$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36231.roa File: AS36231.roa (raw, json) Hash identifier: OShz1sAbE4+yRZc+HL4m0x2gD8dYgCBtfQ7J6KPOja4= Subject key identifier: 10:94:D6:A0:75:54:2B:B3:F3:C4:B6:D3:F7:85:AC:20:2D:9E:A1:6E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 548DB12D6977826218126DE6C200EBA5E34B8ABD Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36231.roa Signing time: Thu 17 Jul 2025 22:26:12 +0000 ROA not before: Thu 17 Jul 2025 22:21:12 +0000 ROA not after: Thu 16 Jul 2026 22:26:12 +0000 asID: 36231 IP address blocks: 104.234.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Jul 2025 22:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:8d:b1:2d:69:77:82:62:18:12:6d:e6:c2:00:eb:a5:e3:4b:8a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Jul 17 22:21:12 2025 GMT Not After : Jul 16 22:26:12 2026 GMT Subject: CN=1094D6A075542BB3F3C4B6D3F785AC202D9EA16E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:36:b5:72:2b:a1:ba:90:7b:89:c8:38:e5: 66:2f:1d:57:2f:9d:6c:26:20:8b:71:83:a7:94:93: 31:3f:0a:6e:c5:40:5e:f9:cc:74:6b:eb:c0:f6:8b: c3:e0:5e:72:83:f8:94:97:e4:04:af:bd:a9:db:bc: 00:90:8c:8c:e4:84:49:e5:7f:02:df:fb:70:39:3a: f8:94:a7:5a:b0:64:9c:ee:67:74:19:93:d2:8d:5f: 06:ff:dc:11:a1:06:4a:9a:c7:d3:05:65:5e:32:65: f9:39:82:c2:c0:6f:35:8f:97:3f:26:7c:46:71:77: 46:7d:3f:96:6c:52:a5:1d:0c:1e:07:13:53:40:de: 20:3d:47:77:ff:6d:1b:63:89:fa:9c:b1:c9:b6:67: 81:a4:d1:af:d3:d6:27:31:ce:be:d2:08:4a:3f:52: f5:31:7f:1b:42:df:c2:19:b2:68:c5:6d:db:c8:30: 9c:86:1e:36:19:22:de:bd:38:6d:6a:5e:3c:c5:38: 73:9f:5c:f8:5b:d5:10:9d:89:e3:4e:f5:51:cb:dd: 95:ba:bc:ed:7c:8a:4a:59:b2:83:63:9b:01:c3:cc: 79:2e:55:b8:50:57:be:92:df:87:62:ee:1a:4b:60: b6:ad:2c:ff:7c:4a:92:a0:18:15:0f:9b:fa:ac:dc: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:94:D6:A0:75:54:2B:B3:F3:C4:B6:D3:F7:85:AC:20:2D:9E:A1:6E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS36231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.172.0/24 Signature Algorithm: sha256WithRSAEncryption a4:5b:b6:f8:67:db:72:25:bc:2b:b1:a1:b9:31:73:4d:53:18: 2b:26:63:cd:86:e6:96:f9:1e:6f:de:6a:51:e2:10:50:62:db: b7:ed:6d:cc:7e:76:75:91:d1:52:c4:13:1e:2e:cc:0d:fa:18: d3:e0:9c:5e:f0:91:6e:21:9d:6c:0e:41:66:f8:16:56:5b:21: b5:79:c7:f4:08:9e:49:9e:66:4e:5e:64:f6:cb:34:ea:96:0c: bb:9a:e3:3f:1e:fe:09:ad:1e:0e:c8:aa:e9:de:fc:1e:3c:6a: c9:76:0a:fa:64:4d:98:e6:a0:f8:e5:0a:37:fd:e5:43:be:24: a3:71:2f:1d:4a:1c:44:41:04:f0:27:d2:25:42:f7:58:d9:7d: 62:aa:77:af:39:d6:d2:08:70:be:3a:33:3a:50:01:38:e5:9d: b4:e7:08:48:75:cc:f6:f9:99:fe:1a:5d:53:99:ea:b2:ea:48: 9c:b5:b8:47:a8:c5:bd:f6:11:4b:63:65:2f:bf:93:77:e4:4b: 76:02:68:fd:cc:de:e3:cb:88:f6:47:29:5a:8d:99:96:ad:c3: c4:db:b4:97:e2:af:3e:22:a2:7e:48:68:71:6f:4a:63:ae:98: e0:14:91:d0:4f:43:3b:13:26:b4:f7:6b:a5:87:25:53:e6:1b: d1:ca:7b:3b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIUVI2xLWl3gmIYEm3mwgDrpeNLir0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzE3MjIyMTEyWhcNMjYwNzE2MjIyNjEy WjAzMTEwLwYDVQQDEygxMDk0RDZBMDc1NTQyQkIzRjNDNEI2RDNGNzg1QUMyMDJE OUVBMTZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4V02tXIrobqQ e4nIOOVmLx1XL51sJiCLcYOnlJMxPwpuxUBe+cx0a+vA9ovD4F5yg/iUl+QEr72p 27wAkIyM5IRJ5X8C3/twOTr4lKdasGSc7md0GZPSjV8G/9wRoQZKmsfTBWVeMmX5 OYLCwG81j5c/JnxGcXdGfT+WbFKlHQweBxNTQN4gPUd3/20bY4n6nLHJtmeBpNGv 09YnMc6+0ghKP1L1MX8bQt/CGbJoxW3byDCchh42GSLevThtal48xThzn1z4W9UQ nYnjTvVRy92VurztfIpKWbKDY5sBw8x5LlW4UFe+kt+HYu4aS2C2rSz/fEqSoBgV D5v6rNzF1QIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBCU1qB1VCuz88S20/eFrCAt nqFuMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM2MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqsMA0GCSqGSIb3DQEBCwUAA4IB AQCkW7b4Z9tyJbwrsaG5MXNNUxgrJmPNhuaW+R5v3mpR4hBQYtu37W3MfnZ1kdFS xBMeLswN+hjT4Jxe8JFuIZ1sDkFm+BZWWyG1ecf0CJ5JnmZOXmT2yzTqlgy7muM/ Hv4JrR4OyKrp3vwePGrJdgr6ZE2Y5qD45Qo3/eVDviSjcS8dShxEQQTwJ9IlQvdY 2X1iqnevOdbSCHC+OjM6UAE45Z205whIdcz2+Zn+Gl1Tmeqy6kictbhHqMW99hFL Y2Uvv5N35Et2Amj9zN7jy4j2RylajZmWrcPE27SX4q8+IqJ+SGhxb0pjrpjgFJHQ T0M7Eya092ulhyVT5hvRyns7 -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:24 2025 by rpki-client