$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa File: AS397423.roa (raw, json) Hash identifier: V6YAfsrqDaC7r1WiBLUj+11uCJiQHDIXvkPq4E3G+rw= Subject key identifier: 2C:20:E6:04:49:6B:64:EF:AC:51:A2:CC:59:14:FB:9B:F6:D9:3D:CF Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7D2C2A2329B7507D9E2051DF08D36CEFD970AFC1 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa Signing time: Wed 21 Oct 2026 16:22:45 +0000 ROA not before: Wed 21 Oct 2026 16:17:45 +0000 ROA not after: Wed 20 Oct 2027 16:22:45 +0000 asID: 397423 IP address blocks: 104.234.66.0/24 maxlen: 24 104.234.99.0/24 maxlen: 24 104.234.134.0/24 maxlen: 24 104.234.195.0/24 maxlen: 24 104.234.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 01:40:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:2c:2a:23:29:b7:50:7d:9e:20:51:df:08:d3:6c:ef:d9:70:af:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 21 16:17:45 2026 GMT Not After : Oct 20 16:22:45 2027 GMT Subject: CN=2C20E604496B64EFAC51A2CC5914FB9BF6D93DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d0:2d:b7:59:08:1f:f9:e0:1b:9d:77:5b:30: 82:10:c3:1d:60:f6:24:15:02:b4:06:cd:c8:ef:45: 98:73:d7:03:28:01:97:fe:42:30:8c:6f:8e:88:71: 0a:4a:28:d5:ff:73:87:ed:9d:db:b8:f0:a5:8a:86: 00:49:f2:36:32:d3:a1:c4:57:48:04:b7:dd:36:e5: 3f:94:8d:e9:08:2f:42:f0:4a:f9:92:20:89:26:eb: 99:62:8c:76:33:25:d6:70:48:91:94:01:46:21:77: be:1d:8a:f8:f6:25:66:b0:bb:ee:8f:6b:05:34:c0: c6:83:9c:2d:23:61:52:0a:c6:5b:91:ef:8f:46:51: b2:81:af:49:eb:b4:0e:98:54:6f:62:1b:23:8c:c3: 4f:26:c4:80:be:a8:cf:50:7d:7d:5c:2e:66:d8:be: c0:0b:14:37:12:75:74:ad:9c:38:11:bc:02:02:a8: 4b:40:3c:fa:68:87:9d:83:a3:0e:2f:eb:a1:fb:e0: e3:11:f9:96:5f:93:f3:e3:9d:46:f6:bc:41:cd:f6: ff:4e:5a:55:92:f3:91:16:a8:e3:dd:ea:ef:fc:e4: f5:a1:ee:ab:66:58:39:67:5b:a4:e7:74:2e:ae:b4: f9:96:b9:fe:67:80:c1:0c:46:3d:e6:49:e8:99:bc: 06:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:20:E6:04:49:6B:64:EF:AC:51:A2:CC:59:14:FB:9B:F6:D9:3D:CF X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS397423.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.66.0/24 104.234.99.0/24 104.234.134.0/24 104.234.195.0/24 104.234.217.0/24 Signature Algorithm: sha256WithRSAEncryption 97:57:26:0d:fb:5d:35:ee:79:96:6b:8a:47:5d:25:5c:a2:0a: c3:36:20:a7:22:5d:46:6c:46:dc:56:75:fa:36:1a:d2:06:2f: ab:ff:18:76:52:5e:e7:ba:49:48:a0:b0:f3:ee:cc:7e:39:35: f1:3c:25:68:57:c3:f4:28:c9:c7:2e:c3:04:ba:de:8e:27:8b: 40:fb:4b:43:76:0b:ad:8c:a7:5a:fa:56:88:da:03:a2:08:c0: 62:85:73:89:5f:68:f9:3a:10:2d:ed:5d:9e:c0:05:06:76:4e: 95:e7:2f:0c:d8:93:c0:16:e1:2e:84:9b:d3:61:e2:3e:46:f0: 0b:09:fb:a9:9c:51:85:94:9e:51:d9:d4:d6:ef:11:c1:e9:cd: c5:10:ea:14:29:e5:d3:22:b4:bb:61:52:f0:fd:d5:53:52:63: 17:41:fc:48:4d:c4:22:2c:96:05:bb:60:04:6b:c9:40:6b:a4: 2b:f4:2f:ef:64:b7:4f:aa:3a:5f:65:28:52:5c:95:33:7d:90: 10:22:dc:41:79:6d:9a:fc:0f:03:0c:8d:e6:e8:9b:8c:cc:27: 68:3b:f4:47:d3:4f:b4:19:b0:d3:87:33:ab:01:8e:6d:4c:0f: d5:63:87:0e:cb:b8:0c:39:11:7e:d5:74:45:4d:ab:13:ae:97: d5:94:1f:a9 -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUfSwqIym3UH2eIFHfCNNs79lwr8EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDIxMTYxNzQ1WhcNMjcxMDIwMTYyMjQ1 WjAzMTEwLwYDVQQDEygyQzIwRTYwNDQ5NkI2NEVGQUM1MUEyQ0M1OTE0RkI5QkY2 RDkzRENGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NAtt1kIH/ng G513WzCCEMMdYPYkFQK0Bs3I70WYc9cDKAGX/kIwjG+OiHEKSijV/3OH7Z3buPCl ioYASfI2MtOhxFdIBLfdNuU/lI3pCC9C8Er5kiCJJuuZYox2MyXWcEiRlAFGIXe+ HYr49iVmsLvuj2sFNMDGg5wtI2FSCsZbke+PRlGyga9J67QOmFRvYhsjjMNPJsSA vqjPUH19XC5m2L7ACxQ3EnV0rZw4EbwCAqhLQDz6aIedg6MOL+uh++DjEfmWX5Pz 451G9rxBzfb/TlpVkvORFqjj3erv/OT1oe6rZlg5Z1uk53QurrT5lrn+Z4DBDEY9 5knombwG7wIDAQABo4IClzCCApMwHQYDVR0OBBYEFCwg5gRJa2TvrFGizFkU+5v2 2T3PMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NzQyMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAGjqQgMEAGjqYwMEAGjqhgMEAGjq wwMEAGjq2TANBgkqhkiG9w0BAQsFAAOCAQEAl1cmDftdNe55lmuKR10lXKIKwzYg pyJdRmxG3FZ1+jYa0gYvq/8YdlJe57pJSKCw8+7Mfjk18TwlaFfD9CjJxy7DBLre jieLQPtLQ3YLrYynWvpWiNoDogjAYoVziV9o+ToQLe1dnsAFBnZOlecvDNiTwBbh LoSb02HiPkbwCwn7qZxRhZSeUdnU1u8RwenNxRDqFCnl0yK0u2FS8P3VU1JjF0H8 SE3EIiyWBbtgBGvJQGukK/Qv72S3T6o6X2UoUlyVM32QECLcQXltmvwPAwyN5uib jMwnaDv0R9NPtBmw04czqwGObUwP1WOHDsu4DDkRftV0RU2rE66X1ZQfqQ== -----END CERTIFICATE-----Generated at Thu Nov 5 04:58:51 2026 by rpki-client