$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214693.roa File: AS214693.roa (raw, json) Hash identifier: 0Yuzehi+Qai7V3woxb3LfJFQQm9YGSIED0hOP/8udbg= Subject key identifier: 5E:1A:30:B2:2A:E5:A8:0B:87:7A:F7:C6:CB:9D:27:97:7A:E6:B5:47 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 63A8DE0517B2E66962B1231F7B583A79159AF5D6 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214693.roa Signing time: Thu 30 Oct 2025 23:16:45 +0000 ROA not before: Thu 30 Oct 2025 23:11:45 +0000 ROA not after: Thu 29 Oct 2026 23:16:45 +0000 asID: 214693 IP address blocks: 104.234.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:a8:de:05:17:b2:e6:69:62:b1:23:1f:7b:58:3a:79:15:9a:f5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 30 23:11:45 2025 GMT Not After : Oct 29 23:16:45 2026 GMT Subject: CN=5E1A30B22AE5A80B877AF7C6CB9D27977AE6B547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:5d:77:f8:e6:51:79:ac:48:37:65:d5:27: c1:4e:3b:04:00:9c:39:d8:82:c5:0f:b4:a8:9f:13: 8f:56:d6:54:54:94:43:34:82:66:a9:7e:e2:11:21: 54:84:19:5a:d6:ed:4b:a3:9f:99:87:91:75:6b:5f: e3:f0:a5:91:f8:85:51:d7:ce:72:a4:61:9c:3c:84: c3:29:15:74:72:a2:73:b1:49:3b:e8:44:d0:8f:2b: 0f:5c:6d:d5:4c:0b:ab:45:38:59:4e:cc:39:c1:24: a3:6a:6f:5f:58:a0:e1:41:cc:26:28:6a:6d:f1:89: 36:c1:84:78:db:3b:aa:e5:ef:53:81:ec:d4:a9:36: fb:86:b1:20:d8:ab:a4:e9:fd:4d:be:a9:e7:df:c7: d0:96:74:ff:85:bc:ac:95:ba:1d:d8:8f:9a:e3:61: 92:b6:93:52:d6:4b:46:4e:21:5f:d3:95:54:6e:25: 5e:93:bc:88:db:da:cf:a2:79:08:f2:bb:69:7a:6c: 2f:46:02:77:c9:d9:1f:3b:92:42:0d:d5:8c:97:99: 4c:5d:c2:72:07:17:59:71:b8:31:14:5f:c4:2b:44: f9:6a:c2:02:47:03:cc:38:00:b7:1a:8f:78:02:7f: 49:a6:b8:37:f9:86:d0:a9:c4:aa:73:33:50:78:a8: 3c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:1A:30:B2:2A:E5:A8:0B:87:7A:F7:C6:CB:9D:27:97:7A:E6:B5:47 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS214693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.18.0/24 Signature Algorithm: sha256WithRSAEncryption 95:0e:83:9a:98:ac:71:e5:4a:dc:13:10:cf:57:d2:68:03:fc: 35:a6:1a:d2:35:23:73:00:2a:08:47:fe:76:3b:e9:2c:fa:f5: e8:fa:48:c9:bc:a5:ad:ad:73:b4:02:a5:9f:a8:98:50:81:db: 71:2e:67:a5:a6:20:66:4e:49:2e:a2:30:c1:19:be:01:9a:15: 62:03:49:7d:59:19:53:4d:0d:3d:51:9d:7b:d5:13:58:14:62: 94:54:88:bc:e4:2b:53:e3:47:e0:b3:b0:66:dc:c5:aa:a3:3e: cc:76:72:b1:72:db:11:e5:a2:2f:88:1a:e7:81:51:9e:94:51: 6d:18:24:27:2a:b2:d9:4d:c6:bb:60:3a:d5:b8:54:5f:ba:2c: 0f:c2:15:3a:f1:f9:2a:09:f7:1e:4e:7b:f9:e1:1e:a7:70:ff: 28:5c:d0:60:ce:0f:50:74:75:42:1d:b3:05:7b:70:39:52:4d: ad:e0:d7:24:3a:d1:e0:5f:8e:37:e9:32:05:e8:90:46:f0:8c: f1:8e:2c:28:67:40:5a:38:bf:31:01:85:20:98:3c:66:f6:ba: b1:b2:03:ed:05:72:63:c0:21:86:c6:56:51:d6:0f:41:44:a2: 78:c4:96:17:e1:cc:55:01:83:b2:5d:f6:01:1d:f5:72:79:77: 61:c7:5a:d1 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUY6jeBRey5mlisSMfe1g6eRWa9dYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDMwMjMxMTQ1WhcNMjYxMDI5MjMxNjQ1 WjAzMTEwLwYDVQQDEyg1RTFBMzBCMjJBRTVBODBCODc3QUY3QzZDQjlEMjc5NzdB RTZCNTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod1dd/jmUXms SDdl1SfBTjsEAJw52ILFD7SonxOPVtZUVJRDNIJmqX7iESFUhBla1u1Lo5+Zh5F1 a1/j8KWR+IVR185ypGGcPITDKRV0cqJzsUk76ETQjysPXG3VTAurRThZTsw5wSSj am9fWKDhQcwmKGpt8Yk2wYR42zuq5e9TgezUqTb7hrEg2Kuk6f1Nvqnn38fQlnT/ hbyslbod2I+a42GStpNS1ktGTiFf05VUbiVek7yI29rPonkI8rtpemwvRgJ3ydkf O5JCDdWMl5lMXcJyBxdZcbgxFF/EK0T5asICRwPMOAC3Go94An9Jprg3+YbQqcSq czNQeKg8uwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFF4aMLIq5agLh3r3xsudJ5d6 5rVHMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxNDY5My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqEjANBgkqhkiG9w0BAQsFAAOC AQEAlQ6DmpisceVK3BMQz1fSaAP8NaYa0jUjcwAqCEf+djvpLPr16PpIybylra1z tAKln6iYUIHbcS5npaYgZk5JLqIwwRm+AZoVYgNJfVkZU00NPVGde9UTWBRilFSI vOQrU+NH4LOwZtzFqqM+zHZysXLbEeWiL4ga54FRnpRRbRgkJyqy2U3Gu2A61bhU X7osD8IVOvH5Kgn3Hk57+eEep3D/KFzQYM4PUHR1Qh2zBXtwOVJNreDXJDrR4F+O N+kyBeiQRvCM8Y4sKGdAWji/MQGFIJg8Zva6sbID7QVyY8AhhsZWUdYPQUSieMSW F+HMVQGDsl32AR31cnl3Ycda0Q== -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:00 2025 by rpki-client