$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: Ct3cQKnQlSmUupxK9XG+MDXdkowHh4/fmWnFx4Q8mG4= Subject key identifier: F6:4B:07:0E:42:92:78:64:5F:86:42:D2:E9:3C:3E:8D:BD:1B:B8:CE Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 1E550B39F29253844AC03D2065600651360CD136 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa Signing time: Sun 19 Oct 2025 12:54:50 +0000 ROA not before: Sun 19 Oct 2025 12:49:50 +0000 ROA not after: Sun 18 Oct 2026 12:54:50 +0000 asID: 9304 IP address blocks: 23.226.131.0/24 maxlen: 24 64.50.178.0/23 maxlen: 24 64.50.180.0/24 maxlen: 24 64.50.186.0/24 maxlen: 24 64.188.7.0/24 maxlen: 24 64.188.14.0/24 maxlen: 24 64.188.19.0/24 maxlen: 24 64.188.21.0/24 maxlen: 24 66.63.189.0/24 maxlen: 24 67.215.226.0/24 maxlen: 24 69.12.92.0/24 maxlen: 24 69.12.95.0/24 maxlen: 24 72.11.158.0/24 maxlen: 24 74.50.3.0/24 maxlen: 24 74.50.6.0/24 maxlen: 24 192.228.115.0/24 maxlen: 24 216.97.228.0/24 maxlen: 24 216.97.229.0/24 maxlen: 24 216.97.235.0/24 maxlen: 24 216.227.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:55:0b:39:f2:92:53:84:4a:c0:3d:20:65:60:06:51:36:0c:d1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 19 12:49:50 2025 GMT Not After : Oct 18 12:54:50 2026 GMT Subject: CN=F64B070E429278645F8642D2E93C3E8DBD1BB8CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:17:fe:00:cc:0e:b5:61:26:df:27:43:fa:bc: 49:38:e6:61:b3:94:62:82:2c:af:2f:c5:cc:26:29: d3:2e:9c:15:8b:51:0d:ae:f2:13:0c:30:e6:94:92: 2e:eb:dd:41:fc:7a:19:c7:6f:ba:19:f4:be:cb:2d: 79:29:83:12:e5:35:ea:dd:5f:88:b6:54:0f:53:5b: 2d:e0:f6:a0:b6:c6:db:42:b8:d8:34:a1:9c:50:4d: 1c:de:4d:aa:8c:2d:6f:37:f6:95:a4:09:6b:3d:71: bd:a8:b1:cd:ef:48:34:f4:cf:b2:e9:e5:b0:d8:fd: 46:65:72:69:f0:0b:97:d7:95:26:4f:a5:3f:42:01: bf:bb:0a:a9:97:9d:ac:3a:17:05:d7:13:78:52:6c: 81:65:d7:a9:87:1a:61:ce:8b:8a:0a:1d:ce:f0:42: 12:37:b6:8d:ae:0f:e8:7c:b4:ce:2c:85:f3:bb:88: ea:98:c3:bf:03:78:4e:bd:5f:db:98:82:09:be:75: a9:5d:d9:2b:43:51:dd:a8:a3:32:92:5f:15:d1:de: b3:af:20:3e:7b:72:31:2d:17:55:a9:27:bd:47:bf: 08:c9:a6:96:75:78:81:01:6c:99:e1:1c:98:b5:4c: 95:49:53:9d:62:79:f9:ab:3a:0b:63:28:73:f0:ac: 6f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:4B:07:0E:42:92:78:64:5F:86:42:D2:E9:3C:3E:8D:BD:1B:B8:CE X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.226.131.0/24 64.50.178.0-64.50.180.255 64.50.186.0/24 64.188.7.0/24 64.188.14.0/24 64.188.19.0/24 64.188.21.0/24 66.63.189.0/24 67.215.226.0/24 69.12.92.0/24 69.12.95.0/24 72.11.158.0/24 74.50.3.0/24 74.50.6.0/24 192.228.115.0/24 216.97.228.0/23 216.97.235.0/24 216.227.223.