$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa File: AS9304.roa (raw, json) Hash identifier: NDVxfi8PeTeKUSWYwq9JO3PZR9V9SMUMswvd6E0wLL8= Subject key identifier: 1F:2C:D5:FF:B1:D4:25:9A:AE:D6:14:3F:13:CE:B6:54:5A:FB:1B:73 Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Certificate serial: 2554F9DBD64AEC7E542F27436DDF0979BA21B761 Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa Signing time: Mon 25 May 2026 12:17:49 +0000 ROA not before: Mon 25 May 2026 12:12:49 +0000 ROA not after: Mon 24 May 2027 12:17:49 +0000 asID: 9304 IP address blocks: 104.234.28.0/24 maxlen: 24 104.234.104.0/24 maxlen: 24 104.234.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 03 Jun 2026 14:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:54:f9:db:d6:4a:ec:7e:54:2f:27:43:6d:df:09:79:ba:21:b7:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9 Validity Not Before: May 25 12:12:49 2026 GMT Not After : May 24 12:17:49 2027 GMT Subject: CN=1F2CD5FFB1D4259AAED6143F13CEB6545AFB1B73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c3:8e:20:39:2a:9f:27:b2:06:5b:7b:57:e9: 23:f6:ce:8c:23:cb:38:ea:32:20:14:8e:22:9f:6b: 13:cb:78:19:07:19:42:c4:2f:47:0c:ff:74:29:4b: 93:3a:c6:35:da:97:94:2b:bd:6c:de:5a:c1:81:58: cc:71:02:12:44:a7:10:6a:f4:dc:21:c1:01:9a:a7: 47:48:46:17:a1:e5:e5:44:85:d0:a1:1d:b8:0a:c6: 5d:1d:de:59:e9:2d:cc:86:1c:1b:43:fe:58:2e:e7: 0e:65:bb:c1:3f:4d:34:2a:c0:f7:2f:46:9e:a8:3b: 69:ff:ff:fa:7d:e2:45:d0:ec:7f:46:6e:c0:3e:5d: 24:e0:ee:90:7e:9e:72:58:98:7b:f2:46:d9:4e:b2: 4f:f5:3e:56:c1:e3:5b:2a:c6:cf:1d:8a:45:96:26: f7:a2:0c:d2:02:c1:55:73:7a:f1:df:3a:d6:7d:1c: fd:a7:ac:d1:d3:3f:13:1c:8d:2b:c2:47:c2:2c:7a: 34:99:b3:89:74:01:7b:09:70:c1:f6:7f:dd:ad:1d: c3:8e:5e:11:00:58:16:ab:a3:67:16:2a:35:d2:3d: df:1b:e7:12:ec:f3:95:57:bd:f3:0e:f7:bb:10:20: f7:5f:1a:cf:82:db:db:c2:01:3f:8e:04:e0:d1:f5: b6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:2C:D5:FF:B1:D4:25:9A:AE:D6:14:3F:13:CE:B6:54:5A:FB:1B:73 X509v3 Authority Key Identifier: keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.234.28.0/24 104.234.104.0/24 104.234.184.0/24 Signature Algorithm: sha256WithRSAEncryption 57:9a:b8:99:81:cf:bd:05:f7:d7:db:38:ac:04:e4:14:c7:c2: 92:95:14:be:1f:ea:77:da:bb:0c:3b:a6:07:79:38:20:a5:f8: 05:6e:27:ae:08:56:a9:93:17:ae:ad:e5:0c:19:36:2d:d3:17: 5f:c3:df:df:fe:b7:33:26:ca:a2:e8:fd:4e:85:71:ff:f5:7a: 6a:36:60:67:a9:12:19:42:0d:e1:ab:6d:ea:27:ed:5b:f5:2f: a5:d2:04:e8:cb:12:c9:0d:7f:12:59:ec:7e:14:f0:a9:44:9d: 57:55:87:2a:a1:c3:b5:35:ea:e8:76:90:0d:98:3f:ce:ab:0e: 88:8d:eb:1a:1a:12:6d:98:6b:c5:28:c1:b8:49:6a:82:ba:e7: 73:2d:b5:f7:c5:1b:e7:b0:da:ef:f3:30:98:14:13:75:4e:0f: 71:a0:9d:7e:14:ba:c7:17:2c:8c:49:2c:f0:8b:d0:43:0f:16: a6:10:45:66:dc:2c:51:6c:70:23:5d:51:a1:2b:ab:37:7b:19: 32:f6:39:34:22:ca:d5:56:e7:06:39:f4:97:c9:14:1e:b5:8b: ec:d8:19:80:ef:cf:90:17:5f:a2:c4:0b:8a:74:ae:88:66:00: 23:23:03:3a:22:d2:29:2d:ce:21:70:37:a4:f3:e1:59:16:f4: 06:1e:2c:5f -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgIUJVT529ZK7H5ULydDbd8Jeboht2EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNTI1MTIxMjQ5WhcNMjcwNTI0MTIxNzQ5 WjAzMTEwLwYDVQQDEygxRjJDRDVGRkIxRDQyNTlBQUVENjE0M0YxM0NFQjY1NDVB RkIxQjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosOOIDkqnyey Blt7V+kj9s6MI8s46jIgFI4in2sTy3gZBxlCxC9HDP90KUuTOsY12peUK71s3lrB gVjMcQISRKcQavTcIcEBmqdHSEYXoeXlRIXQoR24CsZdHd5Z6S3MhhwbQ/5YLucO ZbvBP000KsD3L0aeqDtp///6feJF0Ox/Rm7APl0k4O6Qfp5yWJh78kbZTrJP9T5W weNbKsbPHYpFlib3ogzSAsFVc3rx3zrWfRz9p6zR0z8THI0rwkfCLHo0mbOJdAF7 CXDB9n/drR3Djl4RAFgWq6NnFio10j3fG+cS7POVV73zDve7ECD3XxrPgtvbwgE/ jgTg0fW2ZQIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFB8s1f+x1CWartYUPxPOtlRa +xtzMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABo6hwDBABo6mgDBABo6rgwDQYJKoZI hvcNAQELBQADggEBAFeauJmBz70F99fbOKwE5BTHwpKVFL4f6nfauww7pgd5OCCl +AVuJ64IVqmTF66t5QwZNi3TF1/D39/+tzMmyqLo/U6Fcf/1emo2YGepEhlCDeGr beon7Vv1L6XSBOjLEskNfxJZ7H4U8KlEnVdVhyqhw7U16uh2kA2YP86rDoiN6xoa Em2Ya8UowbhJaoK653MttffFG+ew2u/zMJgUE3VOD3GgnX4UuscXLIxJLPCL0EMP FqYQRWbcLFFscCNdUaErqzd7GTL2OTQiytVW5wY59JfJFB61i+zYGYDvz5AXX6LE C4p0rohmACMjAzoi0iktziFwN6Tz4VkW9AYeLF8= -----END CERTIFICATE-----Generated at Tue Jun 2 20:51:30 2026 by rpki-client