$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa File: AS996.roa (raw, json) Hash identifier: xglZainZYXg3R6PcYr9mQOtU2gGno47p4fxDek5+CVI= Subject key identifier: DA:A2:1C:59:02:27:A6:F9:2F:E4:EE:C5:5B:76:68:66:08:40:6F:08 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2247E2173E379FF7B63F8F099A7017A7BB485F49 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa Signing time: Wed 14 May 2025 11:58:49 +0000 ROA not before: Wed 14 May 2025 11:53:49 +0000 ROA not after: Wed 13 May 2026 11:58:49 +0000 asID: 996 IP address blocks: 104.234.82.0/24 maxlen: 24 104.234.88.0/24 maxlen: 24 206.53.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 15:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:47:e2:17:3e:37:9f:f7:b6:3f:8f:09:9a:70:17:a7:bb:48:5f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 14 11:53:49 2025 GMT Not After : May 13 11:58:49 2026 GMT Subject: CN=DAA21C590227A6F92FE4EEC55B76686608406F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:82:a7:44:68:0d:15:f0:6f:5f:13:a4:64: f8:75:e8:d9:2d:45:19:15:18:02:14:f1:f9:68:2d: 2f:9f:6d:31:e7:2d:52:aa:e0:0b:31:41:b6:aa:fe: 8d:dc:af:67:e2:4f:36:7d:1b:ab:74:22:d5:f1:f1: 34:be:78:7e:71:c0:fe:cc:e4:91:bf:c7:f2:51:e2: 9d:3b:fe:a8:3d:7b:df:db:f8:80:c5:f6:55:a2:5b: 46:aa:af:c2:73:04:e4:0c:81:71:be:05:df:e3:9d: a7:0c:11:c2:38:49:7b:fd:14:49:bc:c9:71:9c:80: 12:9b:3a:06:2c:64:45:e5:04:15:2a:4d:2f:4b:0a: ad:65:0d:92:aa:b7:40:c6:83:49:f9:81:63:4d:f1: e9:c4:fb:9a:6f:3e:8a:a1:03:f9:85:95:b0:2c:2d: be:8e:95:ff:14:69:ea:8b:b8:6c:34:58:d8:5d:a3: c5:2f:cc:51:8a:d6:b9:39:a9:2a:80:5a:5f:c1:6f: 5c:9b:d9:c2:36:12:e8:a5:b5:f4:5b:9f:f0:86:e5: f9:38:05:f1:ce:ba:2b:1a:4e:f1:55:9b:f7:32:ce: f0:37:4e:98:2d:fb:57:fa:1b:12:bb:a9:dd:9d:cd: 8d:84:ee:cd:8e:b6:d8:60:7a:6b:37:b5:58:f7:8a: 20:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:1C:59:02:27:A6:F9:2F:E4:EE:C5:5B:76:68:66:08:40:6F:08 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS996.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.82.0/24 104.234.88.0/24 206.53.57.0/24 Signature Algorithm: sha256WithRSAEncryption 95:30:ca:d7:6f:f0:24:58:05:14:6a:1b:5c:6d:cc:a7:d8:40: fe:3f:ee:68:e4:3a:7a:1c:cd:f2:58:05:a6:e4:66:05:31:cd: 48:9e:45:25:e2:65:b0:9f:0f:b7:99:5f:a0:a9:ba:7f:72:9e: c4:44:8b:f6:1e:b0:64:ec:b7:e6:1d:cb:7e:f9:fc:2b:eb:e9: 7d:a5:52:f6:07:21:9d:62:b0:2e:9a:0d:b7:df:18:3e:07:e9: db:b8:d1:83:04:9e:47:d6:44:9e:f7:d9:97:00:0a:27:08:96: 87:96:8b:e4:6b:5e:07:7a:eb:f0:2d:6d:c9:44:89:9d:ce:1f: 6f:dc:cc:65:82:6e:2e:4a:b8:7c:f8:90:d6:1f:32:02:92:4d: 8b:a8:3e:ea:4c:7c:af:2a:76:58:d5:0d:a7:5a:f0:59:37:4c: 4e:94:42:d2:88:0f:ad:5b:d9:0f:8c:2d:90:68:23:28:3f:fa: 27:51:c3:a9:c2:37:c3:5a:f2:bc:e6:07:de:a4:c3:31:0a:0f: 76:6b:a9:58:e0:d3:38:f8:84:f6:27:cd:91:71:e9:c5:27:61: ea:a5:c7:0f:b5:2e:38:98:01:95:f0:fd:0b:06:48:df:16:fc: d2:8f:c4:5b:69:cd:d1:10:ad:e3:60:fd:b3:5f:21:09:aa:31: 96:19:2d:c0 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgIUIkfiFz43n/e2P48JmnAXp7tIX0kwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNTE0MTE1MzQ5WhcNMjYwNTEzMTE1ODQ5 WjAzMTEwLwYDVQQDEyhEQUEyMUM1OTAyMjdBNkY5MkZFNEVFQzU1Qjc2Njg2NjA4 NDA2RjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5+Cp0RoDRXw b18TpGT4dejZLUUZFRgCFPH5aC0vn20x5y1SquALMUG2qv6N3K9n4k82fRurdCLV 8fE0vnh+ccD+zOSRv8fyUeKdO/6oPXvf2/iAxfZVoltGqq/CcwTkDIFxvgXf452n DBHCOEl7/RRJvMlxnIASmzoGLGRF5QQVKk0vSwqtZQ2SqrdAxoNJ+YFjTfHpxPua bz6KoQP5hZWwLC2+jpX/FGnqi7hsNFjYXaPFL8xRita5OakqgFpfwW9cm9nCNhLo pbX0W5/whuX5OAXxzrorGk7xVZv3Ms7wN06YLftX+hsSu6ndnc2NhO7NjrbYYHpr N7VY94ogfQIDAQABo4ICiDCCAoQwHQYDVR0OBBYEFNqiHFkCJ6b5L+TuxVt2aGYI QG8IMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbQYIKwYBBQUHAQsEYTBfMF0GCCsGAQUFBzALhlFyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzk5Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjArBggr BgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqUgMEAGjqWAMEAM41OTANBgkqhkiG 9w0BAQsFAAOCAQEAlTDK12/wJFgFFGobXG3Mp9hA/j/uaOQ6ehzN8lgFpuRmBTHN SJ5FJeJlsJ8Pt5lfoKm6f3KexESL9h6wZOy35h3Lfvn8K+vpfaVS9gchnWKwLpoN t98YPgfp27jRgwSeR9ZEnvfZlwAKJwiWh5aL5GteB3rr8C1tyUSJnc4fb9zMZYJu Lkq4fPiQ1h8yApJNi6g+6kx8ryp2WNUNp1rwWTdMTpRC0ogPrVvZD4wtkGgjKD/6 J1HDqcI3w1ryvOYH3qTDMQoPdmupWODTOPiE9ifNkXHpxSdh6qXHD7UuOJgBlfD9 CwZI3xb80o/EW2nN0RCt42D9s18hCaoxlhktwA== -----END CERTIFICATE-----Generated at Sun Jun 29 01:04:40 2025 by rpki-client