$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: ErNH/grFfr2/s7pgc0qTUO72H1WcasFUs1i15nomqtw= Subject key identifier: 60:A1:66:E6:5C:8F:4F:57:96:D1:E7:26:0F:37:C6:4A:E7:9B:91:3F Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 75FCD4832BFA4724E2258AFA1E3F7371078F6630 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa Signing time: Mon 30 Mar 2026 10:24:42 +0000 ROA not before: Mon 30 Mar 2026 10:19:42 +0000 ROA not after: Mon 29 Mar 2027 10:24:42 +0000 asID: 212238 IP address blocks: 104.234.120.0/24 maxlen: 24 104.234.149.0/24 maxlen: 24 104.234.208.0/24 maxlen: 24 104.234.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 03:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:fc:d4:83:2b:fa:47:24:e2:25:8a:fa:1e:3f:73:71:07:8f:66:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 30 10:19:42 2026 GMT Not After : Mar 29 10:24:42 2027 GMT Subject: CN=60A166E65C8F4F5796D1E7260F37C64AE79B913F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a5:7a:ab:b8:f9:7f:40:4c:ed:ae:c9:e0:37: 8c:2c:de:0c:a7:15:6d:e5:c9:a7:28:20:5c:24:0a: 0f:02:37:b5:17:ff:35:f1:45:0f:5c:5a:f7:50:1e: 1b:bc:86:2d:30:8d:a6:84:28:d8:bc:aa:85:ed:4d: 37:ff:f4:0c:46:13:3c:cb:c2:bd:33:5c:a5:24:a0: 05:ea:24:e9:e2:b8:c0:81:4a:c4:c1:42:9f:e9:f2: 78:20:ad:c0:19:60:e3:83:c1:68:37:dc:42:5a:38: 74:11:eb:3e:4a:d7:a8:8d:4a:86:af:8e:a8:86:f4: 6d:c8:76:86:6e:48:0c:a5:40:16:ef:46:aa:57:5e: 83:86:15:61:0c:58:1c:14:4b:af:e7:f2:5a:60:3a: d3:94:cf:47:91:e4:00:d9:28:11:dc:8d:99:d9:ba: 45:7c:1e:51:07:25:4c:0a:a1:1e:20:bd:d1:8b:b4: b5:8d:8e:d1:b8:57:d1:c1:cc:d4:0a:28:f9:90:ec: d5:72:44:e8:a8:66:08:cb:5d:e0:61:5f:23:79:cc: 9a:07:ba:3b:dd:93:6f:d8:7e:c4:db:a7:82:eb:3a: c6:53:4e:a7:fd:3e:69:dd:e9:7b:2a:c6:b7:0b:86: 77:a4:c9:bd:47:d2:60:40:cc:c7:06:78:39:bf:10: c1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:66:E6:5C:8F:4F:57:96:D1:E7:26:0F:37:C6:4A:E7:9B:91:3F X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.120.0/24 104.234.149.0/24 104.234.208.0/24 104.234.240.0/24 Signature Algorithm: sha256WithRSAEncryption 53:2c:00:e2:06:22:62:b5:50:7a:bc:68:20:24:0f:9c:b5:47: d9:76:5f:1e:9d:d8:26:ff:c5:9b:a6:20:99:1c:c8:70:dc:3e: 5d:7e:fb:92:8d:f7:a0:bf:e0:77:0f:53:c2:61:6a:08:e9:a6: fc:3c:27:ea:d1:49:01:7b:f1:00:57:b0:36:4a:e6:8a:9c:b7: 2d:4e:e3:f3:7b:0e:f9:a9:36:34:43:e8:b2:56:3f:76:6a:d3: 26:d4:77:55:13:ff:da:71:b9:7e:fb:82:79:a9:f4:bf:af:08: b8:6f:b3:1a:0e:82:c8:76:ac:24:78:eb:6b:ac:08:37:77:df: be:e4:0d:40:e6:3f:bd:b3:37:3a:75:c6:69:e6:21:54:56:56: 9c:33:39:fd:6e:03:e1:32:21:95:79:25:98:65:b6:01:b0:80: d9:0a:b2:bf:a9:22:f4:bb:38:25:60:8a:39:c8:a9:b1:38:b5: 45:6d:96:1f:85:5a:6a:ec:b1:43:ec:b2:9b:56:4d:04:3e:d4: 83:05:50:02:b9:69:60:4c:2a:ed:4e:26:0b:9a:b0:c2:f6:e4: e5:98:7c:ed:07:2e:4b:75:27:70:5f:35:07:d5:0d:46:d2:0c: 10:46:78:0d:09:66:94:8f:14:b9:32:27:4f:73:ab:16:8f:13: 25:ef:ef:3d -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUdfzUgyv6RyTiJYr6Hj9zcQePZjAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzMwMTAxOTQyWhcNMjcwMzI5MTAyNDQy WjAzMTEwLwYDVQQDEyg2MEExNjZFNjVDOEY0RjU3OTZEMUU3MjYwRjM3QzY0QUU3 OUI5MTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqV6q7j5f0BM 7a7J4DeMLN4MpxVt5cmnKCBcJAoPAje1F/818UUPXFr3UB4bvIYtMI2mhCjYvKqF 7U03//QMRhM8y8K9M1ylJKAF6iTp4rjAgUrEwUKf6fJ4IK3AGWDjg8FoN9xCWjh0 Ees+SteojUqGr46ohvRtyHaGbkgMpUAW70aqV16DhhVhDFgcFEuv5/JaYDrTlM9H keQA2SgR3I2Z2bpFfB5RByVMCqEeIL3Ri7S1jY7RuFfRwczUCij5kOzVckToqGYI y13gYV8jecyaB7o73ZNv2H7E26eC6zrGU06n/T5p3el7Ksa3C4Z3pMm9R9JgQMzH Bng5vxDBTQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFGChZuZcj09XltHnJg83xkrn m5E/MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqeAMEAGjqlQMEAGjq0AMEAGjq 8DANBgkqhkiG9w0BAQsFAAOCAQEAUywA4gYiYrVQerxoICQPnLVH2XZfHp3YJv/F m6YgmRzIcNw+XX77ko33oL/gdw9TwmFqCOmm/Dwn6tFJAXvxAFewNkrmipy3LU7j 83sO+ak2NEPoslY/dmrTJtR3VRP/2nG5fvuCean0v68IuG+zGg6CyHasJHjra6wI N3ffvuQNQOY/vbM3OnXGaeYhVFZWnDM5/W4D4TIhlXklmGW2AbCA2Qqyv6ki9Ls4 JWCKOcipsTi1RW2WH4VaauyxQ+yym1ZNBD7UgwVQArlpYEwq7U4mC5qwwvbk5Zh8 7QcuS3UncF81B9UNRtIMEEZ4DQlmlI8UuTInT3OrFo8TJe/vPQ== -----END CERTIFICATE-----Generated at Fri Apr 17 05:38:00 2026 by rpki-client