$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25693.roa File: AS25693.roa (raw, json) Hash identifier: cEB112VU4eMb284R2Z4+y0D9mgfbtUtpa08ItwP/+vI= Subject key identifier: B5:BA:97:56:46:01:3E:FF:2E:27:E5:46:D0:10:07:77:15:BF:32:36 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 17758B9CE7F3B3BF0955E50A34423C4FF7C5BB7B Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25693.roa Signing time: Wed 04 Mar 2026 18:35:53 +0000 ROA not before: Wed 04 Mar 2026 18:30:53 +0000 ROA not after: Wed 03 Mar 2027 18:35:53 +0000 asID: 25693 IP address blocks: 104.234.24.0/23 maxlen: 24 104.234.36.0/23 maxlen: 24 104.234.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Mar 2026 19:12:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:75:8b:9c:e7:f3:b3:bf:09:55:e5:0a:34:42:3c:4f:f7:c5:bb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Mar 4 18:30:53 2026 GMT Not After : Mar 3 18:35:53 2027 GMT Subject: CN=B5BA975646013EFF2E27E546D010077715BF3236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0a:6b:21:7d:9f:29:9e:83:ac:c9:90:50:4a: fc:68:3b:33:de:c1:4d:e4:b7:d5:fc:c3:36:72:4e: e7:bf:b4:58:5a:ce:c3:f5:46:f4:4e:d7:94:45:df: ed:64:80:fa:1f:3e:7a:a6:9f:0d:11:7e:44:41:38: 12:a5:d6:b7:73:07:54:eb:b4:e9:0f:14:68:49:96: cb:15:65:b0:e3:8e:8e:c0:05:4e:43:13:ef:e8:3f: d0:83:42:ab:86:9d:0f:d6:ba:35:fb:08:01:a4:bf: bb:68:24:b9:6d:c6:d9:4a:77:d1:75:b3:a8:30:3f: d4:02:36:c9:46:eb:62:09:8b:77:de:a0:b0:80:82: 96:db:75:3e:bc:85:ca:d0:53:f6:6e:13:3d:e1:a3: 68:b2:98:7f:06:e2:9a:25:6c:a1:ac:31:07:fe:79: ba:9e:42:54:f7:71:de:b8:1b:df:d5:9c:5f:86:90: 47:bf:b0:92:3c:76:e5:77:4d:ea:ae:2c:7a:ca:9b: 19:4d:f8:53:2d:55:be:62:39:1a:fd:e7:39:f1:06: 31:ec:91:69:85:a9:ac:64:f8:93:5b:e4:1e:a7:b5: 04:f0:0b:64:39:0b:4a:b6:39:69:47:92:4d:5b:44: 9e:fb:c6:b1:f7:25:2f:f9:91:89:d0:11:77:f6:92: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BA:97:56:46:01:3E:FF:2E:27:E5:46:D0:10:07:77:15:BF:32:36 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS25693.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.24.0/23 104.234.36.0/23 104.234.60.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:3a:44:ff:3d:52:f8:b8:08:18:24:47:c8:25:c5:50:68:03: 5f:75:7f:00:2a:63:e6:9c:ac:ae:fb:2e:52:7d:4a:f9:0e:62: f8:6e:f5:23:1f:92:92:99:d6:05:56:f7:94:66:a5:bf:dc:7b: 8e:df:f7:3a:ac:bb:dc:d1:68:4c:9d:06:07:13:d2:03:99:67: 0d:ea:25:d5:d7:4d:0b:b7:00:30:36:01:ce:77:cf:cb:63:30: 9f:ab:2b:66:b5:cf:17:a9:2a:e5:df:6d:57:e0:cc:14:91:8e: e0:b5:a6:a1:3b:50:2d:07:87:4f:6b:2b:8b:66:ce:7a:ac:98: 39:79:2b:0f:c3:5f:74:ab:52:82:b6:41:ee:7e:b8:96:1b:73: 2a:57:a8:ef:b5:3f:7f:91:00:ab:bf:2a:56:9a:56:f6:2e:ad: a2:5f:d0:6e:58:27:02:0f:73:2c:c8:fb:f7:4b:38:eb:6a:fc: a5:7a:7e:6b:e7:87:fc:77:1d:f7:dc:ab:79:b7:32:54:81:0c: 74:f9:25:74:0f:08:12:72:4e:3c:00:36:ed:73:d6:09:81:0f: b5:1f:b1:65:9a:8c:85:6c:00:91:52:b3:7b:bd:d3:80:7a:bc: b8:ba:c6:78:7d:fb:77:e6:b5:fc:e9:55:70:ae:f0:fc:87:a7: ad:60:ed:09 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUF3WLnOfzs78JVeUKNEI8T/fFu3swDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwMzA0MTgzMDUzWhcNMjcwMzAzMTgzNTUz WjAzMTEwLwYDVQQDEyhCNUJBOTc1NjQ2MDEzRUZGMkUyN0U1NDZEMDEwMDc3NzE1 QkYzMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQprIX2fKZ6D rMmQUEr8aDsz3sFN5LfV/MM2ck7nv7RYWs7D9Ub0TteURd/tZID6Hz56pp8NEX5E QTgSpda3cwdU67TpDxRoSZbLFWWw446OwAVOQxPv6D/Qg0Krhp0P1ro1+wgBpL+7 aCS5bcbZSnfRdbOoMD/UAjbJRutiCYt33qCwgIKW23U+vIXK0FP2bhM94aNosph/ BuKaJWyhrDEH/nm6nkJU93HeuBvf1ZxfhpBHv7CSPHbld03qrix6ypsZTfhTLVW+ Yjka/ec58QYx7JFphamsZPiTW+Qep7UE8AtkOQtKtjlpR5JNW0Se+8ax9yUv+ZGJ 0BF39pLdKQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFLW6l1ZGAT7/LiflRtAQB3cV vzI2MB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI1NjkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBaOoYAwQBaOokAwQBaOo8MA0GCSqG SIb3DQEBCwUAA4IBAQB6OkT/PVL4uAgYJEfIJcVQaANfdX8AKmPmnKyu+y5SfUr5 DmL4bvUjH5KSmdYFVveUZqW/3HuO3/c6rLvc0WhMnQYHE9IDmWcN6iXV100LtwAw NgHOd8/LYzCfqytmtc8XqSrl321X4MwUkY7gtaahO1AtB4dPayuLZs56rJg5eSsP w190q1KCtkHufriWG3MqV6jvtT9/kQCrvypWmlb2Lq2iX9BuWCcCD3MsyPv3Szjr avylen5r54f8dx333Kt5tzJUgQx0+SV0DwgSck48ADbtc9YJgQ+1H7FlmoyFbACR UrN7vdOAery4usZ4fft35rX86VVwrvD8h6etYO0J -----END CERTIFICATE-----Generated at Fri Mar 6 20:53:48 2026 by rpki-client