$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa File: AS396356.roa (raw, json) Hash identifier: jFzPsL0wPiKB78wVtwtq8igbKRio2TOgrOSySoPxg1k= Subject key identifier: 37:22:D4:F2:00:73:64:6F:7B:73:9B:37:99:42:E2:64:78:4C:21:1A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 382D1CB68EF7CC0A69374F72E4A2A4DE247F4619 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa Signing time: Mon 31 Mar 2025 14:45:25 +0000 ROA not before: Mon 31 Mar 2025 14:40:25 +0000 ROA not after: Mon 30 Mar 2026 14:45:25 +0000 asID: 396356 IP address blocks: 104.234.101.0/24 maxlen: 24 104.234.112.0/24 maxlen: 24 104.234.125.0/24 maxlen: 24 104.234.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 20:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:2d:1c:b6:8e:f7:cc:0a:69:37:4f:72:e4:a2:a4:de:24:7f:46:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 31 14:40:25 2025 GMT Not After : Mar 30 14:45:25 2026 GMT Subject: CN=3722D4F20073646F7B739B379942E264784C211A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:48:e0:51:27:cc:17:ff:34:d4:96:b0:f6:ab: 26:c3:d1:04:81:2f:63:cc:2c:05:9d:7f:9e:11:5f: 51:d7:c1:dd:75:d0:12:10:c7:c6:97:e0:cb:5d:75: 8e:97:a6:94:b0:a1:b9:9f:40:b3:9f:e4:95:fe:43: ef:c8:d7:e0:1f:a7:21:d4:dc:38:2f:5f:fe:25:99: b2:49:81:81:86:67:05:8a:14:e9:b4:4d:2f:f7:ff: 06:34:b2:02:26:c9:4f:fb:93:49:63:45:2f:93:e8: 9e:02:bb:2d:32:9a:3b:05:96:09:fa:77:37:bb:28: 29:5e:4d:4c:42:43:b0:1f:4f:1f:1e:df:38:3f:64: 04:27:97:3f:d7:e2:f5:d1:b2:68:c6:83:ea:e6:c0: 6f:6e:65:35:2f:42:4b:43:7f:b1:69:87:71:c6:40: aa:aa:60:01:ba:91:01:60:31:96:19:d9:e2:f5:19: 25:ca:74:17:78:ce:69:5d:d3:53:5a:12:67:2a:99: c1:bf:b8:40:09:8a:4c:fe:b3:28:ac:77:4b:fd:9e: 3e:b9:87:cd:e6:c1:a9:f4:11:cf:5b:d2:79:d1:c4: 80:41:e0:3d:5b:5a:15:e4:77:43:15:ad:0e:3a:bb: fe:00:27:b3:b9:a6:2c:04:b1:d5:bd:82:74:cc:07: 74:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:22:D4:F2:00:73:64:6F:7B:73:9B:37:99:42:E2:64:78:4C:21:1A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS396356.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.101.0/24 104.234.112.0/24 104.234.125.0/24 104.234.140.0/24 Signature Algorithm: sha256WithRSAEncryption ac:06:c4:2f:fd:4f:7a:5c:67:5e:4e:2f:a8:34:c3:92:57:5b: bf:ec:41:5b:31:c1:27:65:5c:ba:c8:c5:eb:4e:7d:ea:37:db: 1a:87:8e:96:72:26:ef:c1:c8:84:36:7c:5e:2a:67:64:40:37: de:da:cf:8c:63:3e:34:6d:1a:30:b6:86:88:e5:5b:fe:46:fd: 33:e4:00:32:ef:99:a8:0c:15:5b:09:3a:e5:5b:cf:6e:d4:e5: 92:96:0e:c1:ed:cb:55:c7:38:14:1c:e0:ad:1a:ab:6d:93:0f: 04:5d:fa:30:e9:7e:4e:21:30:56:ef:1c:75:f5:8c:50:b4:90: 38:fb:4b:66:92:57:93:d4:48:49:f5:66:7a:ab:d6:76:b2:aa: 84:65:e6:c6:58:57:f5:ce:3a:cd:89:86:d1:55:c2:ed:a5:e4: 39:f0:c2:63:39:d5:5d:3b:31:a3:7e:6a:de:19:b5:bb:be:84: 3b:56:d9:cb:75:c9:5b:c3:cd:20:6f:7b:8b:b0:49:58:7b:a9: 78:61:4b:dc:23:c6:50:30:c5:72:dc:7a:cd:dd:aa:ab:d3:71: 8f:d0:f6:24:66:57:dd:30:92:b3:69:f8:22:3f:3f:7c:87:c3: 02:99:49:71:c4:50:41:b3:94:0b:65:26:a5:56:ca:23:18:2d: 52:77:b7:1c -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIUOC0cto73zAppN09y5KKk3iR/RhkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwMzMxMTQ0MDI1WhcNMjYwMzMwMTQ0NTI1 WjAzMTEwLwYDVQQDEygzNzIyRDRGMjAwNzM2NDZGN0I3MzlCMzc5OTQyRTI2NDc4 NEMyMTFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEjgUSfMF/80 1Jaw9qsmw9EEgS9jzCwFnX+eEV9R18HdddASEMfGl+DLXXWOl6aUsKG5n0Czn+SV /kPvyNfgH6ch1Nw4L1/+JZmySYGBhmcFihTptE0v9/8GNLICJslP+5NJY0Uvk+ie ArstMpo7BZYJ+nc3uygpXk1MQkOwH08fHt84P2QEJ5c/1+L10bJoxoPq5sBvbmU1 L0JLQ3+xaYdxxkCqqmABupEBYDGWGdni9RklynQXeM5pXdNTWhJnKpnBv7hACYpM /rMorHdL/Z4+uYfN5sGp9BHPW9J50cSAQeA9W1oV5HdDFa0OOrv+ACezuaYsBLHV vYJ0zAd0HwIDAQABo4ICkTCCAo0wHQYDVR0OBBYEFDci1PIAc2Rve3ObN5lC4mR4 TCEaMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5NjM1Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAx BggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAGjqZQMEAGjqcAMEAGjqfQMEAGjq jDANBgkqhkiG9w0BAQsFAAOCAQEArAbEL/1PelxnXk4vqDTDkldbv+xBWzHBJ2Vc usjF60596jfbGoeOlnIm78HIhDZ8XipnZEA33trPjGM+NG0aMLaGiOVb/kb9M+QA Mu+ZqAwVWwk65VvPbtTlkpYOwe3LVcc4FBzgrRqrbZMPBF36MOl+TiEwVu8cdfWM ULSQOPtLZpJXk9RISfVmeqvWdrKqhGXmxlhX9c46zYmG0VXC7aXkOfDCYznVXTsx o35q3hm1u76EO1bZy3XJW8PNIG97i7BJWHupeGFL3CPGUDDFctx6zd2qq9Nxj9D2 JGZX3TCSs2n4Ij8/fIfDAplJccRQQbOUC2UmpVbKIxgtUne3HA== -----END CERTIFICATE-----Generated at Fri Apr 18 10:31:35 2025 by rpki-client