$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: F1ZP7v3L2Q77Ym9j7orsbzQBAFMO/Eg99v6m4VYNzgw= Subject key identifier: 47:95:B8:75:51:D9:8A:E9:2E:E1:47:59:9D:FF:40:B0:28:66:48:28 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7AD8307953C5D1B0DD1B7F81CF680E4278EC44F2 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa Signing time: Thu 23 Oct 2025 04:14:22 +0000 ROA not before: Thu 23 Oct 2025 04:09:22 +0000 ROA not after: Thu 22 Oct 2026 04:14:22 +0000 asID: 9304 IP address blocks: 98.142.242.0/24 maxlen: 24 104.234.112.0/24 maxlen: 24 104.234.135.0/24 maxlen: 24 104.234.211.0/24 maxlen: 24 206.53.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 08:57:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d8:30:79:53:c5:d1:b0:dd:1b:7f:81:cf:68:0e:42:78:ec:44:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 23 04:09:22 2025 GMT Not After : Oct 22 04:14:22 2026 GMT Subject: CN=4795B87551D98AE92EE147599DFF40B028664828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:94:85:4b:c2:63:74:c9:0f:ed:95:c9:69: 13:e8:59:85:36:3c:87:73:c6:5c:d0:d0:b8:bd:fa: 4f:49:31:8e:e9:bf:69:16:d2:76:51:cb:fa:6d:7b: a0:5e:60:1c:68:7a:b4:d1:79:52:30:61:96:f6:0e: d7:a4:f8:c0:bf:84:e9:82:06:2d:9f:2a:12:e4:16: 45:f6:16:6f:bf:d6:c4:1d:56:ee:e1:f9:b1:f5:e8: 5c:31:32:d7:e8:08:48:35:25:8f:32:63:89:e2:10: 00:39:2f:f4:fc:0f:71:ac:b9:22:77:42:9b:25:a8: 39:34:7f:41:a6:6d:f9:48:12:ec:32:c7:0a:bf:3c: 59:40:6a:c3:36:45:2c:6a:31:b1:7f:ca:e1:5c:fb: dc:3f:7a:5a:b0:dd:11:4d:b8:cf:2b:78:97:d4:02: e4:c5:b2:68:35:05:ef:5d:e5:19:5d:42:6d:a8:b3: 8e:ae:65:e9:59:53:d6:be:45:5f:24:00:fe:f3:c9: 35:65:5d:f9:b3:a5:ce:35:2d:ac:4d:6b:e1:9c:80: 8c:3a:d7:bb:1b:87:0a:60:58:9f:51:2f:c5:5a:27: a7:06:65:73:8e:7e:40:99:f1:72:32:e8:93:54:1f: fc:3d:11:94:1e:e6:58:eb:6a:e7:a6:84:b6:70:77: b0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:95:B8:75:51:D9:8A:E9:2E:E1:47:59:9D:FF:40:B0:28:66:48:28 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 98.142.242.0/24 104.234.112.0/24 104.234.135.0/24 104.234.211.0/24 206.53.62.0/24 Signature Algorithm: sha256WithRSAEncryption 10:e7:21:eb:67:c9:74:38:d2:7c:00:76:b4:e5:ac:fb:b0:1f: f7:e3:6b:60:8f:d4:49:79:02:58:97:af:19:d9:40:3b:dc:e0: 75:6f:a1:30:d1:8e:a1:58:8e:96:bc:4c:e3:d7:98:98:63:0e: 57:44:cb:52:17:a8:e3:0f:04:c2:e5:5f:51:43:09:2d:ec:24: 4e:5b:05:2e:10:c1:17:31:64:22:55:97:c5:be:b3:b7:b5:6a: 16:f7:a6:9d:a4:d1:34:34:6c:bd:d5:6b:64:5a:d1:b6:0d:67: 3e:38:af:fc:6f:89:ad:8c:32:68:db:41:21:1e:84:a2:b0:0f: 75:be:8c:3f:b5:d9:2c:0d:4e:e0:2f:fb:06:f6:74:24:cf:46: 4a:3b:dd:47:9e:37:ef:7d:ca:b1:d8:1e:2f:65:73:89:6f:54: 98:23:5d:ad:9b:2a:79:5f:a0:3d:91:1a:2a:ab:4e:cf:33:94: 5f:cd:90:1f:e7:01:68:d5:7d:e6:67:43:a1:18:ac:6e:97:de: 5e:de:c4:e6:b5:b4:5f:8b:b4:64:1b:92:3f:c6:01:3c:70:63: 13:71:f3:52:0c:4e:b9:02:2c:b3:b3:65:48:75:ad:8b:21:56: 55:8e:db:41:a7:d0:c0:d7:f2:db:8c:cc:e1:05:4f:37:d0:10: c8:65:3d:aa -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgIUetgweVPF0bDdG3+Bz2gOQnjsRPIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMDIzMDQwOTIyWhcNMjYxMDIyMDQxNDIy WjAzMTEwLwYDVQQDEyg0Nzk1Qjg3NTUxRDk4QUU5MkVFMTQ3NTk5REZGNDBCMDI4 NjY0ODI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhKUhUvCY3TJ D+2VyWkT6FmFNjyHc8Zc0NC4vfpPSTGO6b9pFtJ2Ucv6bXugXmAcaHq00XlSMGGW 9g7XpPjAv4TpggYtnyoS5BZF9hZvv9bEHVbu4fmx9ehcMTLX6AhINSWPMmOJ4hAA OS/0/A9xrLkid0KbJag5NH9Bpm35SBLsMscKvzxZQGrDNkUsajGxf8rhXPvcP3pa sN0RTbjPK3iX1ALkxbJoNQXvXeUZXUJtqLOOrmXpWVPWvkVfJAD+88k1ZV35s6XO NS2sTWvhnICMOte7G4cKYFifUS/FWienBmVzjn5AmfFyMuiTVB/8PRGUHuZY62rn poS2cHewJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEeVuHVR2YrpLuFHWZ3/QLAo ZkgoMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBABijvIDBABo6nADBABo6ocDBABo6tMD BADONT4wDQYJKoZIhvcNAQELBQADggEBABDnIetnyXQ40nwAdrTlrPuwH/fja2CP 1El5AliXrxnZQDvc4HVvoTDRjqFYjpa8TOPXmJhjDldEy1IXqOMPBMLlX1FDCS3s JE5bBS4QwRcxZCJVl8W+s7e1ahb3pp2k0TQ0bL3Va2Ra0bYNZz44r/xvia2MMmjb QSEehKKwD3W+jD+12SwNTuAv+wb2dCTPRko73UeeN+99yrHYHi9lc4lvVJgjXa2b KnlfoD2RGiqrTs8zlF/NkB/nAWjVfeZnQ6EYrG6X3l7exOa1tF+LtGQbkj/GATxw YxNx81IMTrkCLLOzZUh1rYshVlWO20Gn0MDX8tuMzOEFTzfQEMhlPao= -----END CERTIFICATE-----Generated at Tue Nov 4 19:21:57 2025 by rpki-client