$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa File: 3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa (raw, json) Hash identifier: GpEKa/GNHRu3+pbpB4wPUri06xjyMDCa7+eXHRXl7YY= Subject key identifier: 86:1C:B5:19:E9:F1:BC:32:E4:81:89:77:5E:C0:59:27:A8:64:AD:B2 Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 0E750A2BAF78F6A8E75E4A257D0FC06A0971CF7D Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa Signing time: Wed 16 Jul 2025 11:29:44 +0000 ROA not before: Wed 16 Jul 2025 11:24:44 +0000 ROA not after: Wed 15 Jul 2026 11:29:44 +0000 asID: 397373 IP address blocks: 198.37.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 08:16:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:75:0a:2b:af:78:f6:a8:e7:5e:4a:25:7d:0f:c0:6a:09:71:cf:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Jul 16 11:24:44 2025 GMT Not After : Jul 15 11:29:44 2026 GMT Subject: CN=861CB519E9F1BC32E48189775EC05927A864ADB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:bb:c1:46:2c:95:13:b0:7d:ac:ed:83:15:24: 3d:3c:f8:77:6f:9c:58:f9:5f:4f:99:7d:18:da:b7: cd:ba:59:5f:83:29:f6:14:a7:bd:cf:75:5e:13:15: 48:5c:a1:3e:65:89:d0:7d:f6:b2:18:12:9c:0c:69: d7:c0:c4:09:31:5d:05:58:2a:ad:82:ef:30:6f:1d: 3b:39:64:7f:cb:f1:eb:04:e2:78:80:bf:e4:e0:b7: 3c:c8:ff:2a:2d:66:ec:1c:8a:d6:33:63:37:c1:a1: 8f:bf:26:da:68:38:6a:60:23:0a:47:b0:b4:94:65: 2d:18:ec:66:c0:eb:88:5d:51:ca:85:d1:e6:85:3a: 08:3c:ae:73:51:78:44:f6:7c:72:e4:52:77:f1:ce: 97:40:95:0b:71:82:e5:d3:2b:79:44:07:88:8e:3e: dd:ff:c3:49:bd:05:b3:4f:20:bd:4d:19:23:1d:a0: b2:1e:85:4c:97:b8:1f:dc:dd:ad:74:86:f6:12:d4: b8:e7:58:e3:ad:fb:ac:2b:5c:27:dd:e2:41:75:6e: 49:74:32:a1:c8:cb:d1:bb:5b:8f:40:6d:77:4d:e1: eb:5e:49:48:be:9b:a6:6b:d9:28:d0:08:aa:e8:6a: f9:1b:02:07:4a:90:b7:52:87:cd:15:b6:19:f3:31: a6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:1C:B5:19:E9:F1:BC:32:E4:81:89:77:5E:C0:59:27:A8:64:AD:B2 X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.37.112.0/20 Signature Algorithm: sha256WithRSAEncryption 06:72:c6:d4:ff:b2:b4:50:f1:67:36:d4:46:81:a9:c4:f2:97: b7:2d:c1:74:51:cb:78:b5:0f:8b:07:b8:a4:f7:48:a6:13:6c: b4:4b:d1:2e:e0:be:78:e7:ed:98:1d:97:6a:b7:84:8f:0c:f8: 3e:11:84:00:04:34:0c:0f:7e:be:11:b6:b3:e2:e1:c3:8d:fc: 93:99:65:8d:6c:94:b4:7d:ed:d0:80:0b:04:32:13:c7:67:74: 7c:6b:49:28:0c:21:32:ee:09:69:88:48:8e:5e:ff:32:61:cf: a3:82:77:80:e4:1a:7b:5e:b0:43:a0:c0:43:13:f5:cb:90:12: b8:6d:dd:dc:12:6f:61:6f:dc:90:c5:b1:c5:e6:6c:db:63:db: a1:ba:da:fb:27:8e:1c:30:ee:1d:c6:62:2b:68:9c:fc:57:1a: 43:1d:15:99:c9:8d:7c:07:4b:12:a9:7a:e4:bc:e4:dd:46:17: af:64:c5:fb:d4:d4:01:a9:a8:a8:05:2a:19:1d:b5:fa:c9:4c: 66:33:90:24:ba:0d:05:82:94:5b:f5:cf:96:c0:3b:e6:26:f6: a1:0f:1c:ef:25:62:72:36:99:23:69:b5:71:cd:56:45:7a:a6: ad:50:eb:15:a1:57:a3:31:a6:a0:96:ab:54:de:4a:c3:93:5b: 34:5c:18:fa -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUDnUKK6949qjnXkolfQ/Aaglxz30wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNzE2MTEyNDQ0WhcNMjYwNzE1MTEyOTQ0 WjAzMTEwLwYDVQQDEyg4NjFDQjUxOUU5RjFCQzMyRTQ4MTg5Nzc1RUMwNTkyN0E4 NjRBREIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77vBRiyVE7B9 rO2DFSQ9PPh3b5xY+V9PmX0Y2rfNullfgyn2FKe9z3VeExVIXKE+ZYnQffayGBKc DGnXwMQJMV0FWCqtgu8wbx07OWR/y/HrBOJ4gL/k4Lc8yP8qLWbsHIrWM2M3waGP vybaaDhqYCMKR7C0lGUtGOxmwOuIXVHKhdHmhToIPK5zUXhE9nxy5FJ38c6XQJUL cYLl0yt5RAeIjj7d/8NJvQWzTyC9TRkjHaCyHoVMl7gf3N2tdIb2EtS451jjrfus K1wn3eJBdW5JdDKhyMvRu1uPQG13TeHrXklIvpuma9ko0Aiq6Gr5GwIHSpC3UofN FbYZ8zGmYQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIYctRnp8bwy5IGJd17AWSeo ZK2yMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz NDIwM2QzZTIwMzMzOTM3MzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExiVwMA0GCSqGSIb3DQEB CwUAA4IBAQAGcsbU/7K0UPFnNtRGganE8pe3LcF0Uct4tQ+LB7ik90imE2y0S9Eu 4L545+2YHZdqt4SPDPg+EYQABDQMD36+Ebaz4uHDjfyTmWWNbJS0fe3QgAsEMhPH Z3R8a0koDCEy7glpiEiOXv8yYc+jgneA5Bp7XrBDoMBDE/XLkBK4bd3cEm9hb9yQ xbHF5mzbY9uhutr7J44cMO4dxmIraJz8VxpDHRWZyY18B0sSqXrkvOTdRhevZMX7 1NQBqaioBSoZHbX6yUxmM5Akug0FgpRb9c+WwDvmJvahDxzvJWJyNpkjabVxzVZF eqatUOsVoVejMaaglqtU3krDk1s0XBj6 -----END CERTIFICATE-----Generated at Thu Jul 24 11:58:01 2025 by rpki-client