
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File: AS9304.roa (raw, json)
Hash identifier: l4Z/6JWzR/C36ouG/b/aFvR8Zi8ZeoCqD5R9ej92yWs=
Subject key identifier: CB:BA:32:AB:D9:97:2C:2A:16:54:B9:AA:8A:4E:38:BF:71:16:B4:20
Certificate issuer: /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial: 7A27649E4012E99FB4F245DF0EF5F40333D06A32
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time: Sun 05 Jul 2026 06:24:49 +0000
ROA not before: Sun 05 Jul 2026 06:19:49 +0000
ROA not after: Sun 04 Jul 2027 06:24:49 +0000
asID: 9304
IP address blocks: 104.234.28.0/24 maxlen: 24
104.234.104.0/24 maxlen: 24
104.234.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Jul 2026 11:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:27:64:9e:40:12:e9:9f:b4:f2:45:df:0e:f5:f4:03:33:d0:6a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Validity
Not Before: Jul 5 06:19:49 2026 GMT
Not After : Jul 4 06:24:49 2027 GMT
Subject: CN=CBBA32ABD9972C2A1654B9AA8A4E38BF7116B420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:68:6d:13:7a:e9:c5:79:24:08:be:3b:d0:22:
d3:d5:c4:a5:ec:86:83:b5:8f:5f:a8:01:b0:90:ce:
1a:e9:56:f4:ea:05:32:38:11:0a:05:55:c0:87:83:
80:dc:9c:e5:30:d7:3a:0b:06:ad:20:60:40:ff:10:
3e:4d:cc:27:88:7b:5a:77:ce:33:81:10:45:00:6d:
5a:4a:8a:dc:73:cd:e6:a2:ae:ed:51:e3:e8:01:13:
d2:ae:66:07:a4:c0:2c:b9:e3:73:cf:66:74:c5:b6:
9c:8b:21:d2:c6:19:54:15:5b:62:78:10:fc:f9:b9:
43:d9:80:4c:f1:2c:7b:d5:e7:6a:0b:29:7d:b8:25:
f5:96:95:ac:2f:89:5b:27:1a:1e:9b:a0:ea:bd:9e:
99:70:e9:41:00:bd:f6:ff:0b:4b:23:8a:2e:4e:90:
5b:54:35:47:84:25:bf:a7:02:20:92:bb:9e:e2:4a:
f3:ee:e6:7e:d0:49:43:b9:2c:b9:cb:05:ad:ac:50:
4c:88:76:02:7e:d4:57:b4:dc:18:8b:53:5e:14:88:
e1:fe:db:10:da:ab:92:c9:5a:19:5f:26:87:ea:63:
bd:5f:c1:ce:5e:60:e4:37:18:ec:4f:55:20:31:69:
82:45:7b:f3:a7:93:ca:c3:eb:cf:63:46:b4:61:49:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BA:32:AB:D9:97:2C:2A:16:54:B9:AA:8A:4E:38:BF:71:16:B4:20
X509v3 Authority Key Identifier:
keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.234.28.0/24
104.234.104.0/24
104.234.184.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:e9:d1:5c:a6:c8:ff:90:09:9d:c9:9d:60:c2:1a:34:aa:ec:
30:9f:ec:0f:90:36:7a:b2:03:52:a6:ca:c1:8e:6c:a9:01:4b:
55:f4:38:aa:da:a4:9c:ea:48:db:d0:c8:95:28:78:e7:c9:9d:
01:15:b0:92:bc:fe:2f:96:7e:e3:b4:79:fd:fc:2e:2a:c5:c3:
51:8b:9c:8e:9c:4f:6a:29:34:53:60:14:0e:26:f5:1b:bd:62:
f0:7b:92:57:5b:23:fb:f9:e6:b9:f4:a0:97:b2:d1:e5:29:a6:
84:b5:86:fd:f6:31:81:1a:bb:2e:43:1d:52:78:e4:8a:6a:ba:
90:f7:94:45:86:62:22:2d:e8:ba:23:ca:3d:95:f6:89:1f:95:
bf:98:88:96:04:cd:89:62:cc:89:07:20:b3:06:7b:2d:df:ac:
eb:67:ac:6d:37:cb:bd:a4:4a:e2:10:b7:8b:21:2a:da:83:61:
db:47:6f:98:da:c8:ee:cb:5d:c1:94:e9:a2:cc:8d:7b:7e:54:
55:1c:88:0f:48:06:08:85:21:d4:ec:b5:52:b7:c8:5a:f0:a6:
9b:d3:bc:08:c0:c4:4c:18:dd:8c:d9:41:e7:c2:45:74:99:1a:
8b:50:ec:3b:1a:f5:7e:17:1f:c7:d6:10:8c:cb:12:8e:5a:9a:
d9:b8:c5:d6
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUeidknkAS6Z+08kXfDvX0AzPQajIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNzA1MDYxOTQ5WhcNMjcwNzA0MDYyNDQ5
WjAzMTEwLwYDVQQDEyhDQkJBMzJBQkQ5OTcyQzJBMTY1NEI5QUE4QTRFMzhCRjcx
MTZCNDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmhtE3rpxXkk
CL470CLT1cSl7IaDtY9fqAGwkM4a6Vb06gUyOBEKBVXAh4OA3JzlMNc6CwatIGBA
/xA+TcwniHtad84zgRBFAG1aSorcc83moq7tUePoARPSrmYHpMAsueNzz2Z0xbac
iyHSxhlUFVtieBD8+blD2YBM8Sx71edqCyl9uCX1lpWsL4lbJxoem6DqvZ6ZcOlB
AL32/wtLI4ouTpBbVDVHhCW/pwIgkrue4krz7uZ+0ElDuSy5ywWtrFBMiHYCftRX
tNwYi1NeFIjh/tsQ2quSyVoZXyaH6mO9X8HOXmDkNxjsT1UgMWmCRXvzp5PKw+vP
Y0a0YUls2QIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFMu6MqvZlywqFlS5qopOOL9x
FrQgMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI
KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBABo6hwDBABo6mgDBABo6rgwDQYJKoZI
hvcNAQELBQADggEBAMDp0VymyP+QCZ3JnWDCGjSq7DCf7A+QNnqyA1KmysGObKkB
S1X0OKrapJzqSNvQyJUoeOfJnQEVsJK8/i+WfuO0ef38LirFw1GLnI6cT2opNFNg
FA4m9Ru9YvB7kldbI/v55rn0oJey0eUppoS1hv32MYEauy5DHVJ45IpqupD3lEWG
YiIt6Lojyj2V9okflb+YiJYEzYlizIkHILMGey3frOtnrG03y72kSuIQt4shKtqD
YdtHb5jayO7LXcGU6aLMjXt+VFUciA9IBgiFIdTstVK3yFrwppvTvAjAxEwY3YzZ
QefCRXSZGotQ7Dsa9X4XH8fWEIzLEo5amtm4xdY=
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:48:17 2026 by rpki-client