$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212335.roa File: AS212335.roa (raw, json) Hash identifier: HAbw1Epcw3v3C5ZtQ1VESD4pvfVIFY+YbbvPAyqQKpk= Subject key identifier: 8E:1F:AC:C9:25:02:C6:E4:8E:9F:3A:6C:BB:07:7C:54:A3:32:51:B7 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 30E14C8A28E232CC22CD6EC4FC87261A96DD4729 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212335.roa Signing time: Thu 17 Jul 2025 06:05:13 +0000 ROA not before: Thu 17 Jul 2025 06:00:13 +0000 ROA not after: Thu 16 Jul 2026 06:05:13 +0000 asID: 212335 IP address blocks: 104.234.71.0/24 maxlen: 24 104.234.188.0/24 maxlen: 24 104.234.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 20:33:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e1:4c:8a:28:e2:32:cc:22:cd:6e:c4:fc:87:26:1a:96:dd:47:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 17 06:00:13 2025 GMT Not After : Jul 16 06:05:13 2026 GMT Subject: CN=8E1FACC92502C6E48E9F3A6CBB077C54A33251B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:f3:45:bc:82:6e:3d:17:75:57:e4:8e:cb: c8:2b:82:33:b0:99:e0:35:6b:6c:bd:db:02:5d:e5: 1f:06:6a:d1:24:77:0c:0a:a5:4d:dc:84:30:94:81: 9e:6b:a0:49:f5:0d:54:95:8c:4c:98:4d:36:c3:9b: 5c:a4:0a:7d:f3:64:aa:6a:93:97:49:99:b9:a9:65: c3:70:b1:17:3c:b2:79:ef:b4:f0:bd:c7:56:6f:f9: 93:f8:63:6f:3e:33:32:e7:c5:b4:6a:52:6b:99:2d: 09:a4:de:af:1a:39:24:2c:14:99:26:f4:6b:d0:fb: 8b:43:2c:9f:a2:6e:8f:d0:bb:6c:d9:4d:db:9e:a7: 2b:54:76:05:eb:b2:4f:07:a2:6f:8e:66:4a:79:e2: 64:89:ae:dd:84:4d:58:b5:8b:f9:f9:dd:8b:00:10: b6:a8:48:36:6b:ca:63:5f:8f:4c:74:52:08:0e:e1: d6:f9:d5:51:2d:89:a7:38:68:f6:92:3a:1e:e0:0d: 31:a8:00:71:15:8a:88:02:9e:b5:2a:ab:f1:4b:47: 1c:d1:02:fa:c9:01:a8:41:97:76:86:6e:75:ce:5e: ca:ca:da:03:28:ee:c0:4d:21:bd:54:ad:71:8b:88: 7b:15:c4:c1:c4:43:57:21:95:b0:8a:f3:b2:c7:05: bc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:AC:C9:25:02:C6:E4:8E:9F:3A:6C:BB:07:7C:54:A3:32:51:B7 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.71.0/24 104.234.188.0/24 104.234.197.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d8:7b:2b:d1:6e:bd:7a:30:a7:6f:1c:2e:e9:1d:f2:44:9e: 54:a9:3b:4c:16:c1:dc:c6:ee:0e:95:4e:93:6f:eb:e4:4f:06: 9a:af:21:41:fc:c2:66:e5:64:e2:fe:ca:7e:30:98:11:9f:80: ff:ca:dd:44:ff:7a:c1:b0:49:d5:be:e9:4c:1c:98:cd:11:8e: a1:f5:a5:b7:dd:6f:9c:4f:68:4f:c3:87:cc:e7:7c:1b:2d:45: e7:db:7f:95:dc:c7:43:db:f9:7d:c3:46:ae:ba:af:4b:58:55: f5:08:99:22:64:cc:08:ca:86:31:fd:3e:e1:07:67:cc:4e:f0: c0:46:f0:0e:57:48:c1:b5:08:fe:ed:a6:aa:a1:2c:de:c2:e0: 31:76:77:83:23:3f:b4:6b:2d:9d:ab:76:bd:d1:b4:a6:8b:80: bf:43:3b:e1:9d:12:f6:c8:71:71:e6:06:07:ae:96:cb:46:c9: 2d:01:f5:65:59:ca:7e:20:bc:4d:51:e6:e6:a5:0e:bf:e3:0f: 30:2d:6c:30:38:3d:96:f4:7c:30:28:78:40:08:17:c8:ea:0b: 66:bc:1d:55:92:61:8c:b0:fe:60:e5:3b:a6:ab:0c:0d:c7:dd: 00:16:2f:fd:77:1a:19:f7:50:bc:71:b2:e3:63:97:b8:32:00: a6:af:72:7e -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUMOFMiijiMswizW7E/IcmGpbdRykwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzE3MDYwMDEzWhcNMjYwNzE2MDYwNTEz WjAzMTEwLwYDVQQDEyg4RTFGQUNDOTI1MDJDNkU0OEU5RjNBNkNCQjA3N0M1NEEz MzI1MUI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02LzRbyCbj0X dVfkjsvIK4IzsJngNWtsvdsCXeUfBmrRJHcMCqVN3IQwlIGea6BJ9Q1UlYxMmE02 w5tcpAp982SqapOXSZm5qWXDcLEXPLJ577TwvcdWb/mT+GNvPjMy58W0alJrmS0J pN6vGjkkLBSZJvRr0PuLQyyfom6P0Lts2U3bnqcrVHYF67JPB6JvjmZKeeJkia7d hE1YtYv5+d2LABC2qEg2a8pjX49MdFIIDuHW+dVRLYmnOGj2kjoe4A0xqABxFYqI Ap61KqvxS0cc0QL6yQGoQZd2hm51zl7KytoDKO7ATSG9VK1xi4h7FcTBxENXIZWw ivOyxwW8XwIDAQABo4ICizCCAocwHQYDVR0OBBYEFI4frMklAsbkjp86bLsHfFSj MlG3MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxMjMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqRwMEAGjqvAMEAGjqxTANBgkq hkiG9w0BAQsFAAOCAQEAcNh7K9FuvXowp28cLukd8kSeVKk7TBbB3MbuDpVOk2/r 5E8Gmq8hQfzCZuVk4v7KfjCYEZ+A/8rdRP96wbBJ1b7pTByYzRGOofWlt91vnE9o T8OHzOd8Gy1F59t/ldzHQ9v5fcNGrrqvS1hV9QiZImTMCMqGMf0+4QdnzE7wwEbw DldIwbUI/u2mqqEs3sLgMXZ3gyM/tGstnat2vdG0pouAv0M74Z0S9shxceYGB66W y0bJLQH1ZVnKfiC8TVHm5qUOv+MPMC1sMDg9lvR8MCh4QAgXyOoLZrwdVZJhjLD+ YOU7pqsMDcfdABYv/XcaGfdQvHGy42OXuDIApq9yfg== -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:50 2025 by rpki-client