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:d2:37:bc:57:07:66:51:69:d5:5e:64:50:7e:96:4c:54:cc: 23:4d:f5:51:c4:87:e1:30:f7:76:89:0b:50:d1:16:da:0a:38: a3:c0:a1:e7:54:6d:2b:60:9d:3b:af:4f:ab:2b:e1:2f:0c:c3: 50:c6:36:14:2e:11:69:14:e5:be:79:ab:b7:f5:4c:2a:db:1d: 50:2f:1f:13:64:99:bf:16:b2:44:78:b2:f5:9e:b1:fd:96:04: 98:0e:10:4e:0b:4c:29:dd:24:8b:0f:0d:bf:ff:c3:de:3b:fb: 87:ce:1f:fc:d9:cd:a7:83:5a:70:96:29:ff:20:f7:3c:a6:b4: 31:e6:1c:4b:52:d2:a3:c8:d0:a4:c8:ad:85:97:14:db:74:1e: 0a:a6:a1:fd:0f:25:e7:a0:1e:93:59:21:96:e3:12:86:cb:f8: 63:4b:ad:e0:ef:d7:8e:7e:d8:25:56:9e:76:84:20:e5:c4:cd: 63:08:41:08:31:67:1d:e6:ff:be:83:5e:fd:85:dc:af:9a:26: af:4f:c4:a9:eb:0b:79:04:95:8e:e6:e7:88:cd:0f:09:40:88: 3d:33:45:df:1b:17:4c:24:01:32:a5:9c:28:b0:c6:f4:b1:f8: 3a:a3:d2:79:91:c9:43:8e:1b:6f:57:31:6a:38:59:c6:f2:a7: 20:0e:89:fb -----BEGIN CERTIFICATE----- MIIF7DCCBNSgAwIBAgIUHlULOfKSU4RKwD0gZWAGUTYM0TYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDE5MTI0OTUwWhcNMjYxMDE4MTI1NDUw WjAzMTEwLwYDVQQDEyhGNjRCMDcwRTQyOTI3ODY0NUY4NjQyRDJFOTNDM0U4REJE MUJCOENFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRf+AMwOtWEm 3ydD+rxJOOZhs5RigiyvL8XMJinTLpwVi1ENrvITDDDmlJIu691B/HoZx2+6GfS+ yy15KYMS5TXq3V+ItlQPU1st4PagtsbbQrjYNKGcUE0c3k2qjC1vN/aVpAlrPXG9 qLHN70g09M+y6eWw2P1GZXJp8AuX15UmT6U/QgG/uwqpl52sOhcF1xN4UmyBZdep hxphzouKCh3O8EISN7aNrg/ofLTOLIXzu4jqmMO/A3hOvV/bmIIJvnWpXdkrQ1Hd qKMykl8V0d6zryA+e3IxLRdVqSe9R78IyaaWdXiBAWyZ4RyYtUyVSVOdYnn5qzoL Yyhz8Kxv9QIDAQABo4IC7DCCAugwHQYDVR0OBBYEFPZLBw5CknhkX4ZC0uk8Po29 G7jOMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgY0G CCsGAQUFBwEHAQH/BH4wfDB6BAIAATB0AwQAF+KDMAwDBAFAMrIDBABAMrQDBABA MroDBABAvAcDBABAvA4DBABAvBMDBABAvBUDBABCP70DBABD1+IDBABFDFwDBABF DF8DBABIC54DBABKMgMDBABKMgYDBADA5HMDBAHYYeQDBADYYesDBADY498wDQYJ KoZIhvcNAQELBQADggEBAB7SN7xXB2ZRadVeZFB+lkxUzCNN9VHEh+Ew93aJC1DR FtoKOKPAoedUbStgnTuvT6sr4S8Mw1DGNhQuEWkU5b55q7f1TCrbHVAvHxNkmb8W skR4svWesf2WBJgOEE4LTCndJIsPDb//w947+4fOH/zZzaeDWnCWKf8g9zymtDHm HEtS0qPI0KTIrYWXFNt0Hgqmof0PJeegHpNZIZbjEobL+GNLreDv145+2CVWnnaE IOXEzWMIQQgxZx3m/76DXv2F3K+aJq9PxKnrC3kElY7m54jNDwlAiD0zRd8bF0wk ATKlnCiwxvSx+Dqj0nmRyUOOG29XMWo4WcbypyAOifs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:25:20 2025 by rpki-client