$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa File: AS267121.roa (raw, json) Hash identifier: 5Dzh3LKmvhqDxuEmikpEwDYY0n/+Ojo42QHP7gxwHWo= Subject key identifier: 26:03:70:65:86:C0:7F:64:BA:58:AD:27:7D:9F:FC:4B:C7:EA:BE:0D Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 7A1032A1C94553659C59C5B92B42CB02E20ECA3A Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa Signing time: Wed 05 Nov 2025 12:54:20 +0000 ROA not before: Wed 05 Nov 2025 12:49:20 +0000 ROA not after: Wed 04 Nov 2026 12:54:20 +0000 asID: 267121 IP address blocks: 104.234.41.0/24 maxlen: 24 104.234.84.0/24 maxlen: 24 104.234.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 09 Nov 2025 09:07:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:10:32:a1:c9:45:53:65:9c:59:c5:b9:2b:42:cb:02:e2:0e:ca:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Nov 5 12:49:20 2025 GMT Not After : Nov 4 12:54:20 2026 GMT Subject: CN=2603706586C07F64BA58AD277D9FFC4BC7EABE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cc:e3:bf:88:99:24:d8:11:53:28:f0:a7:3a: d2:aa:75:ce:2f:f9:fa:a0:c0:c4:53:a9:d7:07:d3: 92:9d:b5:ab:b9:f0:a8:7d:2b:69:1c:b2:2d:0d:65: 96:b2:61:73:ed:3a:9a:ec:54:f2:9e:d8:c1:fb:2e: 00:c7:c9:38:c8:ef:e9:0e:75:af:4d:5c:a2:e3:1f: 31:72:8f:2a:88:ee:7a:18:b8:97:77:88:4b:3d:ca: 17:ba:d8:cc:6c:43:3c:da:cf:7f:ca:de:4a:8c:32: dd:0b:30:fd:05:c3:f5:aa:54:ff:fc:9e:2f:8f:a9: c4:93:81:d6:c9:66:de:6b:da:12:a8:a0:41:a2:2a: 12:d3:03:b5:ae:fe:03:42:64:ee:f5:1f:b7:29:47: 36:2a:0d:0a:73:24:e8:49:dc:49:ec:93:c9:7e:4c: 92:ce:81:34:ff:23:e7:e3:e9:a4:a1:8c:68:33:ed: 8b:11:52:5e:ee:d4:0a:99:62:cc:0b:fc:f0:59:54: b4:ff:fd:72:0d:34:6e:95:7e:7b:6a:2c:e8:a9:15: b5:99:4f:26:cf:65:89:c5:ab:73:78:31:bc:0d:da: 19:46:2c:4c:e9:81:f2:4e:84:3c:f6:2b:db:eb:37: 0c:90:e4:20:d2:24:9d:9b:36:3e:a0:ae:d5:4d:26: df:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:03:70:65:86:C0:7F:64:BA:58:AD:27:7D:9F:FC:4B:C7:EA:BE:0D X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.41.0/24 104.234.84.0/24 104.234.90.0/24 Signature Algorithm: sha256WithRSAEncryption b9:8a:82:c8:5c:27:0a:35:e4:1b:3b:88:e7:e4:ad:5f:c6:2c: bc:da:25:98:e6:b0:0c:b1:eb:4b:a7:2b:66:f2:04:85:1b:a1: 8d:41:9f:cf:26:d6:14:9b:c6:f1:32:73:57:7f:14:fc:d0:bc: ec:ae:c5:39:e2:df:60:81:b0:00:4c:18:4b:e7:6a:41:bd:0d: 50:5d:a9:b6:0f:9b:49:4c:b2:d5:85:ea:b7:0f:e7:70:b6:34: 92:9d:7c:e1:4f:db:07:c5:d8:0d:54:eb:ff:0a:6e:76:bd:18: 38:dc:fc:2a:b8:49:a4:a1:89:06:5e:5f:84:f4:30:bd:17:85: ce:63:50:b0:d8:08:24:b2:5a:3d:4c:f0:0a:e1:53:1f:62:20: d5:04:58:a1:5c:86:92:80:2e:5c:10:90:2a:06:4c:f6:4f:10: 86:f1:f4:37:17:0f:df:a8:c8:43:9b:0b:61:6d:94:82:e7:06: ce:ba:9e:86:ef:3e:53:5b:5d:17:b7:5a:c2:49:cf:dc:9d:da: 48:e8:f4:2f:a1:b7:b1:08:5a:a3:4b:c8:42:31:22:dc:a8:fc: bd:62:a3:a9:67:ad:e5:11:70:b2:ff:31:00:f0:ec:8a:cc:e2: 08:97:29:31:66:00:f7:52:6f:ab:f3:31:9e:37:13:33:ae:95: 2b:70:56:dd -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgIUehAyoclFU2WcWcW5K0LLAuIOyjowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUxMTA1MTI0OTIwWhcNMjYxMTA0MTI1NDIw WjAzMTEwLwYDVQQDEygyNjAzNzA2NTg2QzA3RjY0QkE1OEFEMjc3RDlGRkM0QkM3 RUFCRTBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18zjv4iZJNgR UyjwpzrSqnXOL/n6oMDEU6nXB9OSnbWrufCofStpHLItDWWWsmFz7Tqa7FTyntjB +y4Ax8k4yO/pDnWvTVyi4x8xco8qiO56GLiXd4hLPcoXutjMbEM82s9/yt5KjDLd CzD9BcP1qlT//J4vj6nEk4HWyWbea9oSqKBBoioS0wO1rv4DQmTu9R+3KUc2Kg0K cyToSdxJ7JPJfkySzoE0/yPn4+mkoYxoM+2LEVJe7tQKmWLMC/zwWVS0//1yDTRu lX57aizoqRW1mU8mz2WJxatzeDG8DdoZRixM6YHyToQ89ivb6zcMkOQg0iSdmzY+ oK7VTSbfvQIDAQABo4ICizCCAocwHQYDVR0OBBYEFCYDcGWGwH9kulitJ32f/EvH 6r4NMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI2NzEyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAGjqKQMEAGjqVAMEAGjqWjANBgkq hkiG9w0BAQsFAAOCAQEAuYqCyFwnCjXkGzuI5+StX8YsvNolmOawDLHrS6crZvIE hRuhjUGfzybWFJvG8TJzV38U/NC87K7FOeLfYIGwAEwYS+dqQb0NUF2ptg+bSUyy 1YXqtw/ncLY0kp184U/bB8XYDVTr/wpudr0YONz8KrhJpKGJBl5fhPQwvReFzmNQ sNgIJLJaPUzwCuFTH2Ig1QRYoVyGkoAuXBCQKgZM9k8QhvH0NxcP36jIQ5sLYW2U gucGzrqehu8+U1tdF7dawknP3J3aSOj0L6G3sQhao0vIQjEi3Kj8vWKjqWet5RFw sv8xAPDsisziCJcpMWYA91Jvq/MxnjcTM66VK3BW3Q== -----END CERTIFICATE-----Generated at Sat Nov 8 22:57:02 2025 by rpki-client