$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218499.roa File: AS218499.roa (raw, json) Hash identifier: TJZ8GZL/+InHpRZvKflxmC6SQQSwSkAym+VKvYnHY4s= Subject key identifier: 89:BE:79:05:F0:A6:2A:1E:87:D4:0E:78:86:2A:43:CE:AF:96:3A:EA Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7FCF8DB62FC763463C964E1655DBE88AFD8327D2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218499.roa Signing time: Tue 03 Nov 2026 04:55:21 +0000 ROA not before: Tue 03 Nov 2026 04:50:21 +0000 ROA not after: Tue 02 Nov 2027 04:55:21 +0000 asID: 218499 IP address blocks: 104.234.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 03:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cf:8d:b6:2f:c7:63:46:3c:96:4e:16:55:db:e8:8a:fd:83:27:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 3 04:50:21 2026 GMT Not After : Nov 2 04:55:21 2027 GMT Subject: CN=89BE7905F0A62A1E87D40E78862A43CEAF963AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:87:39:a1:04:11:7e:fc:55:f4:e6:ef:25:b0: 27:32:ea:44:b6:75:c4:26:f5:e1:d0:1c:8f:ac:a4: 07:c6:5f:b3:25:10:ec:e9:18:d4:ee:1e:2d:b4:a8: bb:c3:87:66:79:fc:ce:69:29:34:11:89:1f:cf:85: 79:1b:1a:93:03:29:b8:a3:cb:38:eb:75:19:1e:58: ed:85:2d:f5:1f:e3:36:4d:7d:bf:10:d3:30:d7:da: 2f:0a:fb:cb:f0:52:b7:c7:0c:c4:92:a2:8e:8d:65: c5:27:39:ba:5d:54:47:f2:12:e5:2e:86:28:53:b1: 2f:0b:34:93:c4:fb:f7:a2:1a:20:84:d0:b7:fa:b5: 74:a6:f6:8f:b1:e3:ed:63:09:f8:32:b6:12:41:04: 36:ed:a7:02:4e:8d:77:b5:5a:c0:b4:05:18:14:5f: 46:d2:d9:bb:84:b0:5d:aa:17:82:b8:09:25:74:b0: bc:27:5e:55:b1:41:2d:ab:39:98:58:8b:fc:18:40: 8b:80:55:12:08:34:15:93:85:25:de:ca:02:0a:08: 33:3e:f6:03:85:64:fe:e6:7f:52:27:22:c1:e6:01: ed:bc:1f:78:b0:7d:38:9c:90:84:ba:2a:d5:0b:96: 99:39:c3:cc:e9:af:20:3c:6f:b5:0e:34:10:eb:50: 2b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BE:79:05:F0:A6:2A:1E:87:D4:0E:78:86:2A:43:CE:AF:96:3A:EA X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS218499.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.107.0/24 Signature Algorithm: sha256WithRSAEncryption c0:6b:59:85:59:4b:82:a6:76:a6:84:25:44:59:31:54:ef:2d: 04:ae:17:11:02:60:43:c6:80:d1:c5:89:cd:94:65:0f:c3:b1: 89:21:c6:72:79:aa:cd:00:49:ec:0b:ba:67:1e:a8:c4:d1:21: d0:61:ce:f0:5a:8c:bc:ae:a1:66:90:db:04:75:4c:c2:1d:79: 1c:0b:09:3c:13:ca:89:7b:d7:0d:b0:e9:72:64:0e:2a:d8:5d: 67:5c:aa:d1:cf:09:4e:e8:1b:bf:29:12:4e:4c:f9:c8:1e:3c: e6:54:3a:2a:b8:2a:1e:a6:19:a1:b3:47:c6:2c:e5:79:97:d6: 61:76:2e:75:41:64:a2:26:99:7b:09:cf:24:9e:25:81:f1:0d: 11:bd:0b:a2:c0:17:7f:a1:88:6d:a9:c1:33:75:2a:c8:2e:66: 9e:99:e9:46:54:d0:08:e0:fe:67:8d:89:0e:31:df:55:d4:bd: 1e:1f:b8:66:f0:4c:08:ff:b4:bd:f3:9f:a6:6b:f0:4d:46:d7: 26:3a:09:44:4f:b1:8c:43:b1:87:80:11:f0:e5:16:0d:f9:ab: 61:2f:89:ac:0f:31:c2:fd:37:2b:c3:32:10:9c:f8:8b:f4:d5: d7:ca:2b:b3:a0:cb:32:ff:f9:d6:c0:e7:5f:c4:51:e7:bd:ad: fd:c0:40:9b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUf8+Nti/HY0Y8lk4WVdvoiv2DJ9IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMTAzMDQ1MDIxWhcNMjcxMTAyMDQ1NTIx WjAzMTEwLwYDVQQDEyg4OUJFNzkwNUYwQTYyQTFFODdENDBFNzg4NjJBNDNDRUFG OTYzQUVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Yc5oQQRfvxV 9ObvJbAnMupEtnXEJvXh0ByPrKQHxl+zJRDs6RjU7h4ttKi7w4dmefzOaSk0EYkf z4V5GxqTAym4o8s463UZHljthS31H+M2TX2/ENMw19ovCvvL8FK3xwzEkqKOjWXF Jzm6XVRH8hLlLoYoU7EvCzSTxPv3ohoghNC3+rV0pvaPsePtYwn4MrYSQQQ27acC To13tVrAtAUYFF9G0tm7hLBdqheCuAkldLC8J15VsUEtqzmYWIv8GECLgFUSCDQV k4Ul3soCCggzPvYDhWT+5n9SJyLB5gHtvB94sH04nJCEuirVC5aZOcPM6a8gPG+1 DjQQ61AriQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFIm+eQXwpioeh9QOeIYqQ86v ljrqMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxODQ5OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqazANBgkqhkiG9w0BAQsFAAOC AQEAwGtZhVlLgqZ2poQlRFkxVO8tBK4XEQJgQ8aA0cWJzZRlD8OxiSHGcnmqzQBJ 7Au6Zx6oxNEh0GHO8FqMvK6hZpDbBHVMwh15HAsJPBPKiXvXDbDpcmQOKthdZ1yq 0c8JTugbvykSTkz5yB485lQ6KrgqHqYZobNHxizleZfWYXYudUFkoiaZewnPJJ4l gfENEb0LosAXf6GIbanBM3UqyC5mnpnpRlTQCOD+Z42JDjHfVdS9Hh+4ZvBMCP+0 vfOfpmvwTUbXJjoJRE+xjEOxh4AR8OUWDfmrYS+JrA8xwv03K8MyEJz4i/TV18or s6DLMv/51sDnX8RR572t/cBAmw== -----END CERTIFICATE-----Generated at Thu Nov 5 11:27:29 2026 by rpki-client