$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa File: AS400909.roa (raw, json) Hash identifier: 36et0cAwEz23u+K2HKIeVnhLmZwPU7tuwwrsI9Fhcls= Subject key identifier: 58:9C:52:6C:D3:45:A6:35:F8:15:45:3D:D9:57:86:79:FC:F3:0A:1E Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1351A2454C7248D4898A1B5D2F39D7A7814F8792 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa Signing time: Mon 05 Oct 2026 17:36:20 +0000 ROA not before: Mon 05 Oct 2026 17:31:20 +0000 ROA not after: Mon 04 Oct 2027 17:36:20 +0000 asID: 400909 IP address blocks: 104.234.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 11:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:51:a2:45:4c:72:48:d4:89:8a:1b:5d:2f:39:d7:a7:81:4f:87:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 5 17:31:20 2026 GMT Not After : Oct 4 17:36:20 2027 GMT Subject: CN=589C526CD345A635F815453DD9578679FCF30A1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:de:7f:55:45:e5:d5:1a:fb:fa:63:53:7a:85: c7:cf:d3:76:b2:c1:44:e7:36:28:f9:84:dd:25:65: be:76:46:27:a5:71:74:da:be:d0:53:7e:83:e2:9f: 0c:d8:7c:b5:84:4f:93:82:0b:4b:7f:31:47:56:ae: 36:c2:52:c8:11:3f:5b:82:ad:1e:4f:9c:7b:d1:17: 84:c4:9a:cb:c5:1d:50:73:6f:6e:52:3d:4a:b4:22: 66:9a:60:31:e9:6b:c9:a3:20:29:ee:13:27:9e:22: b9:98:bc:fa:fb:e3:1a:cd:05:ad:3f:22:c3:99:6c: c9:5e:b5:e0:85:90:97:df:73:4b:b1:8a:4e:9f:a2: 57:82:40:ee:ed:09:32:a5:47:22:b5:df:3b:09:2e: 6b:97:e5:f5:32:f4:6e:a3:43:3b:b0:13:91:86:24: be:e1:60:f6:5e:c1:62:42:89:c7:e7:24:d8:72:c3: cc:52:ba:ab:68:41:4c:d9:d0:b9:c7:b8:60:41:b0: 11:a6:28:8b:eb:cf:54:3d:90:04:4b:2d:89:f7:1c: c1:33:9b:42:ed:f7:4b:1b:3b:2c:1e:0e:7a:16:01: 6c:d8:30:fe:70:92:bf:14:4d:e6:da:2a:d0:5d:28: 5c:28:d0:93:71:fc:62:cf:1c:57:5a:99:19:4b:6b: 09:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9C:52:6C:D3:45:A6:35:F8:15:45:3D:D9:57:86:79:FC:F3:0A:1E X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400909.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.127.0/24 Signature Algorithm: sha256WithRSAEncryption 62:bb:ca:b5:42:12:04:3d:d1:94:7c:33:db:20:af:7a:e2:a6: a2:db:b3:07:3a:32:a5:e3:41:7a:d3:94:c1:a8:e4:d3:b3:49: 32:d0:f6:87:55:44:7a:2f:d3:ad:59:c8:7b:94:b2:61:1e:bb: 0d:c1:f7:4b:a9:7e:75:0e:12:ed:37:de:6a:ef:16:92:f4:50: 91:ae:f5:d6:2c:0d:39:58:3f:2a:28:fe:24:fa:4a:9d:0a:88: 88:a7:85:56:ee:e6:12:20:ee:10:6b:80:a7:6a:9d:f5:0e:85: ed:04:d9:62:c8:e4:72:01:eb:85:36:56:0f:c1:f6:5e:44:9b: 58:11:00:d1:df:4e:33:78:67:90:5c:9e:30:14:f8:78:da:92: 2a:f2:87:c4:2d:20:df:20:ba:19:ad:a8:ea:3b:40:8b:35:ab: 9f:56:fe:9b:28:6f:64:c8:07:e6:7e:a1:04:28:6a:e7:61:ce: 22:19:71:8b:0f:35:ce:54:1b:fa:43:1e:20:8d:b7:ed:f5:ed: bb:40:c1:e5:3c:f2:38:00:00:5c:d7:bb:b5:57:bd:10:f2:e4: 39:67:87:eb:4d:ee:ca:be:51:a7:e3:ff:5f:ab:03:59:b1:77: 09:e8:28:92:ed:2e:e5:9a:7e:ce:e7:9e:d8:56:3e:60:de:b9: 10:8d:4e:66 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUE1GiRUxySNSJihtdLznXp4FPh5IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDA1MTczMTIwWhcNMjcxMDA0MTczNjIw WjAzMTEwLwYDVQQDEyg1ODlDNTI2Q0QzNDVBNjM1RjgxNTQ1M0REOTU3ODY3OUZD RjMwQTFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit5/VUXl1Rr7 +mNTeoXHz9N2ssFE5zYo+YTdJWW+dkYnpXF02r7QU36D4p8M2Hy1hE+TggtLfzFH Vq42wlLIET9bgq0eT5x70ReExJrLxR1Qc29uUj1KtCJmmmAx6WvJoyAp7hMnniK5 mLz6++MazQWtPyLDmWzJXrXghZCX33NLsYpOn6JXgkDu7QkypUcitd87CS5rl+X1 MvRuo0M7sBORhiS+4WD2XsFiQonH5yTYcsPMUrqraEFM2dC5x7hgQbARpiiL689U PZAESy2J9xzBM5tC7fdLGzssHg56FgFs2DD+cJK/FE3m2irQXShcKNCTcfxizxxX WpkZS2sJLQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFFicUmzTRaY1+BVFPdlXhnn8 8woeMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDkwOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGjqfzANBgkqhkiG9w0BAQsFAAOC AQEAYrvKtUISBD3RlHwz2yCveuKmotuzBzoypeNBetOUwajk07NJMtD2h1VEei/T rVnIe5SyYR67DcH3S6l+dQ4S7Tfeau8WkvRQka711iwNOVg/Kij+JPpKnQqIiKeF Vu7mEiDuEGuAp2qd9Q6F7QTZYsjkcgHrhTZWD8H2XkSbWBEA0d9OM3hnkFyeMBT4 eNqSKvKHxC0g3yC6Ga2o6jtAizWrn1b+myhvZMgH5n6hBChq52HOIhlxiw81zlQb +kMeII237fXtu0DB5TzyOAAAXNe7tVe9EPLkOWeH603uyr5Rp+P/X6sDWbF3Cego ku0u5Zp+zuee2FY+YN65EI1OZg== -----END CERTIFICATE-----Generated at Tue Oct 20 12:25:07 2026 by rpki-client