$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa File: AS54339.roa (raw, json) Hash identifier: xr5qOWqumoYOz4I/g3rjOR8O1uGLhuvSJzOPgzyuI9M= Subject key identifier: D7:D1:26:EA:62:AE:5A:EC:46:89:E4:04:EC:B3:57:BD:A6:82:8F:37 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 71DB86F9FF8502C7A2DC719245B7F923DF85CA4B Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa Signing time: Wed 15 Apr 2026 12:35:57 +0000 ROA not before: Wed 15 Apr 2026 12:30:57 +0000 ROA not after: Wed 14 Apr 2027 12:35:57 +0000 asID: 54339 IP address blocks: 104.234.82.0/24 maxlen: 24 104.234.88.0/24 maxlen: 24 206.53.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 03:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:db:86:f9:ff:85:02:c7:a2:dc:71:92:45:b7:f9:23:df:85:ca:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Apr 15 12:30:57 2026 GMT Not After : Apr 14 12:35:57 2027 GMT Subject: CN=D7D126EA62AE5AEC4689E404ECB357BDA6828F37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:42:c8:d0:61:d4:24:eb:f6:7e:19:54:8a: 68:67:a9:56:51:35:05:4b:20:47:9e:85:e2:fc:90: a5:05:81:e2:ce:6e:8c:9a:b5:76:a1:a1:46:00:79: 5d:2c:43:c3:10:5d:3a:db:2c:a7:6c:98:8d:c5:d8: 8b:d0:b4:78:51:60:81:cb:60:01:c9:39:83:6b:76: f8:7c:66:f2:54:a2:36:ad:32:e5:2d:9c:2f:b3:84: b1:07:37:b6:02:d8:52:8f:06:8b:89:cb:79:9c:27: 64:56:07:d5:e3:7e:4f:1a:cf:74:de:e9:12:03:d9: c5:2d:71:26:83:ba:9e:0d:3d:c5:49:f7:b9:93:7e: 09:73:88:1c:40:b5:a5:51:71:67:59:bd:36:6d:a2: 95:c6:30:a9:63:df:39:26:3b:eb:e1:8a:25:f1:d5: 71:bd:87:a4:b0:9a:ed:75:32:c7:e1:31:03:17:0a: f4:5a:78:d1:bc:7e:dd:b1:4b:bf:93:63:e2:39:06: fb:55:23:41:71:c7:08:d2:96:bc:ba:00:29:7b:0d: f8:12:c8:e5:23:fb:be:7a:f5:ed:d0:4c:01:c4:27: b1:9e:b7:88:0f:69:b1:6a:c1:c8:0a:fd:40:05:36: 29:e5:fb:f5:6e:35:2d:f8:ec:cf:9e:f4:6b:09:ca: 32:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D1:26:EA:62:AE:5A:EC:46:89:E4:04:EC:B3:57:BD:A6:82:8F:37 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS54339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.82.0/24 104.234.88.0/24 206.53.57.0/24 Signature Algorithm: sha256WithRSAEncryption ab:2d:45:bd:b7:4e:1c:2d:52:2b:49:40:bd:f9:06:3f:a7:b9: 59:97:2f:ef:85:ac:64:8d:c3:50:c5:1c:e1:7c:53:ad:e1:d2: a6:b4:85:af:97:96:e9:2c:75:6b:a4:4a:50:9b:1a:fe:3f:af: 08:a3:67:70:e9:89:b8:e1:c6:e8:46:e9:0c:e6:52:08:ad:0a: e9:65:79:70:ba:a3:60:3f:78:d0:f6:30:fb:5c:28:29:26:cb: 89:a5:0c:c4:7f:7c:f7:58:05:0d:2a:6b:e7:68:c8:16:25:8e: 4b:82:c0:24:46:19:f7:0c:c0:a7:f7:b9:77:8f:25:54:f8:60: 67:0f:77:a8:48:e0:a4:94:dc:d3:15:21:f3:61:0f:6a:a7:19: ae:00:2c:73:c0:a9:06:e2:1f:9d:bf:c9:60:07:34:ec:7f:79: 6c:9d:35:93:dd:1e:64:8a:e1:15:60:c1:00:7e:c8:6c:fe:b9: db:d9:a2:17:53:5a:0c:a0:40:1e:bc:14:25:78:48:05:81:2a: 77:6d:c0:83:2f:f6:24:eb:fe:15:71:af:f4:09:9d:f2:a6:f4: ae:3d:fd:a4:3d:ca:4c:48:17:76:00:b3:1e:07:6e:0e:1d:67: 6f:83:01:d6:82:8e:ab:4c:1d:da:e5:ca:59:96:1e:19:df:40: a6:93:20:5b -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUcduG+f+FAsei3HGSRbf5I9+FykswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDE1MTIzMDU3WhcNMjcwNDE0MTIzNTU3 WjAzMTEwLwYDVQQDEyhEN0QxMjZFQTYyQUU1QUVDNDY4OUU0MDRFQ0IzNTdCREE2 ODI4RjM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCdCyNBh1CTr 9n4ZVIpoZ6lWUTUFSyBHnoXi/JClBYHizm6MmrV2oaFGAHldLEPDEF062yynbJiN xdiL0LR4UWCBy2AByTmDa3b4fGbyVKI2rTLlLZwvs4SxBze2AthSjwaLict5nCdk VgfV435PGs903ukSA9nFLXEmg7qeDT3FSfe5k34Jc4gcQLWlUXFnWb02baKVxjCp Y985Jjvr4Yol8dVxvYeksJrtdTLH4TEDFwr0WnjRvH7dsUu/k2PiOQb7VSNBcccI 0pa8ugApew34EsjlI/u+evXt0EwBxCexnreID2mxasHICv1ABTYp5fv1bjUt+OzP nvRrCcoyCwIDAQABo4ICijCCAoYwHQYDVR0OBBYEFNfRJupirlrsRonkBOyzV72m go83MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzU0MzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAaOpSAwQAaOpYAwQAzjU5MA0GCSqG SIb3DQEBCwUAA4IBAQCrLUW9t04cLVIrSUC9+QY/p7lZly/vhaxkjcNQxRzhfFOt 4dKmtIWvl5bpLHVrpEpQmxr+P68Io2dw6Ym44cboRukM5lIIrQrpZXlwuqNgP3jQ 9jD7XCgpJsuJpQzEf3z3WAUNKmvnaMgWJY5LgsAkRhn3DMCn97l3jyVU+GBnD3eo SOCklNzTFSHzYQ9qpxmuACxzwKkG4h+dv8lgBzTsf3lsnTWT3R5kiuEVYMEAfshs /rnb2aIXU1oMoEAevBQleEgFgSp3bcCDL/Yk6/4Vca/0CZ3ypvSuPf2kPcpMSBd2 ALMeB24OHWdvgwHWgo6rTB3a5cpZlh4Z30CmkyBb -----END CERTIFICATE-----Generated at Fri Apr 17 06:02:43 2026 by rpki-client