$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: oXn65oOrN/BDsp6vi/qk3weMPZHsVrc+NlGifHMXjxg= Subject key identifier: FF:36:0B:73:A4:97:31:28:F4:32:2E:D4:EF:8E:90:E6:E7:7F:E1:84 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 51A3A4EC6DEA88B8A4DAF80E659A9EDFC729A5E6 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa Signing time: Thu 29 Oct 2026 14:52:04 +0000 ROA not before: Thu 29 Oct 2026 14:47:04 +0000 ROA not after: Thu 28 Oct 2027 14:52:04 +0000 asID: 9304 IP address blocks: 104.234.28.0/24 maxlen: 24 104.234.104.0/24 maxlen: 24 104.234.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 13:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a3:a4:ec:6d:ea:88:b8:a4:da:f8:0e:65:9a:9e:df:c7:29:a5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 29 14:47:04 2026 GMT Not After : Oct 28 14:52:04 2027 GMT Subject: CN=FF360B73A4973128F4322ED4EF8E90E6E77FE184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:3d:0f:65:2c:a4:50:6f:38:46:8b:ae:2e: 6d:be:91:db:7b:18:ad:50:d9:e2:95:d0:12:89:11: 36:59:53:b7:a1:42:cc:73:8f:dc:ce:6f:60:fb:11: 5b:98:4b:26:1d:b8:3d:20:56:1d:a8:a8:04:88:32: 47:b7:bf:d4:80:c9:47:85:7d:d8:47:bd:89:07:47: c8:6c:06:8a:11:7b:59:17:6b:10:5c:d3:15:c3:56: bb:a6:95:4f:db:4b:84:0f:03:e9:19:9e:0b:3d:2d: 35:fa:cf:67:44:fd:a0:8f:2f:3e:f3:bf:6a:90:29: 18:30:fc:67:f1:fe:f9:c6:cd:38:20:da:15:6d:50: 85:c9:3f:90:85:4d:a2:a1:d8:03:cf:56:bb:c3:3a: ba:77:ee:1d:95:08:e0:89:c3:84:df:4a:0d:b8:9f: 6c:1d:26:1c:e5:aa:85:4c:2e:51:2d:25:d1:56:ce: 41:c2:2a:2e:fc:ab:e9:80:c4:ae:50:dd:d4:f2:d3: 05:7a:aa:5b:b7:41:c0:f9:36:49:10:48:b5:7b:18: d2:24:b6:bf:18:b8:59:89:48:ba:9f:09:90:40:bc: 2b:c7:19:7d:ec:25:2f:4e:d7:bf:ef:81:88:83:d4: fe:73:53:ee:86:95:53:e5:db:43:37:33:ea:c3:96: 2b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:36:0B:73:A4:97:31:28:F4:32:2E:D4:EF:8E:90:E6:E7:7F:E1:84 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.28.0/24 104.234.104.0/24 104.234.184.0/24 Signature Algorithm: sha256WithRSAEncryption ad:1e:c2:0e:78:06:a4:c3:f9:4c:d2:dd:25:39:4c:c3:46:6e: 2f:e0:4f:43:41:d2:3d:37:95:85:36:71:93:72:b1:19:24:0c: 12:0e:7c:d6:5f:8c:3e:1d:59:44:ff:f3:f4:09:3f:93:b1:69: 75:1c:b3:72:ff:f4:a7:77:cf:77:b6:d6:f8:81:76:6a:fb:f9: cf:fe:11:ef:3f:ef:4e:9e:9f:2b:94:18:5f:fd:09:3d:51:00: 64:e9:63:41:d5:b9:35:dd:64:b0:8f:e5:71:4b:bb:56:5a:db: 1e:b5:22:97:6f:c8:14:bb:86:15:ce:5c:0b:b7:50:ec:1b:20: 7c:f2:63:e6:37:e5:df:c0:42:5a:e8:26:2c:aa:63:bc:9a:c6: cd:68:2f:bd:6e:a8:a8:a9:a2:bb:c5:81:83:f8:b7:a1:bd:af: 09:21:c9:50:bd:f1:e7:d8:d3:57:e2:3b:c6:13:4c:73:c0:56: f6:b5:2c:2c:31:b1:4c:96:24:38:87:6a:fb:a5:b0:3c:ed:60: 47:c2:f1:b0:7a:d3:2a:84:8d:0e:28:33:3c:15:a2:73:b3:5c: 7c:ec:e0:32:53:13:35:8b:12:de:8e:86:3b:12:b4:46:e7:13: 4e:6f:2f:af:82:e2:c8:f1:f7:42:71:b4:39:1d:90:a1:0e:ba: 5c:19:0b:d3 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUUaOk7G3qiLik2vgOZZqe38cppeYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDI5MTQ0NzA0WhcNMjcxMDI4MTQ1MjA0 WjAzMTEwLwYDVQQDEyhGRjM2MEI3M0E0OTczMTI4RjQzMjJFRDRFRjhFOTBFNkU3 N0ZFMTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGU9D2UspFBv OEaLri5tvpHbexitUNnildASiRE2WVO3oULMc4/czm9g+xFbmEsmHbg9IFYdqKgE iDJHt7/UgMlHhX3YR72JB0fIbAaKEXtZF2sQXNMVw1a7ppVP20uEDwPpGZ4LPS01 +s9nRP2gjy8+879qkCkYMPxn8f75xs04INoVbVCFyT+QhU2iodgDz1a7wzq6d+4d lQjgicOE30oNuJ9sHSYc5aqFTC5RLSXRVs5Bwiou/KvpgMSuUN3U8tMFeqpbt0HA +TZJEEi1exjSJLa/GLhZiUi6nwmQQLwrxxl97CUvTte/74GIg9T+c1PuhpVT5dtD NzPqw5YrVwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFP82C3OklzEo9DIu1O+OkObn f+GEMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABo6hwDBABo6mgDBABo6rgwDQYJKoZI hvcNAQELBQADggEBAK0ewg54BqTD+UzS3SU5TMNGbi/gT0NB0j03lYU2cZNysRkk DBIOfNZfjD4dWUT/8/QJP5OxaXUcs3L/9Kd3z3e21viBdmr7+c/+Ee8/706enyuU GF/9CT1RAGTpY0HVuTXdZLCP5XFLu1Za2x61IpdvyBS7hhXOXAu3UOwbIHzyY+Y3 5d/AQlroJiyqY7yaxs1oL71uqKiporvFgYP4t6G9rwkhyVC98efY01fiO8YTTHPA Vva1LCwxsUyWJDiHavulsDztYEfC8bB60yqEjQ4oMzwVonOzXHzs4DJTEzWLEt6O hjsStEbnE05vL6+C4sjx90JxtDkdkKEOulwZC9M= -----END CERTIFICATE-----Generated at Wed Nov 11 16:39:27 2026 by rpki-client