$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa File: AS401443.roa (raw, json) Hash identifier: UsTG/Q8nwyCFSkuSY9A3xz/E1UIlWUOUByIoPPAO8+A= Subject key identifier: 12:53:D2:D4:91:8F:69:3F:3E:71:C3:31:A6:52:31:53:AC:26:DC:21 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 4156C132F616D048FD66E83D0161AFC0F51B5633 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa Signing time: Thu 09 Oct 2025 13:08:22 +0000 ROA not before: Thu 09 Oct 2025 13:03:22 +0000 ROA not after: Thu 08 Oct 2026 13:08:22 +0000 asID: 401443 IP address blocks: 104.234.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:56:c1:32:f6:16:d0:48:fd:66:e8:3d:01:61:af:c0:f5:1b:56:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 9 13:03:22 2025 GMT Not After : Oct 8 13:08:22 2026 GMT Subject: CN=1253D2D4918F693F3E71C331A6523153AC26DC21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:70:61:41:4f:e7:8b:e5:7e:6e:ce:4d:46:76: dd:3e:93:f3:62:59:76:f0:88:78:b9:db:ff:8f:09: 24:23:c2:32:30:ee:e8:46:a5:2a:e5:70:27:7a:61: ec:1b:b0:18:45:88:18:35:b8:2b:65:32:e5:75:aa: c2:09:04:62:fe:0d:e7:e8:c9:52:32:a7:9a:0a:6d: 6d:4b:4e:7a:0d:dd:f6:02:78:cd:6b:75:b3:1a:25: 99:8a:86:fd:02:f3:1e:a4:f6:21:4d:6b:50:a3:5d: 85:a7:f1:ca:7a:48:6a:34:9d:ba:a5:7d:55:15:1c: 6a:27:20:6b:52:68:09:2a:2f:b9:d7:58:fc:f0:24: be:2a:7c:db:df:47:09:c3:7a:9b:cf:a0:a5:57:2b: 76:81:4c:9c:cb:1b:01:5d:57:1d:43:37:89:2d:a9: 1c:90:a2:ce:ce:50:37:cb:6c:ff:76:1c:86:66:4a: 75:c5:e5:30:93:db:a7:ee:07:bd:ff:b2:22:e9:f0: c4:11:6f:80:48:58:6d:a1:6b:20:0a:42:75:53:14: 3a:86:de:b7:c8:b7:5c:2f:b3:77:8c:97:76:43:e7: 96:46:ed:cb:33:60:42:2d:c3:05:be:a0:3a:aa:ed: f0:a9:c3:3b:d6:e8:b4:5a:5f:59:9d:71:09:9a:c0: a7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:53:D2:D4:91:8F:69:3F:3E:71:C3:31:A6:52:31:53:AC:26:DC:21 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401443.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.0.0/24 Signature Algorithm: sha256WithRSAEncryption be:eb:21:19:2c:78:d3:71:4e:5b:52:4e:30:3a:70:8f:30:24: cd:db:a4:4a:f5:13:ff:da:ea:1f:c0:af:db:ed:b7:96:b0:e8: 03:64:2d:9d:88:63:d2:55:bf:65:aa:8d:75:57:03:d0:22:b6: 2f:5d:42:90:b1:2f:69:8b:a5:e4:6d:11:23:8f:ac:98:94:0e: 06:56:90:88:01:08:cc:38:6e:16:72:2b:dc:be:7c:74:ee:3a: 14:f9:fa:0e:b2:bc:d0:86:b0:61:cb:c9:04:e7:03:2a:b0:15: 34:ce:35:15:5c:5d:b1:8f:af:f8:67:0f:b2:94:f7:e4:73:34: 32:cb:ab:32:50:10:61:7f:ff:3c:1f:b0:b2:26:12:39:d1:9e: 87:92:e3:94:9c:35:a5:9c:56:e6:b4:3f:0f:96:a1:c3:d1:37: 58:d7:e6:9c:87:97:95:92:b4:fb:c1:4c:a0:8f:40:12:3c:ac: b4:6e:40:2d:0f:8e:75:e7:60:f7:77:1f:4e:df:93:7e:e7:c6: 0b:c0:80:77:b0:d9:ac:94:a1:cd:16:42:e5:54:d1:a6:65:c0: 39:5e:41:26:3f:04:fc:88:08:e2:6b:35:cd:43:d1:9b:b6:28: 1b:b0:08:fc:58:d9:c0:8e:a8:39:30:ee:84:c6:77:d0:5c:7c: ba:25:f9:b0 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUQVbBMvYW0Ej9Zug9AWGvwPUbVjMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDA5MTMwMzIyWhcNMjYxMDA4MTMwODIy WjAzMTEwLwYDVQQDEygxMjUzRDJENDkxOEY2OTNGM0U3MUMzMzFBNjUyMzE1M0FD MjZEQzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnBhQU/ni+V+ bs5NRnbdPpPzYll28Ih4udv/jwkkI8IyMO7oRqUq5XAnemHsG7AYRYgYNbgrZTLl darCCQRi/g3n6MlSMqeaCm1tS056Dd32AnjNa3WzGiWZiob9AvMepPYhTWtQo12F p/HKekhqNJ26pX1VFRxqJyBrUmgJKi+511j88CS+Knzb30cJw3qbz6ClVyt2gUyc yxsBXVcdQzeJLakckKLOzlA3y2z/dhyGZkp1xeUwk9un7ge9/7Ii6fDEEW+ASFht oWsgCkJ1UxQ6ht63yLdcL7N3jJd2Q+eWRu3LM2BCLcMFvqA6qu3wqcM71ui0Wl9Z nXEJmsCnrwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFBJT0tSRj2k/PnHDMaZSMVOs JtwhMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTQ0My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqADANBgkqhkiG9w0BAQsFAAOC AQEAvushGSx403FOW1JOMDpwjzAkzdukSvUT/9rqH8Cv2+23lrDoA2QtnYhj0lW/ ZaqNdVcD0CK2L11CkLEvaYul5G0RI4+smJQOBlaQiAEIzDhuFnIr3L58dO46FPn6 DrK80IawYcvJBOcDKrAVNM41FVxdsY+v+GcPspT35HM0MsurMlAQYX//PB+wsiYS OdGeh5LjlJw1pZxW5rQ/D5ahw9E3WNfmnIeXlZK0+8FMoI9AEjystG5ALQ+Odedg 93cfTt+TfufGC8CAd7DZrJShzRZC5VTRpmXAOV5BJj8E/IgI4ms1zUPRm7YoG7AI /FjZwI6oOTDuhMZ30Fx8uiX5sA== -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:03 2025 by rpki-client