$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: luu5fGCCRwl7X4WrViaVWhLkwBuNKp3Iinu2Wpwh2t8= Subject key identifier: D6:90:BE:6F:E5:0E:8E:39:42:87:51:CC:31:B0:03:53:FC:94:9E:CE Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 146C355E965EEB2FDE30180FCE60042F34CEA2C8 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa Signing time: Sun 27 Jul 2025 16:49:01 +0000 ROA not before: Sun 27 Jul 2025 16:44:01 +0000 ROA not after: Sun 26 Jul 2026 16:49:01 +0000 asID: 9304 IP address blocks: 40.27.76.0/22 maxlen: 24 40.27.93.0/24 maxlen: 24 40.27.192.0/22 maxlen: 24 40.27.231.0/24 maxlen: 24 40.27.240.0/24 maxlen: 24 40.27.241.0/24 maxlen: 24 40.27.242.0/24 maxlen: 24 40.183.88.0/22 maxlen: 24 40.183.150.0/24 maxlen: 24 40.183.153.0/24 maxlen: 24 40.183.206.0/23 maxlen: 23 40.183.224.0/23 maxlen: 24 40.183.226.0/23 maxlen: 23 40.183.228.0/23 maxlen: 24 40.183.230.0/23 maxlen: 24 40.183.232.0/23 maxlen: 24 40.183.237.0/24 maxlen: 24 40.183.241.0/24 maxlen: 24 40.183.242.0/24 maxlen: 24 40.183.243.0/24 maxlen: 24 40.183.244.0/24 maxlen: 24 40.183.245.0/24 maxlen: 24 40.183.246.0/24 maxlen: 24 40.183.247.0/24 maxlen: 24 40.183.252.0/24 maxlen: 24 40.223.122.0/24 maxlen: 24 40.223.183.0/24 maxlen: 24 40.223.192.0/24 maxlen: 24 40.223.193.0/24 maxlen: 24 40.223.194.0/24 maxlen: 24 40.223.245.0/24 maxlen: 24 40.223.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 Aug 2025 22:45:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:6c:35:5e:96:5e:eb:2f:de:30:18:0f:ce:60:04:2f:34:ce:a2:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Jul 27 16:44:01 2025 GMT Not After : Jul 26 16:49:01 2026 GMT Subject: CN=D690BE6FE50E8E39428751CC31B00353FC949ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:43:75:6d:6e:92:91:49:db:11:d2:5d:b5:f1: 88:ff:26:19:31:83:74:a2:f4:6c:95:2c:2f:92:27: 3a:2e:e1:8f:46:78:38:14:3b:4f:41:de:f0:db:23: 8d:de:06:57:5a:e2:38:a0:58:05:27:52:25:09:53: 7e:65:38:0a:39:8a:3e:e5:ec:84:cd:96:7c:06:01: f4:4e:b2:6a:d0:92:ed:9c:ef:07:6e:85:55:c3:1b: a6:27:9f:b2:5d:9e:47:1a:65:b3:ed:86:81:74:2d: 04:c3:11:60:3a:72:6c:e0:d0:c3:5c:75:e1:05:f9: db:e7:5b:03:2b:dd:63:58:a2:5e:0e:ed:8c:98:17: 7e:32:8c:7a:99:33:ab:f1:d2:af:35:6d:13:79:9c: 9f:53:57:b6:bd:86:c8:83:38:23:5a:b6:1e:27:3b: ce:23:4f:cc:8c:25:4c:a9:f5:39:63:90:d8:f3:9d: ba:ce:06:8f:db:c8:c9:b2:05:ac:54:e8:20:fc:75: d2:55:7f:1b:2d:d8:15:cf:56:e7:d0:63:d4:8a:44: b9:ae:2a:dd:7a:bc:10:73:b1:13:d8:e0:b3:c0:09: 4f:6c:67:92:f4:f8:d4:a4:49:1b:41:53:86:43:9f: 01:1c:b9:f3:08:50:79:68:bb:09:12:ec:e5:b2:32: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:90:BE:6F:E5:0E:8E:39:42:87:51:CC:31:B0:03:53:FC:94:9E:CE