$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401838.roa File: AS401838.roa (raw, json) Hash identifier: zPLYp7GMrdHGPxEk3YSdEjIODLnBtUvOg9HHoqalpCk= Subject key identifier: 7F:7B:32:2F:B8:74:A3:9D:E3:CD:F4:08:FF:9A:EE:67:93:53:F0:6A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 47D31BA1E218CE6B67C7C8B158FF84391001391E Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401838.roa Signing time: Sun 12 Apr 2026 00:00:39 +0000 ROA not before: Sat 11 Apr 2026 23:55:39 +0000 ROA not after: Sun 11 Apr 2027 00:00:39 +0000 asID: 401838 IP address blocks: 104.234.9.0/24 maxlen: 24 104.234.82.0/24 maxlen: 24 104.234.88.0/24 maxlen: 24 206.53.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 09:33:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:d3:1b:a1:e2:18:ce:6b:67:c7:c8:b1:58:ff:84:39:10:01:39:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 11 23:55:39 2026 GMT Not After : Apr 11 00:00:39 2027 GMT Subject: CN=7F7B322FB874A39DE3CDF408FF9AEE679353F06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:50:e9:7a:60:cc:71:eb:d9:16:46:9c:a1: 80:bb:88:f3:c2:3b:37:c3:48:d6:9f:5d:18:f9:39: dd:9b:2e:e9:60:02:75:94:4f:bc:00:a0:95:6c:2d: b8:31:67:77:94:d0:98:ed:12:d5:e4:d1:0e:05:ce: b6:f0:47:e2:a8:4a:ac:3f:71:c1:a3:70:ae:26:a1: 04:13:af:41:4f:a3:18:44:6e:e0:5c:97:e5:80:41: 8b:b8:0a:c3:87:bb:38:03:51:22:25:39:b4:2d:c5: 51:19:f6:a8:c8:2d:86:30:e4:27:c5:14:1d:26:e3: 08:58:ab:6e:c2:e2:8b:00:db:73:ac:6a:00:b0:3c: f4:6b:6b:6e:d6:a2:9b:4a:de:ae:20:13:a7:e9:ad: 78:8c:1c:e2:3b:52:e4:29:7e:8f:0d:0c:6f:e3:c6: 22:5e:fb:d5:a2:02:1d:3c:f7:2c:17:fd:46:fd:51: 59:35:97:6b:8d:c6:bc:05:aa:f6:15:d5:63:93:84: 96:35:73:63:31:ba:3c:eb:16:82:b8:15:e4:f4:de: 2b:43:77:78:5b:0f:22:76:95:e6:75:46:37:44:82: 87:5b:bb:47:a2:b7:c6:bf:b8:90:c2:14:56:2d:f0: 2d:31:db:8e:b5:61:26:a1:6b:60:ab:f1:15:59:10: ef:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7B:32:2F:B8:74:A3:9D:E3:CD:F4:08:FF:9A:EE:67:93:53:F0:6A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS401838.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.9.0/24 104.234.82.0/24 104.234.88.0/24 206.53.57.0/24 Signature Algorithm: sha256WithRSAEncryption 74:79:ce:44:21:a9:bb:6f:ab:fa:d0:7c:27:f9:52:0b:ea:90: 8a:f4:cc:61:ee:b3:31:35:cb:d0:c2:d4:44:1e:4f:9c:65:89: 6d:24:59:fd:63:a8:9e:f1:74:82:3c:25:04:1a:ea:8d:8d:34: 6f:e4:27:8e:8c:43:59:06:9d:c3:e0:9f:df:bc:27:0d:40:b0: 15:79:ef:a8:bd:05:8b:bb:ee:a8:82:83:a7:10:25:d2:df:47: 16:7d:23:9a:73:6d:3e:91:e4:8e:8d:21:b2:66:cd:07:af:8c: 68:d0:6c:1c:58:63:70:94:e3:d4:6d:b7:78:36:af:7d:ba:a8: d3:19:f7:f6:4b:d0:36:95:89:4c:ba:34:d4:a4:51:ac:65:ed: 01:07:18:e4:48:75:3b:27:6e:ca:37:98:06:1d:f9:17:db:69: a5:c9:e5:f9:1f:1b:a5:bc:64:54:6a:fd:d3:6b:85:c6:6f:eb: 53:9b:7c:75:ee:93:6d:06:2f:2f:77:98:9b:35:4b:76:9b:4a: 4a:06:4a:45:a5:6d:08:e3:a2:33:37:10:a9:b8:0c:9a:42:0a: 2b:a0:d2:f1:98:c3:f5:95:b4:86:04:70:fa:8b:e3:bc:c6:ba: 5a:32:7c:6b:6c:d6:f4:19:57:01:d3:15:f2:e8:9a:5f:6a:e1: 7d:c6:d8:e7 -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUR9MboeIYzmtnx8ixWP+EORABOR4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDExMjM1NTM5WhcNMjcwNDExMDAwMDM5 WjAzMTEwLwYDVQQDEyg3RjdCMzIyRkI4NzRBMzlERTNDREY0MDhGRjlBRUU2Nzkz NTNGMDZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJBQ6XpgzHHr 2RZGnKGAu4jzwjs3w0jWn10Y+Tndmy7pYAJ1lE+8AKCVbC24MWd3lNCY7RLV5NEO Bc628EfiqEqsP3HBo3CuJqEEE69BT6MYRG7gXJflgEGLuArDh7s4A1EiJTm0LcVR GfaoyC2GMOQnxRQdJuMIWKtuwuKLANtzrGoAsDz0a2tu1qKbSt6uIBOn6a14jBzi O1LkKX6PDQxv48YiXvvVogIdPPcsF/1G/VFZNZdrjca8Bar2FdVjk4SWNXNjMbo8 6xaCuBXk9N4rQ3d4Ww8idpXmdUY3RIKHW7tHorfGv7iQwhRWLfAtMduOtWEmoWtg q/EVWRDvpQIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFH97Mi+4dKOd4830CP+a7meT U/BqMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMTgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqCQMEAGjqUgMEAGjqWAMEAM41 OTANBgkqhkiG9w0BAQsFAAOCAQEAdHnORCGpu2+r+tB8J/lSC+qQivTMYe6zMTXL 0MLURB5PnGWJbSRZ/WOonvF0gjwlBBrqjY00b+QnjoxDWQadw+Cf37wnDUCwFXnv qL0Fi7vuqIKDpxAl0t9HFn0jmnNtPpHkjo0hsmbNB6+MaNBsHFhjcJTj1G23eDav fbqo0xn39kvQNpWJTLo01KRRrGXtAQcY5Eh1OyduyjeYBh35F9tppcnl+R8bpbxk VGr902uFxm/rU5t8de6TbQYvL3eYmzVLdptKSgZKRaVtCOOiMzcQqbgMmkIKK6DS 8ZjD9ZW0hgRw+ovjvMa6WjJ8a2zW9BlXAdMV8uiaX2rhfcbY5w== -----END CERTIFICATE-----Generated at Fri Apr 17 12:13:03 2026 by rpki-client