$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa File: AS400039.roa (raw, json) Hash identifier: dEOJWuo9lTDE+NBkhO5KmkfX7O6lseWHII9JCjyWYB8= Subject key identifier: F5:1C:34:44:49:AA:63:6C:44:FC:1C:22:AB:B4:96:27:B0:BE:72:CD Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 237E54A4DC2296CF7F6499E5C8F68A3E0C62D4B4 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa Signing time: Wed 22 Oct 2025 19:30:39 +0000 ROA not before: Wed 22 Oct 2025 19:25:39 +0000 ROA not after: Wed 21 Oct 2026 19:30:39 +0000 asID: 400039 IP address blocks: 104.234.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:7e:54:a4:dc:22:96:cf:7f:64:99:e5:c8:f6:8a:3e:0c:62:d4:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 22 19:25:39 2025 GMT Not After : Oct 21 19:30:39 2026 GMT Subject: CN=F51C344449AA636C44FC1C22ABB49627B0BE72CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4b:75:3a:34:d7:9b:88:0c:aa:bb:2a:e3:4a: 36:d1:f7:eb:ab:e0:c9:e8:a1:2b:13:5f:6d:1d:8b: ee:45:ba:c6:7c:f2:02:9d:2b:f0:07:61:e9:08:18: 30:f9:6e:9c:eb:fa:43:84:fe:cf:72:11:2e:cf:9f: fb:5c:d7:95:c6:d6:4f:7d:96:f9:a0:2d:12:9d:a4: d4:15:7a:b7:6c:6c:53:31:30:94:c0:b6:75:4e:9e: 00:71:a7:23:70:6a:e0:5c:86:2d:7d:c5:65:37:ec: 67:0d:8f:db:31:09:60:6f:a1:65:d9:0b:c6:ef:61: a7:bf:de:0f:b4:83:64:ce:bd:4c:2f:ec:7f:10:df: a1:6d:72:86:4d:79:c5:b2:4c:cf:97:22:0d:81:3a: 7e:14:91:08:38:c2:ae:58:96:77:41:a4:eb:4e:98: fd:a0:87:73:86:5c:e8:bf:a8:2f:4e:b2:ab:c5:f5: f7:9b:5d:1c:12:3d:12:0e:64:e7:6f:1b:bd:1d:a3: 55:ff:8f:93:64:04:0a:e4:7a:26:71:3c:f9:2b:8a: 7a:7f:5f:d1:46:15:f6:48:fe:8d:ab:8e:72:4b:3a: 43:9f:cf:b9:c5:c7:b0:22:6b:60:1f:c2:76:74:d4: ac:65:84:9c:f9:a2:b2:3e:ac:5f:d8:ca:69:c5:45: 58:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1C:34:44:49:AA:63:6C:44:FC:1C:22:AB:B4:96:27:B0:BE:72:CD X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.210.0/24 Signature Algorithm: sha256WithRSAEncryption b5:e0:8b:05:1c:ac:56:4b:a7:7a:56:a5:61:04:fb:a8:fa:fc: b2:ee:e4:95:7e:ea:8b:1d:f2:0a:d1:21:10:37:4a:d3:a8:48: a0:25:7f:53:8f:94:08:3d:9b:d9:98:10:8a:7c:76:75:56:0a: d0:03:68:39:c7:6f:c7:d5:6c:df:c2:0f:f7:58:28:94:a5:42: 02:9c:56:18:6b:a8:e3:0c:0a:8c:f8:12:e8:40:21:e4:60:ed: ee:fc:0f:59:c1:61:7e:9b:25:9c:5f:f4:de:cc:28:47:65:0b: f0:6d:5c:2a:dd:60:0d:9e:53:56:99:91:77:66:a8:b7:7a:4e: 90:bc:8b:2b:8d:1e:1a:2c:46:ef:54:82:2e:af:ce:08:e6:e7: 05:51:81:72:cf:59:b7:28:07:59:93:23:30:6c:42:48:42:b6: f6:e6:4c:bc:c1:88:1a:d8:e8:aa:5b:4d:5b:9e:0d:2b:9c:69: 44:a6:9f:28:f7:4c:f3:6e:81:bb:2f:1b:13:fe:32:26:39:23: f7:8d:ec:42:99:14:f7:e8:1f:26:0c:86:3c:8c:51:6e:d2:02: 99:b5:08:64:82:a3:10:93:5c:ca:9a:a6:7d:39:b8:47:f0:a8: 92:14:0e:64:50:f8:d1:ac:6a:72:52:9b:bf:17:1c:aa:64:6a: f2:d2:5e:97 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUI35UpNwils9/ZJnlyPaKPgxi1LQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDIyMTkyNTM5WhcNMjYxMDIxMTkzMDM5 WjAzMTEwLwYDVQQDEyhGNTFDMzQ0NDQ5QUE2MzZDNDRGQzFDMjJBQkI0OTYyN0Iw QkU3MkNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUt1OjTXm4gM qrsq40o20ffrq+DJ6KErE19tHYvuRbrGfPICnSvwB2HpCBgw+W6c6/pDhP7PchEu z5/7XNeVxtZPfZb5oC0SnaTUFXq3bGxTMTCUwLZ1Tp4AcacjcGrgXIYtfcVlN+xn DY/bMQlgb6Fl2QvG72Gnv94PtINkzr1ML+x/EN+hbXKGTXnFskzPlyINgTp+FJEI OMKuWJZ3QaTrTpj9oIdzhlzov6gvTrKrxfX3m10cEj0SDmTnbxu9HaNV/4+TZAQK 5HomcTz5K4p6f1/RRhX2SP6Nq45ySzpDn8+5xcewImtgH8J2dNSsZYSc+aKyPqxf 2MppxUVYEQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFPUcNERJqmNsRPwcIqu0liew vnLNMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjq0jANBgkqhkiG9w0BAQsFAAOC AQEAteCLBRysVkunelalYQT7qPr8su7klX7qix3yCtEhEDdK06hIoCV/U4+UCD2b 2ZgQinx2dVYK0ANoOcdvx9Vs38IP91golKVCApxWGGuo4wwKjPgS6EAh5GDt7vwP WcFhfpslnF/03swoR2UL8G1cKt1gDZ5TVpmRd2aot3pOkLyLK40eGixG71SCLq/O CObnBVGBcs9ZtygHWZMjMGxCSEK29uZMvMGIGtjoqltNW54NK5xpRKafKPdM826B uy8bE/4yJjkj943sQpkU9+gfJgyGPIxRbtICmbUIZIKjEJNcypqmfTm4R/CokhQO ZFD40axqclKbvxccqmRq8tJelw== -----END CERTIFICATE-----Generated at Tue Nov 4 19:30:22 2025 by rpki-client