$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa File: AS399641.roa (raw, json) Hash identifier: fILMJfT8Etxva7yiRz1IFW30d02nOAn9l8wjNnHJfhQ= Subject key identifier: 1F:42:61:51:00:E4:CF:52:C3:2B:93:64:AF:B1:67:C9:DB:D3:03:37 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 511E5E1903CB17CE69218734A0E7ACC39BA2C65D Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa Signing time: Fri 05 Sep 2025 21:29:45 +0000 ROA not before: Fri 05 Sep 2025 21:24:45 +0000 ROA not after: Fri 04 Sep 2026 21:29:45 +0000 asID: 399641 IP address blocks: 104.234.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:1e:5e:19:03:cb:17:ce:69:21:87:34:a0:e7:ac:c3:9b:a2:c6:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Sep 5 21:24:45 2025 GMT Not After : Sep 4 21:29:45 2026 GMT Subject: CN=1F42615100E4CF52C32B9364AFB167C9DBD30337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:30:6f:d8:cc:d2:ba:36:8e:19:fa:8a:c2: d8:d1:53:37:6e:42:67:18:44:ec:ae:db:81:ea:99: 90:ec:aa:1b:fc:0a:45:c2:37:d6:39:bb:f2:e8:c0: 64:d3:80:5e:7c:92:f2:af:3a:7e:40:98:45:0f:76: 7a:2b:28:d5:2d:4d:19:07:27:0e:6a:87:d0:e4:b1: e1:08:18:8c:89:cd:cb:1c:03:07:96:85:66:9f:cb: bc:fb:ed:30:ee:a0:90:bf:2b:a2:70:6a:f9:99:bf: dc:4b:75:71:2d:4e:92:d2:55:d2:a9:f4:9a:51:a7: 16:b4:bd:40:1e:ba:5e:9f:e7:0b:ee:c5:c8:cd:81: 1a:1d:1f:54:2e:0b:8d:ed:1a:6b:a6:ac:2c:0a:b8: 3e:31:d9:ec:6c:45:2d:66:d8:a2:dc:08:92:9e:bc: e9:73:88:e9:6e:20:9c:22:2a:f2:30:f8:70:2d:e0: 15:21:1b:8a:a9:da:fe:58:7a:60:d6:fb:2e:04:d1: ca:66:ab:96:45:5f:5a:60:c1:af:ac:d6:2c:1d:6c: da:1b:b5:26:e7:22:a8:28:db:3f:ec:56:38:4c:5c: 69:37:2c:f6:85:99:90:65:a4:fb:e5:10:d9:4d:36: d9:bd:98:02:8c:18:44:6f:d7:f3:29:63:1b:07:a8: 67:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:42:61:51:00:E4:CF:52:C3:2B:93:64:AF:B1:67:C9:DB:D3:03:37 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399641.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.22.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f0:74:c2:93:d5:5f:be:c5:88:6c:ff:bf:29:1d:55:fe:f3: 96:9f:dd:ea:7d:e9:9e:41:9b:71:8d:93:b6:9d:33:48:2b:1a: 1b:9d:e1:1e:54:b1:42:63:af:d0:ea:94:42:f1:6e:af:74:7a: 91:8e:d5:39:4b:bd:5b:26:fa:0d:3f:f6:8b:91:7a:42:ca:84: d7:be:5b:a8:19:e7:13:7b:37:5c:90:1d:78:a5:40:39:19:1b: e4:c5:82:a0:b3:69:02:0a:01:23:18:17:3a:c9:4a:c8:de:40: 15:7c:98:cb:56:26:67:11:29:c6:ef:a3:86:69:f4:e1:ef:0b: 50:63:e6:fd:d9:15:23:70:79:2c:5a:9e:91:0e:1e:ab:40:7b: 78:18:8e:2e:dc:8e:c5:d6:b0:cc:6c:77:43:f3:51:fb:f0:90: c6:48:ea:a7:27:70:b5:6a:de:5c:d8:22:81:d9:dc:30:f2:87: da:cc:be:c0:92:fc:f5:5b:2e:8d:6a:aa:38:6b:69:ed:80:c1: 17:ff:23:ed:c0:49:12:52:b1:d2:fc:44:c1:04:1e:3f:1a:af: 66:65:61:34:db:d9:03:56:9e:70:6f:1b:96:dd:bb:08:8f:f1: 06:10:57:85:4b:b6:55:5a:21:a6:d0:1e:73:38:dd:17:c8:9d: 01:bc:57:c6 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUUR5eGQPLF85pIYc0oOesw5uixl0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwOTA1MjEyNDQ1WhcNMjYwOTA0MjEyOTQ1 WjAzMTEwLwYDVQQDEygxRjQyNjE1MTAwRTRDRjUyQzMyQjkzNjRBRkIxNjdDOURC RDMwMzM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBEwb9jM0ro2 jhn6isLY0VM3bkJnGETsrtuB6pmQ7Kob/ApFwjfWObvy6MBk04BefJLyrzp+QJhF D3Z6KyjVLU0ZBycOaofQ5LHhCBiMic3LHAMHloVmn8u8++0w7qCQvyuicGr5mb/c S3VxLU6S0lXSqfSaUacWtL1AHrpen+cL7sXIzYEaHR9ULguN7RprpqwsCrg+Mdns bEUtZtii3AiSnrzpc4jpbiCcIiryMPhwLeAVIRuKqdr+WHpg1vsuBNHKZquWRV9a YMGvrNYsHWzaG7Um5yKoKNs/7FY4TFxpNyz2hZmQZaT75RDZTTbZvZgCjBhEb9fz KWMbB6hnFQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFB9CYVEA5M9SwyuTZK+xZ8nb 0wM3MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5OTY0MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqFjANBgkqhkiG9w0BAQsFAAOC AQEASPB0wpPVX77FiGz/vykdVf7zlp/d6n3pnkGbcY2Ttp0zSCsaG53hHlSxQmOv 0OqUQvFur3R6kY7VOUu9Wyb6DT/2i5F6QsqE175bqBnnE3s3XJAdeKVAORkb5MWC oLNpAgoBIxgXOslKyN5AFXyYy1YmZxEpxu+jhmn04e8LUGPm/dkVI3B5LFqekQ4e q0B7eBiOLtyOxdawzGx3Q/NR+/CQxkjqpydwtWreXNgigdncMPKH2sy+wJL89Vsu jWqqOGtp7YDBF/8j7cBJElKx0vxEwQQePxqvZmVhNNvZA1aecG8blt27CI/xBhBX hUu2VVohptAeczjdF8idAbxXxg== -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:20 2025 by rpki-client