$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395881.roa File: AS395881.roa (raw, json) Hash identifier: FnfJBz3Z9UuJc/NBF2HEO5EmlouYxkTXY5WzowlHKE4= Subject key identifier: 98:35:C9:0A:F1:1C:A0:6F:76:BD:49:30:F5:53:3F:38:6B:D7:E8:41 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1BB066465B5820F9E70687A1B56BA0C84B6DDCA1 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395881.roa Signing time: Thu 24 Jul 2025 22:34:23 +0000 ROA not before: Thu 24 Jul 2025 22:29:23 +0000 ROA not after: Thu 23 Jul 2026 22:34:23 +0000 asID: 395881 IP address blocks: 104.234.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b0:66:46:5b:58:20:f9:e7:06:87:a1:b5:6b:a0:c8:4b:6d:dc:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 24 22:29:23 2025 GMT Not After : Jul 23 22:34:23 2026 GMT Subject: CN=9835C90AF11CA06F76BD4930F5533F386BD7E841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:21:b4:cb:e7:5e:ea:7e:f8:af:e2:0c:65:b0: a2:b9:a7:13:c9:7e:f0:3e:fd:65:c1:a6:81:45:41: ef:da:ea:b1:17:4c:5e:24:64:77:83:b9:e5:92:19: 4f:61:57:52:61:8d:ab:ba:55:36:76:25:f4:95:63: c5:2d:62:15:99:3d:05:2c:1c:b5:d8:ce:6b:6a:dc: fd:f8:b9:82:43:91:4b:4d:82:96:b5:b1:a1:90:cb: 78:71:ea:fe:8c:33:39:67:cc:9e:ef:3a:ba:85:8e: 28:fa:98:47:e8:d2:7a:38:3e:00:c0:aa:13:05:73: 43:4e:5c:3e:bc:87:bd:28:00:c2:50:ee:7d:a0:17: 63:01:7b:67:68:22:97:48:97:65:30:23:34:39:0b: b4:b9:44:7d:5b:0d:f3:32:c5:f4:b0:69:71:4d:8c: d7:84:61:53:ca:82:35:47:17:b1:68:ce:46:22:26: 0e:ea:0c:a1:ec:26:02:cc:70:3a:05:2e:90:e1:8d: 4b:1e:39:74:2e:e8:7c:39:20:51:91:44:ca:a0:12: 1f:6e:7a:2a:58:20:39:1d:17:d1:92:c0:9a:3d:0b: a7:a9:cb:90:a8:c9:a5:75:a9:71:45:c1:4b:00:94: db:cd:0b:ad:ce:62:ee:9e:51:51:8a:19:ab:72:ba: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:35:C9:0A:F1:1C:A0:6F:76:BD:49:30:F5:53:3F:38:6B:D7:E8:41 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS395881.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.236.0/24 Signature Algorithm: sha256WithRSAEncryption 81:ff:6e:09:f1:e0:cb:b2:94:b6:0c:e3:51:fc:bf:11:e6:6c: b9:45:67:5d:e5:c9:2e:ec:bf:e1:1c:c2:6b:cf:b8:2c:1f:44: 0a:1f:92:d4:4d:f9:78:7e:6d:7d:b2:5b:2b:68:0a:e4:61:61: 9d:22:0f:91:ef:01:8a:78:20:3e:85:18:bf:a2:6b:28:e6:d9: 6b:00:75:11:a5:01:24:78:86:60:9e:b7:a1:09:23:9c:95:01: 1b:a3:23:c2:c3:0d:e7:a0:84:53:61:72:d9:c1:e9:24:1f:81: cb:10:62:47:8e:7f:59:c4:9e:c5:6d:6a:d5:9e:a1:9e:0a:3f: 0f:cf:06:19:97:2f:be:5d:77:16:17:91:99:4d:d5:f8:52:b7: e7:91:a3:c4:19:09:80:52:66:cf:fd:51:f6:77:02:e3:f8:b7: 7f:45:e7:53:0e:fb:e0:76:28:8a:21:42:0f:8d:34:3c:75:9d: c7:9a:81:c4:e9:6e:04:df:71:ee:8a:d5:c1:7e:b1:0f:a7:8a: 1b:54:b6:3d:9f:b6:06:f5:d7:6f:60:0f:4b:7c:e7:aa:10:33: 0d:76:96:4c:54:d4:6f:de:29:7f:36:46:d3:6e:9c:eb:8e:9c: 8f:57:b1:ac:76:6f:9d:eb:5d:98:1a:a1:ca:09:30:3a:31:e1: 1d:a6:02:9b -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUG7BmRltYIPnnBoehtWugyEtt3KEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzI0MjIyOTIzWhcNMjYwNzIzMjIzNDIz WjAzMTEwLwYDVQQDEyg5ODM1QzkwQUYxMUNBMDZGNzZCRDQ5MzBGNTUzM0YzODZC RDdFODQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSG0y+de6n74 r+IMZbCiuacTyX7wPv1lwaaBRUHv2uqxF0xeJGR3g7nlkhlPYVdSYY2rulU2diX0 lWPFLWIVmT0FLBy12M5ratz9+LmCQ5FLTYKWtbGhkMt4cer+jDM5Z8ye7zq6hY4o +phH6NJ6OD4AwKoTBXNDTlw+vIe9KADCUO59oBdjAXtnaCKXSJdlMCM0OQu0uUR9 Ww3zMsX0sGlxTYzXhGFTyoI1RxexaM5GIiYO6gyh7CYCzHA6BS6Q4Y1LHjl0Luh8 OSBRkUTKoBIfbnoqWCA5HRfRksCaPQunqcuQqMmldalxRcFLAJTbzQutzmLunlFR ihmrcrqdaQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFJg1yQrxHKBvdr1JMPVTPzhr 1+hBMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NTg4MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq7DANBgkqhkiG9w0BAQsFAAOC AQEAgf9uCfHgy7KUtgzjUfy/EeZsuUVnXeXJLuy/4RzCa8+4LB9ECh+S1E35eH5t fbJbK2gK5GFhnSIPke8BinggPoUYv6JrKObZawB1EaUBJHiGYJ63oQkjnJUBG6Mj wsMN56CEU2Fy2cHpJB+ByxBiR45/WcSexW1q1Z6hngo/D88GGZcvvl13FheRmU3V +FK355GjxBkJgFJmz/1R9ncC4/i3f0XnUw774HYoiiFCD400PHWdx5qBxOluBN9x 7orVwX6xD6eKG1S2PZ+2BvXXb2APS3znqhAzDXaWTFTUb94pfzZG026c646cj1ex rHZvnetdmBqhygkwOjHhHaYCmw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:23:55 2025 by rpki-client