$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa File: AS13335.roa (raw, json) Hash identifier: iv0XBrycuZ7fohcCP9oyLqvJ8cBnMghgC3W6R6WFeog= Subject key identifier: 45:2C:A2:9D:F5:66:AB:04:A7:2B:E2:AB:4B:60:D1:1C:D2:9B:28:DC Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 0D3F8B066E6FB8C61E3BB5536B1AD0C2A8520117 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa Signing time: Mon 18 May 2026 11:11:17 +0000 ROA not before: Mon 18 May 2026 11:06:17 +0000 ROA not after: Mon 17 May 2027 11:11:17 +0000 asID: 13335 IP address blocks: 104.234.63.0/24 maxlen: 24 104.234.65.0/24 maxlen: 24 104.234.133.0/24 maxlen: 24 104.234.189.0/24 maxlen: 24 104.234.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 14:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3f:8b:06:6e:6f:b8:c6:1e:3b:b5:53:6b:1a:d0:c2:a8:52:01:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 18 11:06:17 2026 GMT Not After : May 17 11:11:17 2027 GMT Subject: CN=452CA29DF566AB04A72BE2AB4B60D11CD29B28DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:cd:71:a5:24:cc:c4:b6:b1:9b:3a:62:e6: d5:3d:55:56:b4:e5:43:4a:45:65:b0:ee:ba:c4:11: 9c:78:e4:51:92:03:a1:0c:3a:c8:f6:76:fd:ff:0b: c0:b7:7a:9f:d0:3c:53:49:e1:93:6f:47:f7:c8:4c: a2:0c:a1:72:80:65:08:35:3c:1d:4d:02:92:bc:75: ce:ef:0c:fa:dc:ae:e0:bc:3d:ea:3d:50:d3:5f:7b: a8:cc:a9:97:3a:6f:d9:be:c8:e6:dd:1e:24:78:73: 7f:ed:ab:3b:a6:b5:37:80:84:e6:0b:4c:a3:77:80: 41:85:5c:7e:d8:cd:7f:e5:fd:c5:d6:99:52:30:3c: b1:28:46:ac:4e:df:bf:f1:75:3c:9e:79:d6:e8:a5: 68:d3:f2:9b:88:08:e1:24:85:73:46:29:6c:1b:4e: 5e:0b:e6:00:46:fb:8a:a9:2e:c5:57:68:eb:d8:3a: 12:3b:1a:17:3c:30:62:36:d8:84:df:43:06:e2:cf: ca:9d:d5:4a:18:6a:29:a2:28:7b:e3:1f:66:c7:8f: 65:f4:d7:79:a1:71:c0:00:8e:50:3c:64:5a:ef:d5: 98:9d:c0:73:96:70:37:70:59:f3:48:8b:a9:c5:3d: 9b:88:5a:b2:87:8a:49:d5:f9:fe:71:67:fd:64:8e: 3a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2C:A2:9D:F5:66:AB:04:A7:2B:E2:AB:4B:60:D1:1C:D2:9B:28:DC X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS13335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.63.0/24 104.234.65.0/24 104.234.133.0/24 104.234.189.0/24 104.234.224.0/24 Signature Algorithm: sha256WithRSAEncryption 72:96:01:8e:94:e3:37:e7:39:05:65:6e:32:7b:15:77:28:76: 80:37:f9:c0:1d:2d:f9:3e:e7:b2:21:b1:3a:56:b3:31:a8:9f: ae:c8:6c:34:68:b7:54:14:f2:a3:2e:ad:2f:40:19:6a:0a:6b: 32:dc:71:19:f0:5b:53:77:d2:fe:4c:88:dd:3f:45:6b:a1:83: 90:b6:9d:67:90:8f:a5:f0:59:c7:8f:68:0c:32:b7:97:d6:d1: 2b:f1:a9:c9:f9:92:cb:70:52:26:a5:da:af:86:e1:47:99:6e: f9:db:20:b1:97:b8:e8:08:10:a1:fb:59:10:87:2a:c3:e7:71: 91:89:05:fc:85:8d:15:69:e3:e7:44:85:cb:f8:e3:d8:ef:2c: 85:35:69:fc:10:67:37:40:59:b5:4c:1a:50:2e:6b:f0:ad:f7: d5:f7:01:b2:77:bc:6e:1a:a2:79:5c:f9:c6:68:00:9d:ce:a4: 3b:9f:9e:1f:61:9b:eb:1f:6a:f1:e2:d5:cf:98:13:61:e9:97: d9:bc:cd:8e:0a:03:08:cf:f1:fd:48:00:08:e3:7e:29:86:c2: 82:19:e5:fc:6f:ba:bf:22:d6:4d:46:b9:15:07:43:c7:80:32: 5b:03:a2:7a:2a:53:53:47:ea:f8:b4:a6:19:51:82:34:c5:05: 9f:75:41:e0 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUDT+LBm5vuMYeO7VTaxrQwqhSARcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNTE4MTEwNjE3WhcNMjcwNTE3MTExMTE3 WjAzMTEwLwYDVQQDEyg0NTJDQTI5REY1NjZBQjA0QTcyQkUyQUI0QjYwRDExQ0Qy OUIyOERDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssTNcaUkzMS2 sZs6YubVPVVWtOVDSkVlsO66xBGceORRkgOhDDrI9nb9/wvAt3qf0DxTSeGTb0f3 yEyiDKFygGUINTwdTQKSvHXO7wz63K7gvD3qPVDTX3uozKmXOm/Zvsjm3R4keHN/ 7as7prU3gITmC0yjd4BBhVx+2M1/5f3F1plSMDyxKEasTt+/8XU8nnnW6KVo0/Kb iAjhJIVzRilsG05eC+YARvuKqS7FV2jr2DoSOxoXPDBiNtiE30MG4s/KndVKGGop oih74x9mx49l9Nd5oXHAAI5QPGRa79WYncBzlnA3cFnzSIupxT2biFqyh4pJ1fn+ cWf9ZI46BQIDAQABo4ICljCCApIwHQYDVR0OBBYEFEUsop31ZqsEpyviq0tg0RzS myjcMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzEzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAaOo/AwQAaOpBAwQAaOqFAwQAaOq9 AwQAaOrgMA0GCSqGSIb3DQEBCwUAA4IBAQBylgGOlOM35zkFZW4yexV3KHaAN/nA HS35PueyIbE6VrMxqJ+uyGw0aLdUFPKjLq0vQBlqCmsy3HEZ8FtTd9L+TIjdP0Vr oYOQtp1nkI+l8FnHj2gMMreX1tEr8anJ+ZLLcFImpdqvhuFHmW752yCxl7joCBCh +1kQhyrD53GRiQX8hY0VaePnRIXL+OPY7yyFNWn8EGc3QFm1TBpQLmvwrffV9wGy d7xuGqJ5XPnGaACdzqQ7n54fYZvrH2rx4tXPmBNh6ZfZvM2OCgMIz/H9SAAI434p hsKCGeX8b7q/ItZNRrkVB0PHgDJbA6J6KlNTR+r4tKYZUYI0xQWfdUHg -----END CERTIFICATE-----Generated at Tue Jun 2 22:06:51 2026 by rpki-client