$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa File: AS267121.roa (raw, json) Hash identifier: 5ZlmOWcprIOGAd0nhSAH7usj3PN91ZBt1F7e1UGNMJg= Subject key identifier: B6:A7:B3:CF:22:C2:10:1F:77:3A:2B:49:77:73:F1:45:90:D0:BC:E5 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 01DC977E904A896180D9DDE3F3D2EDA1C9F75672 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa Signing time: Fri 02 Oct 2026 15:02:38 +0000 ROA not before: Fri 02 Oct 2026 14:57:38 +0000 ROA not after: Fri 01 Oct 2027 15:02:38 +0000 asID: 267121 IP address blocks: 104.234.1.0/24 maxlen: 24 104.234.16.0/24 maxlen: 24 104.234.41.0/24 maxlen: 24 104.234.84.0/24 maxlen: 24 104.234.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 09:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:dc:97:7e:90:4a:89:61:80:d9:dd:e3:f3:d2:ed:a1:c9:f7:56:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Oct 2 14:57:38 2026 GMT Not After : Oct 1 15:02:38 2027 GMT Subject: CN=B6A7B3CF22C2101F773A2B497773F14590D0BCE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:a3:85:9c:ef:1a:fc:be:3f:64:1c:3b:55: 39:04:22:b8:1e:3f:81:31:76:70:4b:f5:da:b5:79: 91:28:77:74:4b:1b:ad:58:ed:6f:05:0c:ed:46:5a: 44:21:60:17:33:5d:8a:63:a6:a5:22:c4:a4:36:66: ea:7f:30:02:fb:9a:60:5a:4e:47:8d:18:e3:b1:87: 86:41:01:b1:c8:fa:90:21:4b:b1:ab:5a:a6:81:dd: 70:c1:b6:8c:b5:a5:1b:02:84:ad:7e:98:58:6d:99: b6:e9:1a:bc:19:d6:c3:f5:5f:d7:42:b4:c9:8c:4a: 69:fb:5e:d8:e4:55:0c:22:9d:6a:5f:4c:2a:d3:b5: a7:e8:36:16:e5:b6:7c:eb:39:d1:a2:3c:77:c7:76: 95:7f:55:e7:8a:b0:8e:7f:95:6b:ee:c1:98:bb:e7: 3c:41:a7:11:86:52:56:fe:91:f5:76:5d:5a:26:1e: f5:88:47:36:6f:36:a6:c2:6e:e2:37:74:49:fc:94: 79:47:8a:ee:45:5e:7e:6e:aa:0d:a6:67:ff:df:a8: 79:d5:f1:3f:e7:41:b8:e8:b8:21:cf:63:81:7b:b5: 59:ef:21:b7:af:68:f8:90:a7:76:3b:35:6f:ad:b0: ce:90:b1:57:6e:c2:0b:d5:7d:dc:cc:ca:4a:b5:97: af:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A7:B3:CF:22:C2:10:1F:77:3A:2B:49:77:73:F1:45:90:D0:BC:E5 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS267121.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.1.0/24 104.234.16.0/24 104.234.41.0/24 104.234.84.0/24 104.234.90.0/24 Signature Algorithm: sha256WithRSAEncryption 51:db:b9:89:b5:1d:5e:7b:48:23:65:91:aa:c0:91:37:e9:a1: 2b:ee:b3:15:e5:14:56:04:24:ae:81:96:00:59:65:dd:70:b3: 39:68:1f:3a:37:3c:e3:e7:14:06:e4:02:5a:1d:41:46:50:56: 69:23:90:6a:65:20:b4:8f:1e:85:cb:96:33:73:ac:5b:14:6e: fd:9a:e9:17:ec:c6:26:3b:1d:e2:c5:2e:ee:f1:d3:b6:78:65: 00:1e:e0:11:40:74:8c:d3:61:bb:df:ed:cf:5b:0d:6c:18:37: 7d:21:fe:c4:ed:5f:b2:db:23:02:35:a2:a8:42:f1:17:ed:71: dd:43:b7:6f:14:a0:f4:4d:81:de:2f:37:61:77:b0:9f:49:6b: 36:ab:c6:8e:99:b5:16:63:ad:44:65:f4:a1:76:8d:7b:37:aa: 1c:04:08:b6:77:f4:9f:42:60:d0:b9:48:a4:2d:fe:d9:91:e1: 58:05:21:0d:d1:26:4d:a0:28:2f:7a:19:34:aa:db:88:68:1b: 27:22:c2:a4:61:eb:af:8e:d5:d0:3c:1e:35:d7:6c:10:9e:05: 63:21:b8:8b:1f:ca:19:99:5e:73:68:bf:23:31:46:86:49:db: 75:3d:5b:ae:d7:10:cc:67:21:c9:06:ee:17:b7:53:05:60:ec: fc:05:b5:0f -----BEGIN CERTIFICATE----- MIIFlzCCBH+gAwIBAgIUAdyXfpBKiWGA2d3j89Ltocn3VnIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYxMDAyMTQ1NzM4WhcNMjcxMDAxMTUwMjM4 WjAzMTEwLwYDVQQDEyhCNkE3QjNDRjIyQzIxMDFGNzczQTJCNDk3NzczRjE0NTkw RDBCQ0U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8GjhZzvGvy+ P2QcO1U5BCK4Hj+BMXZwS/XatXmRKHd0SxutWO1vBQztRlpEIWAXM12KY6alIsSk NmbqfzAC+5pgWk5HjRjjsYeGQQGxyPqQIUuxq1qmgd1wwbaMtaUbAoStfphYbZm2 6Rq8GdbD9V/XQrTJjEpp+17Y5FUMIp1qX0wq07Wn6DYW5bZ86znRojx3x3aVf1Xn irCOf5Vr7sGYu+c8QacRhlJW/pH1dl1aJh71iEc2bzamwm7iN3RJ/JR5R4ruRV5+ bqoNpmf/36h51fE/50G46Lghz2OBe7VZ7yG3r2j4kKd2OzVvrbDOkLFXbsIL1X3c zMpKtZevyQIDAQABo4IClzCCApMwHQYDVR0OBBYEFLans88iwhAfdzorSXdz8UWQ 0LzlMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzI2NzEyMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3 BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAGjqAQMEAGjqEAMEAGjqKQMEAGjq VAMEAGjqWjANBgkqhkiG9w0BAQsFAAOCAQEAUdu5ibUdXntII2WRqsCRN+mhK+6z FeUUVgQkroGWAFll3XCzOWgfOjc84+cUBuQCWh1BRlBWaSOQamUgtI8ehcuWM3Os WxRu/ZrpF+zGJjsd4sUu7vHTtnhlAB7gEUB0jNNhu9/tz1sNbBg3fSH+xO1fstsj AjWiqELxF+1x3UO3bxSg9E2B3i83YXewn0lrNqvGjpm1FmOtRGX0oXaNezeqHAQI tnf0n0Jg0LlIpC3+2ZHhWAUhDdEmTaAoL3oZNKrbiGgbJyLCpGHrr47V0DweNdds EJ4FYyG4ix/KGZlec2i/IzFGhknbdT1brtcQzGchyQbuF7dTBWDs/AW1Dw== -----END CERTIFICATE-----Generated at Sun Oct 11 22:14:33 2026 by rpki-client