$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa File: AS400529.roa (raw, json) Hash identifier: gEeEjW0ACEUn5bwsrUxokFEBzXCyjoE3nZigAo+6eYE= Subject key identifier: A4:A9:57:32:26:BD:5A:D6:CD:43:34:0E:AC:EA:35:7F:F4:DA:63:72 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 1BD32EF896B20BAE33A75C9670DC1C7E8DCB8EA7 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa Signing time: Wed 13 Aug 2025 16:02:24 +0000 ROA not before: Wed 13 Aug 2025 15:57:24 +0000 ROA not after: Wed 12 Aug 2026 16:02:24 +0000 asID: 400529 IP address blocks: 104.234.107.0/24 maxlen: 24 104.234.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 23:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d3:2e:f8:96:b2:0b:ae:33:a7:5c:96:70:dc:1c:7e:8d:cb:8e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: Aug 13 15:57:24 2025 GMT Not After : Aug 12 16:02:24 2026 GMT Subject: CN=A4A9573226BD5AD6CD43340EACEA357FF4DA6372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:8c:47:9d:b1:83:52:04:85:ff:63:81:67: 16:64:69:4d:1f:d5:00:8d:70:a9:23:ac:1d:56:cb: a3:90:2d:e5:0d:bb:29:55:96:46:b4:04:36:0e:b7: 97:b2:bd:d1:b2:cb:bf:0c:73:f4:84:65:5d:ef:96: c7:08:f1:f8:d4:69:a7:82:ba:f7:30:2e:d9:f0:96: 86:e5:77:86:5b:af:06:a4:0e:06:63:50:3a:fb:5c: d5:38:f8:73:37:4c:f4:88:e1:01:9f:92:cd:ac:f5: 4d:99:fb:81:19:84:7a:a7:53:08:f9:3d:1d:bd:d3: 4c:91:32:50:8b:ad:dd:b5:8e:ac:0d:fb:95:e5:97: 4a:b6:fc:1c:5b:2a:fd:10:4c:5f:7f:54:15:7c:38: 35:8c:74:00:45:ac:1a:89:0d:b3:0d:a1:56:8a:d4: 90:fc:10:1e:22:8d:ee:81:a3:7f:8d:d8:00:ee:3f: 98:de:02:6b:d5:e0:8c:37:ff:ca:57:42:4b:1e:c2: 50:6b:1c:5d:2f:00:41:ae:27:69:25:f5:36:1f:c5: 01:f2:c7:1c:a2:ec:ca:c6:d4:7f:fd:9c:15:01:7e: a4:02:be:07:b4:4b:7a:d2:22:49:90:26:93:6c:c6: d6:d9:f6:75:92:33:36:5c:8c:0a:c8:85:af:55:65: 6a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A9:57:32:26:BD:5A:D6:CD:43:34:0E:AC:EA:35:7F:F4:DA:63:72 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS400529.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.107.0/24 104.234.220.0/24 Signature Algorithm: sha256WithRSAEncryption 06:c5:3d:43:66:81:f1:a4:29:5e:26:cd:b4:8e:c5:76:54:28: 92:ea:47:45:17:d3:59:24:02:3c:28:58:f5:58:c7:89:d2:94: df:a8:98:15:6f:e0:99:42:05:08:be:96:2c:b7:ea:17:c1:28: 24:ee:c5:8f:1a:93:1f:3f:f7:47:b2:60:be:04:35:59:db:d8: cc:26:ed:e5:7e:c5:02:4d:ac:98:3b:b8:3b:f4:bc:cf:75:30: c0:08:7a:3b:08:4a:ef:8e:7a:1a:b6:b8:c4:b9:f0:ab:bc:07: f8:39:58:77:fa:0f:c0:ac:12:ca:18:5b:94:9f:3c:a8:c4:92: e3:5e:37:c6:f7:08:fb:9d:34:7f:f2:de:e1:27:c3:74:6b:6c: 13:f1:c5:57:b8:89:41:ca:65:20:44:aa:e9:b2:5a:55:25:28: d9:29:27:a5:3c:a6:2d:22:12:5a:dc:4a:5c:19:f7:d2:c5:11: ad:c1:01:d7:24:ee:dc:ea:10:ad:e2:50:34:3b:d9:3b:38:5c: 70:3b:90:2e:2f:65:82:d7:1c:38:e8:d4:23:17:63:b2:dc:1b: 0e:2f:09:0e:c8:4c:3d:fa:05:68:28:a4:8f:af:5a:9a:bb:60: d8:18:e7:f8:3b:44:49:26:43:3e:ed:79:b8:cb:7b:53:54:5c: b4:03:d7:7b -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIUG9Mu+JayC64zp1yWcNwcfo3LjqcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwODEzMTU1NzI0WhcNMjYwODEyMTYwMjI0 WjAzMTEwLwYDVQQDEyhBNEE5NTczMjI2QkQ1QUQ2Q0Q0MzM0MEVBQ0VBMzU3RkY0 REE2MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQmMR52xg1IE hf9jgWcWZGlNH9UAjXCpI6wdVsujkC3lDbspVZZGtAQ2DreXsr3Rssu/DHP0hGVd 75bHCPH41Gmngrr3MC7Z8JaG5XeGW68GpA4GY1A6+1zVOPhzN0z0iOEBn5LNrPVN mfuBGYR6p1MI+T0dvdNMkTJQi63dtY6sDfuV5ZdKtvwcWyr9EExff1QVfDg1jHQA RawaiQ2zDaFWitSQ/BAeIo3ugaN/jdgA7j+Y3gJr1eCMN//KV0JLHsJQaxxdLwBB ridpJfU2H8UB8sccouzKxtR//ZwVAX6kAr4HtEt60iJJkCaTbMbW2fZ1kjM2XIwK yIWvVWVqzwIDAQABo4IChTCCAoEwHQYDVR0OBBYEFKSpVzImvVrWzUM0DqzqNX/0 2mNyMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzQwMDUyOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGjqawMEAGjq3DANBgkqhkiG9w0B AQsFAAOCAQEABsU9Q2aB8aQpXibNtI7FdlQokupHRRfTWSQCPChY9VjHidKU36iY FW/gmUIFCL6WLLfqF8EoJO7FjxqTHz/3R7JgvgQ1WdvYzCbt5X7FAk2smDu4O/S8 z3UwwAh6OwhK7456Gra4xLnwq7wH+DlYd/oPwKwSyhhblJ88qMSS4143xvcI+500 f/Le4SfDdGtsE/HFV7iJQcplIESq6bJaVSUo2SknpTymLSISWtxKXBn30sURrcEB 1yTu3OoQreJQNDvZOzhccDuQLi9lgtccOOjUIxdjstwbDi8JDshMPfoFaCikj69a mrtg2Bjn+DtESSZDPu15uMt7U1RctAPXew== -----END CERTIFICATE-----Generated at Thu Aug 21 05:35:08 2025 by rpki-client