$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa File: AS399486.roa (raw, json) Hash identifier: 2WENfMB50Lkz0AKVu63pwpaffIs52t6mxcQ+G0E7xms= Subject key identifier: C1:71:BB:0A:77:7F:CB:B2:8C:FC:15:96:05:17:4F:78:55:09:28:0A Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2A862CBD89EEA4459F5BCE83094E23404951F571 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa Signing time: Sun 30 Aug 2026 13:36:20 +0000 ROA not before: Sun 30 Aug 2026 13:31:20 +0000 ROA not after: Sun 29 Aug 2027 13:36:20 +0000 asID: 399486 IP address blocks: 104.234.204.0/24 maxlen: 24 104.234.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:86:2c:bd:89:ee:a4:45:9f:5b:ce:83:09:4e:23:40:49:51:f5:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 30 13:31:20 2026 GMT Not After : Aug 29 13:36:20 2027 GMT Subject: CN=C171BB0A777FCBB28CFC159605174F785509280A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:32:8c:17:d9:bc:4c:a4:06:b5:d6:e0:40:81: 1d:31:e7:a2:3d:8b:d9:68:47:3f:e5:ff:f6:b3:4b: a6:c5:31:46:59:73:9d:5c:61:bc:a0:c2:79:be:dc: 16:c0:11:f4:1c:e9:dc:19:03:5d:8b:33:1c:b3:0d: b5:8e:e3:22:62:a5:a0:9f:e0:d0:65:a8:d3:a0:e7: 07:d9:79:e0:70:9b:78:83:99:3e:b5:6c:e7:19:65: 01:81:d0:9f:bc:a9:68:09:f9:bb:c2:60:4f:74:33: 38:4f:c0:dc:80:a9:dd:aa:0f:51:4c:8d:bd:2a:e0: e4:0f:d7:48:a4:aa:fb:64:e3:1d:12:eb:f7:70:3f: 4d:03:2d:3c:88:31:08:d3:15:f8:09:31:d0:e9:7b: bb:4e:45:76:d3:17:5a:52:f3:57:20:62:b5:3c:5c: ee:c9:51:73:b8:95:d9:81:0c:8f:5f:e0:8a:97:77: 3f:5a:9d:49:48:0b:58:ec:8b:db:52:42:5e:45:0e: 1a:a7:70:e5:3d:cc:b5:12:4e:8d:fe:2c:0e:ee:db: 6c:82:ab:ae:12:e7:18:ad:21:28:43:13:ee:1e:eb: 11:68:cd:b8:d0:09:9e:43:ef:48:1f:46:28:65:bf: 1a:40:b5:6c:80:47:e7:af:4d:93:25:51:e3:e1:2c: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:71:BB:0A:77:7F:CB:B2:8C:FC:15:96:05:17:4F:78:55:09:28:0A X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS399486.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.204.0/23 Signature Algorithm: sha256WithRSAEncryption 99:e7:21:bb:4c:e6:29:c3:ba:f4:ae:11:f6:e5:1a:70:5f:19: 7c:f2:8f:cb:e5:68:60:71:97:f0:01:f8:29:4e:49:78:30:12: 5a:d7:87:5b:8d:12:97:b9:3e:e1:32:8f:20:10:07:31:b0:5e: 95:5c:7b:41:fe:bf:7b:3f:36:dc:28:e0:fe:da:24:11:54:3e: 9f:4c:6a:f4:81:89:98:ac:8b:35:57:57:46:11:22:28:c9:07: be:2b:7e:ec:1f:21:af:2c:56:6a:7b:5c:17:30:41:bd:f4:13: b9:87:df:7a:0b:82:8a:01:d5:58:45:7e:2e:25:2f:22:7f:9c: 5f:2a:35:8a:83:05:23:bf:14:06:7f:04:f9:23:f5:d9:fa:7b: 39:9c:6f:1b:61:49:18:69:c6:c3:a7:cc:09:94:53:14:85:53: c4:2d:5a:9e:2c:65:7b:4d:5c:2c:f8:81:72:ba:2a:ab:65:65: ab:77:9e:c2:6e:0d:0c:38:e2:3b:49:25:95:88:84:64:c9:97: 09:03:ae:12:94:9b:fc:3b:1a:4e:f7:db:4b:ab:21:e6:b1:aa: b2:bd:94:99:38:d3:5f:9b:bd:85:28:c1:27:9f:31:9b:c6:50: c3:5e:aa:76:32:00:88:0b:1f:de:2d:dd:cf:11:ff:e0:8f:62: 62:8c:b3:6c -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIUKoYsvYnupEWfW86DCU4jQElR9XEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwODMwMTMzMTIwWhcNMjcwODI5MTMzNjIw WjAzMTEwLwYDVQQDEyhDMTcxQkIwQTc3N0ZDQkIyOENGQzE1OTYwNTE3NEY3ODU1 MDkyODBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDKMF9m8TKQG tdbgQIEdMeeiPYvZaEc/5f/2s0umxTFGWXOdXGG8oMJ5vtwWwBH0HOncGQNdizMc sw21juMiYqWgn+DQZajToOcH2XngcJt4g5k+tWznGWUBgdCfvKloCfm7wmBPdDM4 T8DcgKndqg9RTI29KuDkD9dIpKr7ZOMdEuv3cD9NAy08iDEI0xX4CTHQ6Xu7TkV2 0xdaUvNXIGK1PFzuyVFzuJXZgQyPX+CKl3c/Wp1JSAtY7IvbUkJeRQ4ap3DlPcy1 Ek6N/iwO7ttsgquuEucYrSEoQxPuHusRaM240AmeQ+9IH0YoZb8aQLVsgEfnr02T JVHj4SziYQIDAQABo4ICfzCCAnswHQYDVR0OBBYEFMFxuwp3f8uyjPwVlgUXT3hV CSgKMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzM5OTQ4Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWjqzDANBgkqhkiG9w0BAQsFAAOC AQEAmechu0zmKcO69K4R9uUacF8ZfPKPy+VoYHGX8AH4KU5JeDASWteHW40Sl7k+ 4TKPIBAHMbBelVx7Qf6/ez823Cjg/tokEVQ+n0xq9IGJmKyLNVdXRhEiKMkHvit+ 7B8hryxWantcFzBBvfQTuYffeguCigHVWEV+LiUvIn+cXyo1ioMFI78UBn8E+SP1 2fp7OZxvG2FJGGnGw6fMCZRTFIVTxC1anixle01cLPiBcroqq2Vlq3eewm4NDDji O0kllYiEZMmXCQOuEpSb/DsaTvfbS6sh5rGqsr2UmTjTX5u9hSjBJ58xm8ZQw16q djIAiAsf3i3dzxH/4I9iYoyzbA== -----END CERTIFICATE-----Generated at Fri Sep 4 21:26:40 2026 by rpki-client