$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa File: AS396163.roa (raw, json) Hash identifier: Z/sVAjeCJGPLOUh26wG6iuMjLAspdsODbb2fBEUZgtM= Subject key identifier: 6B:64:54:00:61:9C:47:32:E4:DF:5B:CA:5D:4A:9C:42:F1:C2:4E:ED Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0B91419A433D800CC4071F87A61C39C682C1FFAF Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa Signing time: Tue 05 Aug 2025 22:29:44 +0000 ROA not before: Tue 05 Aug 2025 22:24:44 +0000 ROA not after: Tue 04 Aug 2026 22:29:44 +0000 asID: 396163 IP address blocks: 104.234.21.0/24 maxlen: 24 104.234.31.0/24 maxlen: 24 104.234.51.0/24 maxlen: 24 104.234.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:91:41:9a:43:3d:80:0c:c4:07:1f:87:a6:1c:39:c6:82:c1:ff:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 5 22:24:44 2025 GMT Not After : Aug 4 22:29:44 2026 GMT Subject: CN=6B645400619C4732E4DF5BCA5D4A9C42F1C24EED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:74:17:6d:f0:e2:de:46:47:ee:c1:b1:17:66: e9:d8:39:9f:30:a5:ee:b1:84:5b:da:02:a5:3f:37: a9:53:10:b7:d5:fd:74:b5:8d:c9:a9:26:ad:9f:5c: 46:8e:ce:74:7a:bf:6c:f4:cd:c1:a8:ce:28:c5:f0: 22:59:20:16:0d:ae:f6:4a:30:ad:5a:77:20:5d:ae: f8:bb:07:c8:8d:c1:74:64:33:06:f3:21:09:de:fa: 9a:bd:2c:5f:6d:c0:d7:b7:fe:56:b9:5b:f2:68:e9: f0:fd:b7:2c:cb:e4:cf:9c:71:38:5b:84:d9:64:22: d7:f8:93:ac:63:10:a4:7f:ee:85:7f:ae:87:11:e0: 2c:e1:c9:5f:83:9c:d3:37:35:54:5c:e6:51:e6:f7: 67:f2:66:b3:84:d6:94:93:1c:d4:f1:25:e5:6a:b3: 22:5e:ec:ee:ca:06:7a:a6:e8:c2:e0:82:5f:94:47: a6:11:4f:d4:a1:49:71:bb:74:02:42:d0:ce:52:ee: 77:2d:a8:81:57:dc:c2:ed:2b:0c:5b:c1:dd:52:b6: a2:15:63:2d:8f:49:87:57:7c:6f:be:f8:e5:d5:c3: f2:af:73:87:a4:60:99:a3:fd:6a:2f:cb:13:06:be: fe:d6:45:76:95:04:42:2c:ea:b0:4d:b1:63:b4:c3: 66:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:64:54:00:61:9C:47:32:E4:DF:5B:CA:5D:4A:9C:42:F1:C2:4E:ED X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396163.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.21.0/24 104.234.31.0/24 104.234.51.0/24 104.234.91.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:c4:bb:57:b7:a8:57:70:cf:c5:dd:6b:00:78:83:70:0c:37: 59:69:98:0d:33:35:ff:0e:ef:53:55:6a:ba:31:7d:56:32:69: 2f:80:fe:2b:0d:cf:dc:0f:3f:94:a1:93:da:79:73:18:6a:ce: cc:78:06:78:d2:ef:fe:b1:a5:74:b8:26:ea:21:4a:fa:ce:8f: c7:cb:54:c9:34:8c:6e:ae:b3:5c:59:1a:83:81:fd:df:53:53: a2:b4:71:23:29:b6:4b:06:30:17:b3:3b:f8:31:97:00:b8:0b: b7:9b:e6:28:e1:58:ce:57:ce:63:94:c9:e1:b1:ac:43:18:64: 8d:fa:29:57:ec:7f:71:87:b6:3b:28:39:5c:a6:e7:ee:ea:37: b9:84:27:04:9d:cb:d5:d5:e6:4d:23:17:8a:bd:10:1b:2a:41: 21:da:4f:b8:34:13:1e:74:f2:4c:7e:d3:c7:af:8e:1a:02:00: 4d:73:6f:10:d2:f4:b4:d1:86:78:a4:e1:f2:6b:68:32:76:53: ec:8f:0e:61:24:1f:4b:2f:04:58:77:cf:b0:a0:27:bb:c5:bf: 7d:a9:f9:e6:87:c1:d1:de:33:71:c7:01:bf:73:ea:98:b6:43: d8:77:8c:fa:dd:da:6c:b9:2c:c7:a6:6e:65:1a:ad:c6:97:d6: 33:e1:40:84 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUC5FBmkM9gAzEBx+Hphw5xoLB/68wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODA1MjIyNDQ0WhcNMjYwODA0MjIyOTQ0 WjAzMTEwLwYDVQQDEyg2QjY0NTQwMDYxOUM0NzMyRTRERjVCQ0E1RDRBOUM0MkYx QzI0RUVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXQXbfDi3kZH 7sGxF2bp2DmfMKXusYRb2gKlPzepUxC31f10tY3JqSatn1xGjs50er9s9M3BqM4o xfAiWSAWDa72SjCtWncgXa74uwfIjcF0ZDMG8yEJ3vqavSxfbcDXt/5WuVvyaOnw /bcsy+TPnHE4W4TZZCLX+JOsYxCkf+6Ff66HEeAs4clfg5zTNzVUXOZR5vdn8maz hNaUkxzU8SXlarMiXuzuygZ6pujC4IJflEemEU/UoUlxu3QCQtDOUu53LaiBV9zC 7SsMW8HdUraiFWMtj0mHV3xvvvjl1cPyr3OHpGCZo/1qL8sTBr7+1kV2lQRCLOqw TbFjtMNmqwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFGtkVABhnEcy5N9byl1KnELx wk7tMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NjE2My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqFQMEAGjqHwMEAGjqMwMEAGjq WzANBgkqhkiG9w0BAQsFAAOCAQEAXcS7V7eoV3DPxd1rAHiDcAw3WWmYDTM1/w7v U1VqujF9VjJpL4D+Kw3P3A8/lKGT2nlzGGrOzHgGeNLv/rGldLgm6iFK+s6Px8tU yTSMbq6zXFkag4H931NTorRxIym2SwYwF7M7+DGXALgLt5vmKOFYzlfOY5TJ4bGs QxhkjfopV+x/cYe2Oyg5XKbn7uo3uYQnBJ3L1dXmTSMXir0QGypBIdpPuDQTHnTy TH7Tx6+OGgIATXNvENL0tNGGeKTh8mtoMnZT7I8OYSQfSy8EWHfPsKAnu8W/fan5 5ofB0d4zcccBv3PqmLZD2HeM+t3abLksx6ZuZRqtxpfWM+FAhA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:23:54 2025 by rpki-client