$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa File: AS395111.roa (raw, json) Hash identifier: sptrNMTdraLdOxCZ4To14i7WJCQPqNtxKoFtFEx9lkY= Subject key identifier: E3:FF:1C:1B:52:74:B9:2C:FC:FC:E6:C2:60:77:2B:4A:04:90:EF:09 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 128660443328C434F45DA399AC7DDB9D3903A0A1 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa Signing time: Wed 22 Oct 2025 19:30:39 +0000 ROA not before: Wed 22 Oct 2025 19:25:39 +0000 ROA not after: Wed 21 Oct 2026 19:30:39 +0000 asID: 395111 IP address blocks: 104.234.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:86:60:44:33:28:c4:34:f4:5d:a3:99:ac:7d:db:9d:39:03:a0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 22 19:25:39 2025 GMT Not After : Oct 21 19:30:39 2026 GMT Subject: CN=E3FF1C1B5274B92CFCFCE6C260772B4A0490EF09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:55:0b:f8:64:5f:b9:12:84:5d:22:a1:0b: d6:db:8e:f5:94:fc:ef:02:5f:99:da:15:91:f5:cb: 48:f1:8f:51:8e:4f:bc:8b:bc:a2:3e:70:4b:14:f0: 96:7a:5c:b6:d7:c8:a8:f5:64:3b:fc:a5:eb:7d:f5: 3c:ca:2e:19:ea:b9:31:15:81:2c:3a:0c:77:ad:5f: e7:6f:df:4a:8f:7f:e9:d3:aa:e1:a0:16:6f:7d:4b: 7a:55:6b:d5:6f:e2:95:6d:06:59:52:44:9a:22:f8: c0:8b:3b:d4:66:f9:57:bc:f0:83:7d:76:db:4e:38: 76:b4:c4:03:23:86:c7:1f:76:38:25:84:72:d4:53: 65:b0:9e:cc:4c:a0:22:65:ae:ef:8b:82:9b:d1:7c: d7:1a:d6:fb:c5:29:28:d9:1b:fc:01:45:4f:8a:6a: d1:01:79:bb:1d:34:16:3a:e5:12:cc:ef:b0:7c:6b: b9:83:c8:ee:1a:78:80:13:91:c3:b2:9c:cd:ed:4f: 54:ff:50:71:15:3e:f6:03:3e:eb:9b:42:27:3f:c6: 62:3c:1b:3d:70:48:b1:3e:2f:ac:bb:37:46:49:47: a1:02:f0:f6:f0:50:c5:ff:8a:53:a5:fc:e1:f0:f3: 9e:cb:57:9d:58:48:8b:e0:a3:66:73:37:5a:bd:c5: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:FF:1C:1B:52:74:B9:2C:FC:FC:E6:C2:60:77:2B:4A:04:90:EF:09 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395111.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.171.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:d9:5f:fd:7d:f1:20:76:c8:f8:66:83:22:86:04:a3:97:11: a9:9b:db:f1:e0:e0:59:95:a3:c6:24:9f:b0:63:b7:9e:08:4c: 65:b9:99:f3:bf:68:ec:ae:7f:5f:8f:fe:aa:c2:7a:2e:21:15: 17:49:43:93:6d:df:37:e4:f9:a2:99:7c:35:fc:06:2b:9a:1e: 89:66:ac:eb:fe:d7:34:35:36:e1:a6:99:1f:70:73:46:b1:46: 10:80:cc:ec:ea:38:cf:a3:e2:52:0f:31:c1:19:62:31:03:f3: e1:05:96:4c:18:e7:b5:d7:95:31:04:49:e3:53:0a:fe:01:c7: 03:18:a9:c2:a0:3b:f4:25:b6:98:c8:b0:22:5a:df:86:97:dc: 97:2e:64:48:18:35:58:47:97:6b:44:2c:12:94:bd:43:f5:3d: 8a:b3:12:6e:bd:5f:da:3e:ab:6e:ce:1f:17:cb:f8:67:31:7e: 5a:c2:22:29:b2:74:e6:7f:df:42:5a:9f:f0:eb:2a:30:3c:dd: 0a:78:9e:02:44:69:e6:02:44:b4:e8:fe:d9:ea:fc:7a:cf:08: 01:df:73:94:df:cd:f8:06:2f:a4:b9:a0:a0:3c:5c:7f:60:62: ea:01:39:48:22:a5:59:87:d0:e9:bf:38:8b:15:7e:49:d5:7d: e4:bc:d4:ff -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUEoZgRDMoxDT0XaOZrH3bnTkDoKEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDIyMTkyNTM5WhcNMjYxMDIxMTkzMDM5 WjAzMTEwLwYDVQQDEyhFM0ZGMUMxQjUyNzRCOTJDRkNGQ0U2QzI2MDc3MkI0QTA0 OTBFRjA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu99VC/hkX7kS hF0ioQvW2471lPzvAl+Z2hWR9ctI8Y9Rjk+8i7yiPnBLFPCWely218io9WQ7/KXr ffU8yi4Z6rkxFYEsOgx3rV/nb99Kj3/p06rhoBZvfUt6VWvVb+KVbQZZUkSaIvjA izvUZvlXvPCDfXbbTjh2tMQDI4bHH3Y4JYRy1FNlsJ7MTKAiZa7vi4Kb0XzXGtb7 xSko2Rv8AUVPimrRAXm7HTQWOuUSzO+wfGu5g8juGniAE5HDspzN7U9U/1BxFT72 Az7rm0InP8ZiPBs9cEixPi+suzdGSUehAvD28FDF/4pTpfzh8POey1edWEiL4KNm czdavcU13wIDAQABo4ICfzCCAnswHQYDVR0OBBYEFOP/HBtSdLks/PzmwmB3K0oE kO8JMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NTExMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqqzANBgkqhkiG9w0BAQsFAAOC AQEAHdlf/X3xIHbI+GaDIoYEo5cRqZvb8eDgWZWjxiSfsGO3nghMZbmZ879o7K5/ X4/+qsJ6LiEVF0lDk23fN+T5opl8NfwGK5oeiWas6/7XNDU24aaZH3BzRrFGEIDM 7Oo4z6PiUg8xwRliMQPz4QWWTBjntdeVMQRJ41MK/gHHAxipwqA79CW2mMiwIlrf hpfcly5kSBg1WEeXa0QsEpS9Q/U9irMSbr1f2j6rbs4fF8v4ZzF+WsIiKbJ05n/f Qlqf8OsqMDzdCnieAkRp5gJEtOj+2er8es8IAd9zlN/N+AYvpLmgoDxcf2Bi6gE5 SCKlWYfQ6b84ixV+SdV95LzU/w== -----END CERTIFICATE-----Generated at Tue Nov 4 19:24:17 2025 by rpki-client