$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: Lnbfdq4cQa4+pHzCdwfbShkEW9vLVX8AtMCrPGOGl2A= Subject key identifier: 6B:6A:B7:59:24:C3:71:65:DC:41:8D:0D:67:3C:88:D6:AF:F6:0C:99 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1A001927D332F344A44C3AB87E4D17AE05990740 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa Signing time: Mon 03 Nov 2025 17:30:39 +0000 ROA not before: Mon 03 Nov 2025 17:25:39 +0000 ROA not after: Mon 02 Nov 2026 17:30:39 +0000 asID: 400909 IP address blocks: 104.234.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:00:19:27:d3:32:f3:44:a4:4c:3a:b8:7e:4d:17:ae:05:99:07:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 3 17:25:39 2025 GMT Not After : Nov 2 17:30:39 2026 GMT Subject: CN=6B6AB75924C37165DC418D0D673C88D6AFF60C99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3c:ab:90:44:6b:33:da:cb:8c:1d:4a:ce:fe: 19:bd:e4:9b:76:14:6c:63:c2:d8:80:6a:ab:30:26: 80:0a:b9:46:41:4d:08:f2:99:1e:c3:a0:8b:40:c6: 91:c4:07:ca:35:6e:d3:eb:29:05:0f:dd:cb:fa:81: 98:98:93:36:0e:56:f1:ff:74:66:5d:96:d3:d7:4e: 88:36:01:07:c0:47:a2:26:6a:58:d9:ac:f0:1e:3e: ed:67:fd:e3:f0:45:2d:4a:78:98:2b:98:fe:9c:eb: 4e:db:0c:10:26:72:97:4b:5b:05:40:ea:82:3a:e8: 66:c1:c3:1c:2d:7f:59:96:7e:40:83:5b:0c:98:f9: fa:84:35:70:44:4f:26:50:de:f6:1f:2b:cc:2d:53: 8a:fd:3e:1f:92:d3:13:fc:b3:96:de:db:ad:5b:85: 41:86:6a:bf:d4:cd:e3:b6:95:c2:62:a0:c8:1c:6f: 5d:f1:91:5c:8e:f7:bb:fd:cb:82:0f:8a:2c:66:a9: 42:82:c9:35:f1:59:3c:f2:77:89:38:b2:63:8a:18: e6:e7:b5:2f:3c:9f:5a:52:6c:c2:d6:c7:64:99:90: 9d:05:7c:06:eb:10:48:77:28:db:07:76:9d:b2:b7: a8:ff:42:0d:a7:86:fe:29:c7:4f:38:f5:85:07:26: 66:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6A:B7:59:24:C3:71:65:DC:41:8D:0D:67:3C:88:D6:AF:F6:0C:99 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.127.0/24 Signature Algorithm: sha256WithRSAEncryption 75:58:25:1b:3f:8a:1a:a0:09:d6:cd:14:e6:b2:c9:59:01:5e: ef:fa:48:4e:a5:04:69:3b:0c:f9:f1:a4:82:41:f0:fe:e1:f5: 8c:f0:19:d4:da:a0:90:47:4f:48:f1:aa:f2:5c:28:8b:c5:b2: 1e:ff:14:40:49:b3:30:07:64:82:87:d7:ab:7a:38:21:78:79: 7b:60:8a:ef:d3:27:6d:6a:2e:78:09:90:d9:3d:3b:a3:27:f0: 17:84:45:c1:40:1a:cd:54:d3:49:b9:f6:41:db:26:69:f7:df: 73:ac:27:6f:98:94:db:ce:f5:f8:8a:e5:12:92:79:8c:52:40: 81:28:0e:ad:e5:f3:0c:ff:e5:70:79:c9:a0:0f:bf:7a:cf:6c: 16:f7:d4:55:04:a4:c9:75:31:c0:16:4c:83:3d:79:3a:57:fe: bd:2e:b2:75:0f:e7:ed:37:9e:de:74:7d:f3:1e:cf:f4:da:0c: fa:2d:0c:21:55:e8:ac:79:ac:a0:cf:82:f1:ca:ae:54:1a:44: 17:c7:02:30:e7:ac:04:6f:42:b8:a2:b7:31:20:1a:13:3a:dd: b2:3c:36:76:8f:03:e6:0b:6c:86:d0:9d:83:b9:8b:f2:85:a3: b3:71:45:eb:57:ee:b8:76:64:17:8b:e2:12:73:c8:55:7e:1c: 6d:51:1d:b5 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUGgAZJ9My80SkTDq4fk0XrgWZB0AwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTAzMTcyNTM5WhcNMjYxMTAyMTczMDM5 WjAzMTEwLwYDVQQDEyg2QjZBQjc1OTI0QzM3MTY1REM0MThEMEQ2NzNDODhENkFG RjYwQzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjyrkERrM9rL jB1Kzv4ZveSbdhRsY8LYgGqrMCaACrlGQU0I8pkew6CLQMaRxAfKNW7T6ykFD93L +oGYmJM2Dlbx/3RmXZbT106INgEHwEeiJmpY2azwHj7tZ/3j8EUtSniYK5j+nOtO 2wwQJnKXS1sFQOqCOuhmwcMcLX9Zln5Ag1sMmPn6hDVwRE8mUN72HyvMLVOK/T4f ktMT/LOW3tutW4VBhmq/1M3jtpXCYqDIHG9d8ZFcjve7/cuCD4osZqlCgsk18Vk8 8neJOLJjihjm57UvPJ9aUmzC1sdkmZCdBXwG6xBIdyjbB3adsreo/0INp4b+KcdP OPWFByZmYwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFGtqt1kkw3Fl3EGNDWc8iNav 9gyZMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqfzANBgkqhkiG9w0BAQsFAAOC AQEAdVglGz+KGqAJ1s0U5rLJWQFe7/pITqUEaTsM+fGkgkHw/uH1jPAZ1NqgkEdP SPGq8lwoi8WyHv8UQEmzMAdkgofXq3o4IXh5e2CK79MnbWoueAmQ2T07oyfwF4RF wUAazVTTSbn2Qdsmafffc6wnb5iU2871+IrlEpJ5jFJAgSgOreXzDP/lcHnJoA+/ es9sFvfUVQSkyXUxwBZMgz15Olf+vS6ydQ/n7Tee3nR98x7P9NoM+i0MIVXorHms oM+C8cquVBpEF8cCMOesBG9CuKK3MSAaEzrdsjw2do8D5gtshtCdg7mL8oWjs3FF 61fuuHZkF4viEnPIVX4cbVEdtQ== -----END CERTIFICATE-----Generated at Tue Nov 4 19:29:01 2025 by rpki-client