$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402061.roa File: AS402061.roa (raw, json) Hash identifier: tLVtJ67VMuqQQZU+Mj83d897r1JuNkGGjDR7Zzmtr+U= Subject key identifier: 24:00:CE:99:4B:09:20:9B:29:99:8D:7F:F6:D7:DE:74:7C:82:7D:89 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0FF8DFEE44C16C89F9DE0FF8A1276E8BDB85041B Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402061.roa Signing time: Tue 04 Nov 2025 20:00:42 +0000 ROA not before: Tue 04 Nov 2025 19:55:42 +0000 ROA not after: Tue 03 Nov 2026 20:00:42 +0000 asID: 402061 IP address blocks: 104.234.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f8:df:ee:44:c1:6c:89:f9:de:0f:f8:a1:27:6e:8b:db:85:04:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 4 19:55:42 2025 GMT Not After : Nov 3 20:00:42 2026 GMT Subject: CN=2400CE994B09209B29998D7FF6D7DE747C827D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:09:a8:ac:37:50:2d:fa:73:a8:29:ba:fd:60: cc:eb:0a:1c:87:8c:23:2d:a5:ca:cf:94:64:c9:6c: f3:73:fd:a3:69:17:0b:55:91:77:1b:30:1a:b6:dc: dc:ce:cf:cc:5d:fc:de:7c:f0:24:7a:8c:66:8d:e3: b4:9b:40:9a:88:3a:d9:8b:3c:47:3c:f9:08:c1:74: ec:5b:95:ca:a5:65:06:51:4f:6d:63:fc:da:1e:ed: 25:bd:fa:73:1a:ea:93:91:14:fb:0a:0e:0b:d6:c0: bc:2a:73:4a:ef:2c:bc:30:db:dc:37:0e:e5:7f:11: 44:ac:7a:92:bc:d7:3e:3d:9f:3d:e9:6e:73:51:bf: f0:23:f8:aa:a4:19:8b:56:46:4e:f9:b0:59:6b:6d: ed:c5:fb:02:e9:c1:6e:5a:04:bb:fa:51:17:c1:58: ad:9a:89:43:8e:9a:b3:d8:e5:2c:79:68:30:a5:35: 13:73:5b:d4:42:c8:8b:cc:44:ac:e8:f5:d7:d2:22: 83:f3:fb:1b:b4:6b:83:e6:72:3f:9b:d6:d0:e9:f6: 33:21:a1:29:7a:9b:e0:f9:57:ef:58:6c:64:1d:02: 60:63:41:f7:54:6c:3c:60:5a:63:9d:d3:5f:99:d1: 3c:3f:71:a3:2f:bc:bb:9f:64:51:37:44:4b:d4:9e: 4b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:00:CE:99:4B:09:20:9B:29:99:8D:7F:F6:D7:DE:74:7C:82:7D:89 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS402061.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.177.0/24 Signature Algorithm: sha256WithRSAEncryption 58:66:8f:97:dc:c0:2c:06:ae:42:16:eb:91:7a:25:ae:a9:f6: af:aa:15:2b:1c:95:73:56:1e:8e:d7:1c:f4:a7:50:e7:21:e6: a7:42:4b:8d:1a:9a:37:4f:f5:53:4b:26:6a:0b:66:97:93:12: 89:be:c7:98:a4:43:ff:f4:25:81:b6:6e:fc:d6:fc:d7:23:96: f5:94:b8:fd:2c:f3:2b:6b:34:a0:ed:81:94:67:af:c8:7a:f3: c2:1a:6a:d7:a2:9a:a2:db:1c:7b:ea:de:0d:4b:a2:b0:2e:7a: 31:26:fd:2c:28:f3:e0:3f:2f:5d:c1:d9:11:bf:65:a5:5a:83: 7d:03:13:65:76:4f:4a:47:27:ac:88:61:50:a7:82:75:3e:28: 0b:16:44:82:1b:ff:25:42:a7:15:9f:fa:86:b2:d5:07:c2:09: 42:72:94:39:f3:2c:65:30:98:26:e2:d2:6f:51:3c:ec:8f:1d: 4f:05:71:ac:e9:58:12:ab:3a:81:6e:e8:b0:40:89:7d:6b:c0: 29:e4:41:8e:e2:ae:ed:f9:1a:cd:7f:cf:b9:12:bf:ab:ef:67: 63:ff:7a:99:e5:22:9b:76:5c:83:82:16:9a:73:26:cb:36:b2: 46:eb:ee:cc:a0:a5:4d:82:20:a7:19:82:2d:90:aa:58:04:42: e1:9a:56:57 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUD/jf7kTBbIn53g/4oSdui9uFBBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTA0MTk1NTQyWhcNMjYxMTAzMjAwMDQy WjAzMTEwLwYDVQQDEygyNDAwQ0U5OTRCMDkyMDlCMjk5OThEN0ZGNkQ3REU3NDdD ODI3RDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAmorDdQLfpz qCm6/WDM6woch4wjLaXKz5RkyWzzc/2jaRcLVZF3GzAattzczs/MXfzefPAkeoxm jeO0m0CaiDrZizxHPPkIwXTsW5XKpWUGUU9tY/zaHu0lvfpzGuqTkRT7Cg4L1sC8 KnNK7yy8MNvcNw7lfxFErHqSvNc+PZ896W5zUb/wI/iqpBmLVkZO+bBZa23txfsC 6cFuWgS7+lEXwVitmolDjpqz2OUseWgwpTUTc1vUQsiLzESs6PXX0iKD8/sbtGuD 5nI/m9bQ6fYzIaEpepvg+VfvWGxkHQJgY0H3VGw8YFpjndNfmdE8P3GjL7y7n2RR N0RL1J5LdQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFCQAzplLCSCbKZmNf/bX3nR8 gn2JMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMjA2MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqsTANBgkqhkiG9w0BAQsFAAOC AQEAWGaPl9zALAauQhbrkXolrqn2r6oVKxyVc1Yejtcc9KdQ5yHmp0JLjRqaN0/1 U0smagtml5MSib7HmKRD//QlgbZu/Nb81yOW9ZS4/SzzK2s0oO2BlGevyHrzwhpq 16Kaotsce+reDUuisC56MSb9LCjz4D8vXcHZEb9lpVqDfQMTZXZPSkcnrIhhUKeC dT4oCxZEghv/JUKnFZ/6hrLVB8IJQnKUOfMsZTCYJuLSb1E87I8dTwVxrOlYEqs6 gW7osECJfWvAKeRBjuKu7fkazX/PuRK/q+9nY/96meUim3Zcg4IWmnMmyzayRuvu zKClTYIgpxmCLZCqWARC4ZpWVw== -----END CERTIFICATE-----Generated at Fri Nov 7 12:37:33 2025 by rpki-client