$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: aXKqTfFzASPzNynk4SWjVsxJ7oHN1B7xjwI+4dtwdUY= Subject key identifier: 33:79:1C:41:B7:39:02:BE:D4:82:6C:B1:A2:79:73:13:C1:5C:60:86 Certificate issuer: /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Certificate serial: 6024F51FF328875CE64F3D4A5EA73BDC75AFEC69 Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa Signing time: Fri 31 Oct 2025 14:23:16 +0000 ROA not before: Fri 31 Oct 2025 14:18:16 +0000 ROA not after: Fri 30 Oct 2026 14:23:16 +0000 asID: 9304 IP address blocks: 23.94.89.0/24 maxlen: 24 23.226.128.0/24 maxlen: 24 23.226.131.0/24 maxlen: 24 64.50.180.0/24 maxlen: 24 64.50.186.0/24 maxlen: 24 64.188.7.0/24 maxlen: 24 64.188.14.0/24 maxlen: 24 64.188.19.0/24 maxlen: 24 64.188.21.0/24 maxlen: 24 67.215.226.0/24 maxlen: 24 69.12.92.0/24 maxlen: 24 69.12.95.0/24 maxlen: 24 72.11.158.0/24 maxlen: 24 74.50.3.0/24 maxlen: 24 74.50.6.0/24 maxlen: 24 192.228.115.0/24 maxlen: 24 216.97.228.0/24 maxlen: 24 216.97.229.0/24 maxlen: 24 216.97.235.0/24 maxlen: 24 216.227.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 05:54:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:24:f5:1f:f3:28:87:5c:e6:4f:3d:4a:5e:a7:3b:dc:75:af:ec:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed Validity Not Before: Oct 31 14:18:16 2025 GMT Not After : Oct 30 14:23:16 2026 GMT Subject: CN=33791C41B73902BED4826CB1A2797313C15C6086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:63:30:ae:54:a4:5a:93:d5:d1:6b:ae:d7: 50:cc:35:04:b2:97:7d:b9:8e:9d:15:47:55:d8:9f: 76:f8:44:41:b5:c0:c3:ea:86:ba:fe:43:5b:99:b6: d3:6a:78:29:91:f2:e1:14:33:04:56:de:2d:69:98: 13:fc:05:ad:b9:c5:1c:73:59:09:67:94:dc:bf:12: d1:ca:c7:48:dd:33:e5:04:25:c3:ac:fc:a7:e4:77: 14:07:6a:0f:cb:bd:35:6a:c7:3b:91:3e:db:09:ca: a1:62:b2:79:76:d1:81:46:f7:68:81:50:db:45:ef: ae:30:43:ee:84:7b:7e:3e:e7:90:89:06:af:43:2a: cf:07:e8:5e:ad:ca:76:d4:71:17:f4:43:23:16:a1: 95:e4:b6:9c:cc:9f:d1:19:22:4a:97:56:c8:fc:bb: b0:62:f8:1b:bb:43:a3:66:16:09:83:bb:bc:7f:e7: cd:87:27:e5:f0:b3:7b:0d:c5:d0:a3:17:0b:c6:72: 4e:e1:d2:b3:f3:fe:bc:96:36:9c:dc:34:35:1c:20: a5:86:2e:12:cd:f8:b6:05:4a:1b:3c:df:fc:05:a4: 72:49:33:68:3e:69:83:76:1a:3a:07:a8:2f:62:17: d9:56:54:ba:32:0a:f0:c9:23:6d:d4:a9:4e:ed:69: 88:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:79:1C:41:B7:39:02:BE:D4:82:6C:B1:A2:79:73:13:C1:5C:60:86 X509v3 Authority Key Identifier: keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.94.89.0/24 23.226.128.0/24 23.226.131.0/24 64.50.180.0/24 64.50.186.0/24 