$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198566.roa File: AS198566.roa (raw, json) Hash identifier: ACq2xXmFErSZsFtyhBeBQlvtfUBqeP8f2nat0jF3WRw= Subject key identifier: 8F:FF:AB:48:05:33:21:07:36:04:27:21:F9:19:2B:BA:17:33:A1:B8 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 01ED2F0099E15EF1B09071959101CABBE8960E3A Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198566.roa Signing time: Wed 04 Nov 2026 20:11:42 +0000 ROA not before: Wed 04 Nov 2026 20:06:42 +0000 ROA not after: Wed 03 Nov 2027 20:11:42 +0000 asID: 198566 IP address blocks: 104.234.62.0/24 maxlen: 24 104.234.152.0/24 maxlen: 24 104.234.157.0/24 maxlen: 24 104.234.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 01:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ed:2f:00:99:e1:5e:f1:b0:90:71:95:91:01:ca:bb:e8:96:0e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 4 20:06:42 2026 GMT Not After : Nov 3 20:11:42 2027 GMT Subject: CN=8FFFAB480533210736042721F9192BBA1733A1B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:f2:e6:4a:ae:12:7e:f4:a9:4f:e7:48:97: 5a:eb:c3:1b:26:9f:a7:25:29:fa:b1:6f:98:96:d5: 48:d7:b4:cf:c8:71:dd:08:71:8e:e0:ab:5d:82:59: fc:09:29:b9:0d:a0:c1:d5:af:ca:5f:03:5e:ce:37: ec:0a:ed:33:e0:ec:16:8f:f3:20:53:41:4e:bc:57: 14:64:4d:dd:30:40:48:37:61:0f:85:72:ce:e2:5e: 16:44:db:90:f5:a9:0d:c0:36:09:ed:bb:19:9a:07: aa:be:ba:d6:ff:33:04:9e:88:32:22:91:50:91:46: 71:87:cb:84:25:3c:76:45:c3:24:29:47:c1:cc:c8: b2:63:65:ba:a8:4d:57:58:a7:ec:08:c4:46:d5:f6: 1e:e3:8a:0a:e2:b3:07:c1:54:00:f9:2a:0b:a8:c5: 6c:c9:31:66:2a:59:4d:88:f6:bc:c1:44:70:3c:5b: 60:9b:c8:3b:3e:62:15:98:e5:8e:59:3c:40:83:98: a1:94:03:79:89:f7:e7:2e:4f:cb:59:c1:65:4a:2d: 3c:8c:e9:17:43:96:cd:af:a1:fe:d6:39:ce:a0:a0: 80:ad:ed:99:55:ba:f3:74:d8:b1:00:61:53:51:42: 6e:84:ef:2d:d2:b1:6d:81:ed:71:6b:d2:01:51:5d: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FF:AB:48:05:33:21:07:36:04:27:21:F9:19:2B:BA:17:33:A1:B8 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS198566.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.62.0/24 104.234.152.0/24 104.234.157.0/24 104.234.220.0/24 Signature Algorithm: sha256WithRSAEncryption a4:d6:30:7d:77:f8:99:c0:dd:4d:d5:be:29:9e:56:fa:09:30: f1:1d:bd:65:c3:d1:e5:40:99:09:1e:73:6f:de:5a:a6:40:c9: 44:77:f2:65:a2:fe:d1:31:5e:18:97:be:f6:90:a4:2a:19:34: 66:ef:29:af:35:93:77:61:19:2b:ea:76:3f:de:31:e1:ed:22: a0:98:ae:be:7f:a0:95:62:74:86:60:bb:9b:2f:c2:53:73:5f: 1a:f8:9b:fe:12:e6:2d:d4:9d:7e:e9:e7:67:d8:39:77:d9:04: 8d:66:ae:11:a5:f4:9a:f1:be:d8:55:73:94:b9:b8:0f:f8:da: ed:44:3c:f4:6f:d6:ee:4a:e3:38:51:f0:58:af:c2:f9:77:9b: 96:00:55:03:38:1f:54:f6:3e:3a:92:bb:ab:e4:65:c0:64:d8: 16:32:f2:78:38:15:33:d5:74:ea:4f:1e:db:29:05:b4:44:9e: e1:0f:3e:1a:49:81:70:84:f0:d0:09:79:99:ca:69:a7:a8:d8: 4a:af:48:a4:d6:72:a4:8b:9b:2e:eb:9a:6a:ec:fa:d9:cb:ae: d2:a6:b7:07:5b:54:2e:1c:52:70:53:21:38:cc:9c:dc:75:be: 54:a6:8b:bf:1b:43:f8:17:40:af:ac:70:bf:25:70:d5:55:fe: 5d:4f:fa:5d -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUAe0vAJnhXvGwkHGVkQHKu+iWDjowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMTA0MjAwNjQyWhcNMjcxMTAzMjAxMTQy WjAzMTEwLwYDVQQDEyg4RkZGQUI0ODA1MzMyMTA3MzYwNDI3MjFGOTE5MkJCQTE3 MzNBMUI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3y5kquEn70 qU/nSJda68MbJp+nJSn6sW+YltVI17TPyHHdCHGO4Ktdgln8CSm5DaDB1a/KXwNe zjfsCu0z4OwWj/MgU0FOvFcUZE3dMEBIN2EPhXLO4l4WRNuQ9akNwDYJ7bsZmgeq vrrW/zMEnogyIpFQkUZxh8uEJTx2RcMkKUfBzMiyY2W6qE1XWKfsCMRG1fYe44oK 4rMHwVQA+SoLqMVsyTFmKllNiPa8wURwPFtgm8g7PmIVmOWOWTxAg5ihlAN5iffn Lk/LWcFlSi08jOkXQ5bNr6H+1jnOoKCAre2ZVbrzdNixAGFTUUJuhO8t0rFtge1x a9IBUV0+PQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFI//q0gFMyEHNgQnIfkZK7oX M6G4MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzE5ODU2Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqPgMEAGjqmAMEAGjqnQMEAGjq 3DANBgkqhkiG9w0BAQsFAAOCAQEApNYwfXf4mcDdTdW+KZ5W+gkw8R29ZcPR5UCZ CR5zb95apkDJRHfyZaL+0TFeGJe+9pCkKhk0Zu8przWTd2EZK+p2P94x4e0ioJiu vn+glWJ0hmC7my/CU3NfGvib/hLmLdSdfunnZ9g5d9kEjWauEaX0mvG+2FVzlLm4 D/ja7UQ89G/W7krjOFHwWK/C+XeblgBVAzgfVPY+OpK7q+RlwGTYFjLyeDgVM9V0 6k8e2ykFtESe4Q8+GkmBcITw0Al5mcppp6jYSq9IpNZypIubLuuaauz62cuu0qa3 B1tULhxScFMhOMyc3HW+VKaLvxtD+BdAr6xwvyVw1VX+XU/6XQ== -----END CERTIFICATE-----Generated at Thu Nov 5 04:56:10 2026 by rpki-client