$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa File: AS212238.roa (raw, json) Hash identifier: tlbB2qZ63y0nYbHBNBvQPeJd9XwNIb3BbfYsKJDEPv4= Subject key identifier: 63:E1:15:52:F4:2E:76:F2:70:BC:2B:DA:C3:C2:36:B9:34:1E:1B:A0 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 740EE0E13B1856C8764E2EF37E63F2148CE40E4E Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa Signing time: Wed 14 Oct 2026 00:06:28 +0000 ROA not before: Wed 14 Oct 2026 00:01:28 +0000 ROA not after: Wed 13 Oct 2027 00:06:28 +0000 asID: 212238 IP address blocks: 104.234.61.0/24 maxlen: 24 104.234.120.0/24 maxlen: 24 104.234.149.0/24 maxlen: 24 104.234.208.0/24 maxlen: 24 104.234.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 19:56:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:0e:e0:e1:3b:18:56:c8:76:4e:2e:f3:7e:63:f2:14:8c:e4:0e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 14 00:01:28 2026 GMT Not After : Oct 13 00:06:28 2027 GMT Subject: CN=63E11552F42E76F270BC2BDAC3C236B9341E1BA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:14:6c:2e:da:33:2f:d9:56:62:a1:bc:dd:12: 9c:64:a0:44:f1:59:9e:6e:d1:6c:90:53:e8:b4:b6: 12:b3:b7:f0:e4:91:30:11:83:16:98:26:96:94:ee: 05:ba:ef:5e:c1:19:04:f6:0a:7f:47:21:41:28:20: 16:6a:2f:64:3c:7d:b1:c2:58:35:a9:78:20:85:0b: be:bf:4d:10:1d:47:6f:79:8d:50:ad:08:b9:5b:81: ff:2d:5a:59:92:07:62:6a:03:20:d0:80:73:01:54: a9:0c:ea:a8:9e:d7:ad:6f:82:93:3a:64:96:6d:88: 53:c2:7e:51:be:70:fb:c2:8c:93:92:6f:ce:7f:67: 8b:a0:75:23:9c:78:29:bd:f0:99:a7:29:d9:56:66: 04:4a:4c:c2:63:81:95:5a:ab:c9:bb:bb:40:d7:da: 9f:49:61:fe:0f:e3:1f:20:9d:9d:bb:1d:ff:64:6b: 3e:e2:3b:68:ca:aa:3c:92:da:04:43:3d:65:76:b1: db:0d:01:7c:4f:c1:d1:47:22:64:2c:69:a3:c6:09: c2:42:20:b7:9d:c6:eb:26:04:f6:12:7a:97:96:df: 79:60:ad:91:8d:72:ea:0d:8d:cb:c2:84:a7:2d:3b: e8:e7:ee:79:f0:65:55:6c:6c:89:97:34:94:f4:44: 59:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E1:15:52:F4:2E:76:F2:70:BC:2B:DA:C3:C2:36:B9:34:1E:1B:A0 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS212238.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.61.0/24 104.234.120.0/24 104.234.149.0/24 104.234.208.0/24 104.234.240.0/24 Signature Algorithm: sha256WithRSAEncryption c1:45:71:16:cc:8c:ae:6e:e9:23:3d:03:a8:b5:b5:3d:25:49: db:72:84:2d:82:fe:cb:77:89:4f:18:49:b8:38:6f:54:d8:00: 46:57:90:84:3f:63:97:cd:ef:93:4e:3b:60:dc:13:50:87:8a: b3:07:4f:6e:6e:ec:e0:f7:a9:2c:02:eb:e9:d2:84:26:63:94: 78:01:7a:fe:6c:be:36:a0:0a:7d:04:4a:fc:35:7e:e7:8e:94: 9f:fe:5d:b1:67:99:26:88:11:c0:29:8f:4f:ac:7b:4c:70:9d: 39:7a:11:59:3f:54:4e:b9:d6:96:b3:3f:2e:71:c6:dc:d8:86: b5:7f:ed:91:88:ec:d5:d3:34:f0:f8:b2:54:3e:13:07:85:65: ab:66:ee:46:70:f3:04:91:8c:cb:08:01:d3:2f:ab:7a:c4:b1: 1a:01:87:1b:83:88:3b:de:11:a5:2f:84:88:b1:d7:3f:80:91: 2b:b3:5a:d5:a2:07:e6:2a:fe:a0:b2:9a:d4:9d:c9:18:62:7c: 32:aa:0a:f9:4c:84:a0:00:f2:4c:72:8d:0f:05:bf:87:cf:ee: 4b:0e:4a:a3:c4:a4:46:fa:f1:ca:70:87:b3:69:a1:5d:ff:39: e0:24:8a:f4:56:10:92:0d:ff:cb:4e:a7:fa:d5:b2:e0:ff:92: ae:75:e4:0c -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUdA7g4TsYVsh2Ti7zfmPyFIzkDk4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDE0MDAwMTI4WhcNMjcxMDEzMDAwNjI4 WjAzMTEwLwYDVQQDEyg2M0UxMTU1MkY0MkU3NkYyNzBCQzJCREFDM0MyMzZCOTM0 MUUxQkEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hRsLtozL9lW YqG83RKcZKBE8VmebtFskFPotLYSs7fw5JEwEYMWmCaWlO4Fuu9ewRkE9gp/RyFB KCAWai9kPH2xwlg1qXgghQu+v00QHUdveY1QrQi5W4H/LVpZkgdiagMg0IBzAVSp DOqontetb4KTOmSWbYhTwn5RvnD7woyTkm/Of2eLoHUjnHgpvfCZpynZVmYESkzC Y4GVWqvJu7tA19qfSWH+D+MfIJ2dux3/ZGs+4jtoyqo8ktoEQz1ldrHbDQF8T8HR RyJkLGmjxgnCQiC3ncbrJgT2EnqXlt95YK2RjXLqDY3LwoSnLTvo5+558GVVbGyJ lzSU9ERZPQIDAQABo4IClzCCApMwHQYDVR0OBBYEFGPhFVL0LnbycLwr2sPCNrk0 HhugMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzIxMjIzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAGjqPQMEAGjqeAMEAGjqlQMEAGjq 0AMEAGjq8DANBgkqhkiG9w0BAQsFAAOCAQEAwUVxFsyMrm7pIz0DqLW1PSVJ23KE LYL+y3eJTxhJuDhvVNgARleQhD9jl83vk047YNwTUIeKswdPbm7s4PepLALr6dKE JmOUeAF6/my+NqAKfQRK/DV+546Un/5dsWeZJogRwCmPT6x7THCdOXoRWT9UTrnW lrM/LnHG3NiGtX/tkYjs1dM08PiyVD4TB4Vlq2buRnDzBJGMywgB0y+resSxGgGH G4OIO94RpS+EiLHXP4CRK7Na1aIH5ir+oLKa1J3JGGJ8MqoK+UyEoADyTHKNDwW/ h8/uSw5Ko8SkRvrxynCHs2mhXf854CSK9FYQkg3/y06n+tWy4P+SrnXkDA== -----END CERTIFICATE-----Generated at Wed Nov 4 02:02:33 2026 by rpki-client