:d2:42:99:e8:77:32:f7:ef:8c:99:b0:03:b9:d4:f4:ef:90: 0d:e8:c3:0e:b3:d8:54:55:9a:74:77:ec:af:23:f0:4b:c8:42: f0:b4:86:f6:b8:69:16:35:3f:d1:3f:07:b1:65:34:a3:f4:2a: b3:dc:7e:ae:2b:ae:51:c7:bb:b7:6c:5f:7b:1a:bc:78:03:e3: e4:3b:da:8e:e7:d7:ab:4b:3c:82:32:9d:2d:35:3d:f8:c0:14: ce:f8:83:20:97:82:4d:4a:18:e2:e8:ca:43:68:63:dd:f8:42: cd:8a:59:9b:b8:60:19:ec:6a:e3:f2:7e:54:a9:1f:8c:e2:e0: aa:f8:e3:7b:21:bd:76:6a:78:10:d0:51:53:b5:26:b3:cb:35: cb:07:58:a0:9f:94:79:57:3a:92:9f:ac:78:2d:c1:02:ba:64: 69:79:7c:c8:67:9f:7c:a7:b8:b6:42:30:66:8f:f4:3f:9f:c4: 76:70:1a:e5:64:c1:d8:c2:d3:07:47:53:af:a3:1c:05:f8:87: 21:1d:e1:6c:b1:7c:d5:af:0d:e6:b1:4c:2e:82:c2:05:5e:cb: e5:f0:70:b3:98:69:85:77:8d:19:8c:d2:75:1a:95:ba:ba:cc: 14:a2:b5:f6:96:cf:38:27:45:5f:49:45:33:a6:e7:c0:ee:bc: 03:8f:af:fc -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUIaHeLr3QNBP/YC3FcAUlKWx9//QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwOTIzMDgyNjA3WhcNMjcwOTIyMDgzMTA3 WjAzMTEwLwYDVQQDEyhBMjBFMTlGQTE1MDUwRUMyRUI0RUFGMDVBN0E2MThGQzRE Mjk5MkNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRRghrbQAjUB c52I678ktpKu0v/QaJWuTCe8By9xxi7RanUCZO379vaThohVmVSgcgXVRscdbgNE WR3SWPJdqHDiRHLVYdxsIuGL4PAFLEUmAPE38V2TsZfIRjWKw1A7C1YW5V4NUmFh Hw38MkHwApJwBf2REUceU7q53JK+xycKS2C0Ta41+nh9qq5tg+RLmV7Vd4vp9J9I 7z6EvG6YVSQWSJ2moArk2NGiDbFJBe2LI7D/BY7CHBhjiiEklB1wL7g3MH2BtDyt TFg1Msv9wmT5x0WbMzoeNbIwP/hGlGgWI3REx+YwOEorO/z9Kib1P0Ngcb8ONIDv rVAu5gFgdQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFKIOGfoVBQ7C606vBaemGPxN KZLOMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABo6hwDBABo6mgDBABo6rgwDQYJKoZI hvcNAQELBQADggEBAE3SQpnodzL374yZsAO51PTvkA3oww6z2FRVmnR37K8j8EvI QvC0hva4aRY1P9E/B7FlNKP0KrPcfq4rrlHHu7dsX3savHgD4+Q72o7n16tLPIIy nS01PfjAFM74gyCXgk1KGOLoykNoY934Qs2KWZu4YBnsauPyflSpH4zi4Kr443sh vXZqeBDQUVO1JrPLNcsHWKCflHlXOpKfrHgtwQK6ZGl5fMhnn3ynuLZCMGaP9D+f xHZwGuVkwdjC0wdHU6+jHAX4hyEd4WyxfNWvDeaxTC6CwgVey+XwcLOYaYV3jRmM 0nUalbq6zBSitfaWzzgnRV9JRTOm58DuvAOPr/w= -----END CERTIFICATE-----Generated at Wed Sep 23 22:45:38 2026 by rpki-client