64.188.7.0/24 64.188.14.0/24 64.188.19.0/24 64.188.21.0/24 67.215.226.0/24 69.12.92.0/24 69.12.95.0/24 72.11.158.0/24 74.50.3.0/24 74.50.6.0/24 192.228.115.0/24 216.97.228.0/23 216.97.235.0/24 216.227.223.0/24 Signature Algorithm: sha256WithRSAEncryption 35:fc:7b:58:4c:05:78:b5:b9:9a:84:4f:88:29:fc:30:8a:80: 91:52:76:ed:42:13:fb:28:53:23:e8:d7:ac:c4:90:9f:7d:10: 11:3f:4e:3b:e1:f7:d0:3e:a0:e7:6e:49:fd:ca:76:0c:79:8b: 2f:53:e2:40:d5:ca:24:a3:d9:c1:ee:d1:76:97:19:9a:24:11: 9c:a4:e2:02:eb:0e:b6:f1:08:ce:2a:15:35:37:f4:dd:af:20: ad:03:73:79:f8:6a:b1:37:72:a5:85:0f:43:8d:bb:b1:a1:53: f0:66:c1:19:26:44:eb:cc:1a:8c:c3:c6:b5:71:13:71:57:99: 54:5d:7f:a5:7a:ff:c2:04:47:6a:08:69:63:10:56:58:cb:e9: 62:58:10:b5:51:c6:16:81:c5:81:a6:40:c5:b6:14:08:a3:94: bf:d1:db:99:d4:d7:bc:74:47:35:86:f1:f3:33:d9:a6:a5:9f: e1:e0:4e:8f:54:27:d2:28:1b:0e:1b:bd:d2:ce:1e:dc:ff:96: 85:2e:cf:bc:d3:5b:3e:9d:10:eb:dc:e7:56:8a:7a:66:0e:88: e6:6e:0e:39:03:90:10:f1:c2:63:9c:1d:dd:25:13:7f:e5:c6: 9e:d8:0c:b5:1a:76:4f:5f:12:ba:b4:1b:99:fc:81:ea:7a:97: 1a:e3:61:dc -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgIUYCT1H/Moh1zmTz1KXqc73HWv7GkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUxMDMxMTQxODE2WhcNMjYxMDMwMTQyMzE2 WjAzMTEwLwYDVQQDEygzMzc5MUM0MUI3MzkwMkJFRDQ4MjZDQjFBMjc5NzMxM0Mx NUM2MDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7hjMK5UpFqT 1dFrrtdQzDUEspd9uY6dFUdV2J92+ERBtcDD6oa6/kNbmbbTangpkfLhFDMEVt4t aZgT/AWtucUcc1kJZ5TcvxLRysdI3TPlBCXDrPyn5HcUB2oPy701asc7kT7bCcqh YrJ5dtGBRvdogVDbRe+uMEPuhHt+PueQiQavQyrPB+hercp21HEX9EMjFqGV5Lac zJ/RGSJKl1bI/LuwYvgbu0OjZhYJg7u8f+fNhyfl8LN7DcXQoxcLxnJO4dKz8/68 ljac3DQ1HCClhi4Szfi2BUobPN/8BaRySTNoPmmDdho6B6gvYhfZVlS6MgrwySNt 1KlO7WmIywIDAQABo4IC6jCCAuYwHQYDVR0OBBYEFDN5HEG3OQK+1IJssaJ5cxPB XGCGMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0 OTBkMzMvMS9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYsG CCsGAQUFBwEHAQH/BHwwejB4BAIAATByAwQAF15ZAwQAF+KAAwQAF+KDAwQAQDK0 AwQAQDK6AwQAQLwHAwQAQLwOAwQAQLwTAwQAQLwVAwQAQ9fiAwQARQxcAwQARQxf AwQASAueAwQASjIDAwQASjIGAwQAwORzAwQB2GHkAwQA2GHrAwQA2OPfMA0GCSqG SIb3DQEBCwUAA4IBAQA1/HtYTAV4tbmahE+IKfwwioCRUnbtQhP7KFMj6NesxJCf fRARP0474ffQPqDnbkn9ynYMeYsvU+JA1coko9nB7tF2lxmaJBGcpOIC6w628QjO KhU1N/TdryCtA3N5+GqxN3KlhQ9DjbuxoVPwZsEZJkTrzBqMw8a1cRNxV5lUXX+l ev/CBEdqCGljEFZYy+liWBC1UcYWgcWBpkDFthQIo5S/0duZ1Ne8dEc1hvHzM9mm pZ/h4E6PVCfSKBsOG73Szh7c/5aFLs+801s+nRDr3OdWinpmDojmbg45A5AQ8cJj nB3dJRN/5cae2Ay1GnZPXxK6tBuZ/IHqepca42Hc -----END CERTIFICATE-----Generated at Tue Nov 4 19:22:27 2025 by rpki-client