X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.76.0/22 40.27.93.0/24 40.27.192.0/22 40.27.231.0/24 40.27.240.0-40.27.242.255 40.183.88.0/22 40.183.150.0/24 40.183.153.0/24 40.183.206.0/23 40.183.224.0-40.183.233.255 40.183.237.0/24 40.183.241.0-40.183.247.255 40.183.252.0/24 40.223.122.0/24 40.223.183.0/24 40.223.192.0-40.223.194.255 40.223.245.0/24 40.223.252.0/22 Signature Algorithm: sha256WithRSAEncryption 85:55:05:74:b2:a8:b8:6b:74:2a:10:82:78:7a:ac:05:5a:3b: f2:19:28:f3:91:17:58:a3:d8:b0:c1:52:90:09:8c:5c:d0:84: 8a:3c:94:4f:1e:5a:dd:01:49:ca:22:c0:82:cb:33:0f:4c:f3: 5e:96:8b:5a:52:a2:12:fe:d6:f1:50:3b:6a:d1:01:66:87:ea: e3:71:6e:f2:4e:56:5f:dc:58:dc:d7:61:2e:31:8e:21:e4:33: ac:10:77:01:fd:ac:ef:dc:f3:cd:35:90:05:45:60:70:46:f6: 68:6d:ce:e5:26:cc:14:73:2a:42:6c:5c:ee:36:ea:b4:6e:91: b8:1f:18:05:51:28:17:96:c2:48:6c:7f:7d:8c:7c:ac:49:6e: 8c:99:f6:b9:e5:3e:3c:3f:11:3b:4f:63:a7:0e:c7:19:81:ca: ae:b3:70:01:e5:9c:c5:d8:fd:79:0d:c9:e8:4f:ae:63:6b:be: 55:62:91:c8:cb:c1:be:3e:5e:0b:3d:77:04:cb:e3:bf:9e:14: 13:a0:42:f5:01:62:70:00:17:07:1f:03:9a:ee:6f:eb:2a:cf: 54:a4:3c:ba:d9:68:cb:15:0c:9f:d8:c8:83:b1:c9:91:ae:c5: f2:7d:24:0c:ee:db:ce:8a:6a:05:fd:d5:82:c4:3c:07:4e:e9: e5:c9:3a:67 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUFGw1XpZe6y/eMBgPzmAELzTOosgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNzI3MTY0NDAxWhcNMjYwNzI2MTY0OTAx WjAzMTEwLwYDVQQDEyhENjkwQkU2RkU1MEU4RTM5NDI4NzUxQ0MzMUIwMDM1M0ZD OTQ5RUNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EN1bW6SkUnb EdJdtfGI/yYZMYN0ovRslSwvkic6LuGPRng4FDtPQd7w2yON3gZXWuI4oFgFJ1Il CVN+ZTgKOYo+5eyEzZZ8BgH0TrJq0JLtnO8HboVVwxumJ5+yXZ5HGmWz7YaBdC0E wxFgOnJs4NDDXHXhBfnb51sDK91jWKJeDu2MmBd+Mox6mTOr8dKvNW0TeZyfU1e2 vYbIgzgjWrYeJzvOI0/MjCVMqfU5Y5DY8526zgaP28jJsgWsVOgg/HXSVX8bLdgV z1bn0GPUikS5rirderwQc7ET2OCzwAlPbGeS9PjUpEkbQVOGQ58BHLnzCFB5aLsJ EuzlsjIebQIDAQABo4IDCDCCAwQwHQYDVR0OBBYEFNaQvm/lDo45QodRzDGwA1P8 lJ7OMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgakG CCsGAQUFBwEHAQH/BIGZMIGWMIGTBAIAATCBjAMEAigbTAMEACgbXQMEAigbwAME ACgb5zAMAwQEKBvwAwQAKBvyAwQCKLdYAwQAKLeWAwQAKLeZAwQBKLfOMAwDBAUo t+ADBAEot+gDBAAot+0wDAMEACi38QMEAyi38AMEACi3/AMEACjfegMEACjftzAM AwQGKN/AAwQAKN/CAwQAKN/1AwQCKN/8MA0GCSqGSIb3DQEBCwUAA4IBAQCFVQV0 sqi4a3QqEIJ4eqwFWjvyGSjzkRdYo9iwwVKQCYxc0ISKPJRPHlrdAUnKIsCCyzMP TPNelotaUqIS/tbxUDtq0QFmh+rjcW7yTlZf3Fjc12EuMY4h5DOsEHcB/azv3PPN NZAFRWBwRvZobc7lJswUcypCbFzuNuq0bpG4HxgFUSgXlsJIbH99jHysSW6Mmfa5 5T48PxE7T2OnDscZgcqus3AB5ZzF2P15DcnoT65ja75VYpHIy8G+Pl4LPXcEy+O/ nhQToEL1AWJwABcHHwOa7m/rKs9UpDy62WjLFQyf2MiDscmRrsXyfSQM7tvOimoF /dWCxDwHTunlyTpn -----END CERTIFICATE-----Generated at Mon Aug 4 14:48:31 2025 by rpki-client