$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e20383334.roa File: 3230382e39312e3139302e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: KMwrTkd+nIx44VbjScgHNJcSSwrCc5E4ZX4ZhbGqWoo= Subject key identifier: BF:EF:BA:CD:8B:6D:9F:02:13:3B:4A:5A:EE:34:D6:6A:A5:79:88:8C Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845 Certificate serial: 2ED907C0BDD8BD3654236594BD7AD9ED14BAA70E Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e20383334.roa Signing time: Mon 25 Aug 2025 00:03:43 +0000 ROA not before: Sun 24 Aug 2025 23:58:43 +0000 ROA not after: Mon 24 Aug 2026 00:03:43 +0000 asID: 834 IP address blocks: 208.91.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 00:43:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d9:07:c0:bd:d8:bd:36:54:23:65:94:bd:7a:d9:ed:14:ba:a7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845 Validity Not Before: Aug 24 23:58:43 2025 GMT Not After : Aug 24 00:03:43 2026 GMT Subject: CN=BFEFBACD8B6D9F02133B4A5AEE34D66AA579888C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:3a:e8:e2:d6:c8:c7:9f:74:4a:e0:0b:92: b6:e6:4a:86:e0:d3:89:26:28:7d:0b:90:a1:67:ea: 5b:56:0e:fd:eb:c4:f5:b1:cd:48:b3:33:a8:54:97: 5a:f7:77:fc:8f:38:b0:0f:0e:da:3d:60:d8:6a:83: b0:1c:e4:a8:4a:98:9b:3c:55:85:00:3a:93:49:d8: d2:35:bb:fd:5b:fa:29:09:e0:71:16:c8:2b:c1:bc: 79:08:93:60:84:3e:f0:37:90:e6:1e:3b:5e:ea:9d: 47:b9:a0:19:cd:18:4c:c5:b3:7d:58:a1:1a:e3:03: 07:2a:17:1d:51:ce:e4:b5:32:32:c4:77:99:9f:69: e2:92:ee:96:86:af:d4:ed:c1:30:05:d3:40:7a:35: 38:8f:ae:a9:ba:63:a3:0b:e5:95:1a:36:84:85:e9: d7:79:c0:19:34:f6:56:cf:e5:05:c7:22:c8:1d:fa: 3b:92:ad:cc:d8:a3:e3:9c:e8:a2:1d:25:5b:59:7f: b6:8f:2a:3f:22:cf:91:b0:05:bb:73:52:72:75:64: d4:89:5b:86:5e:4d:0f:2f:80:3a:cb:d5:7d:05:de: 09:2f:70:42:f3:e5:42:88:99:3a:8c:d0:38:7a:9e: 53:36:1b:e5:e4:bc:48:4d:9d:92:3c:70:f9:62:1e: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:EF:BA:CD:8B:6D:9F:02:13:3B:4A:5A:EE:34:D6:6A:A5:79:88:8C X509v3 Authority Key Identifier: keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139302e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.91.190.0/24 Signature Algorithm: sha256WithRSAEncryption 53:ad:92:bb:74:1a:b8:ff:41:fd:b8:7c:27:b4:63:40:b2:e5: bd:11:9a:fc:b0:4a:a6:0e:b5:b3:e3:89:ce:35:0e:e5:9d:4a: 34:dc:d8:0f:f1:0b:ae:b5:64:63:c5:ea:62:af:3f:88:2f:52: f2:51:bc:59:bd:2a:7e:3d:0f:7b:48:99:61:26:d9:32:da:0f: 76:ea:f7:0f:53:95:82:9a:12:b6:6b:e6:d5:34:f0:0c:e3:00: c3:e6:58:ac:5d:e8:1e:0f:12:b0:1d:01:cb:2c:f7:aa:0f:c6: 40:47:4a:94:02:cb:32:8e:70:08:be:ac:48:a9:46:cf:c8:fb: 34:8d:85:24:a3:cf:b9:21:b6:62:70:1b:c0:f9:94:53:7c:2f: 92:86:d5:f5:13:6a:11:49:bd:f1:3e:28:2a:fc:0f:d5:81:0f: b9:ab:b7:f5:72:3b:84:03:98:1f:ce:d5:b2:f5:f8:11:82:8e: 83:3b:8f:2f:01:94:9d:e8:a1:69:1d:59:24:db:ea:04:45:39: 3e:ad:4f:76:1d:96:5e:a1:39:f9:fe:51:42:60:e4:61:7f:b0: 41:db:67:46:ac:6b:81:7f:3f:99:f3:ff:85:4e:eb:72:1c:0b: c4:2d:f9:e7:2c:30:35:41:fb:87:ee:de:87:e5:15:08:ff:e7: 4b:d6:e0:7a -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIULtkHwL3YvTZUI2WUvXrZ7RS6pw4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2 MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjUwODI0MjM1ODQzWhcNMjYwODI0MDAwMzQz WjAzMTEwLwYDVQQDEyhCRkVGQkFDRDhCNkQ5RjAyMTMzQjRBNUFFRTM0RDY2QUE1 Nzk4ODhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEw66OLWyMef dErgC5K25kqG4NOJJih9C5ChZ+pbVg7968T1sc1IszOoVJda93f8jziwDw7aPWDY aoOwHOSoSpibPFWFADqTSdjSNbv9W/opCeBxFsgrwbx5CJNghD7wN5DmHjte6p1H uaAZzRhMxbN9WKEa4wMHKhcdUc7ktTIyxHeZn2niku6Whq/U7cEwBdNAejU4j66p umOjC+WVGjaEhenXecAZNPZWz+UFxyLIHfo7kq3M2KPjnOiiHSVbWX+2jyo/Is+R sAW7c1JydWTUiVuGXk0PL4A6y9V9Bd4JL3BC8+VCiJk6jNA4ep5TNhvl5LxITZ2S PHD5Yh5F0wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFL/vus2LbZ8CEztKWu401mql eYiMMB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3 MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4 NjYzZDgwNzAyLzAvMzIzMDM4MmUzOTMxMmUzMTM5MzAyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADQW74wDQYJKoZIhvcNAQELBQADggEB AFOtkrt0Grj/Qf24fCe0Y0Cy5b0RmvywSqYOtbPjic41DuWdSjTc2A/xC661ZGPF 6mKvP4gvUvJRvFm9Kn49D3tImWEm2TLaD3bq9w9TlYKaErZr5tU08AzjAMPmWKxd 6B4PErAdAcss96oPxkBHSpQCyzKOcAi+rEipRs/I+zSNhSSjz7khtmJwG8D5lFN8 L5KG1fUTahFJvfE+KCr8D9WBD7mrt/VyO4QDmB/O1bL1+BGCjoM7jy8BlJ3ooWkd WSTb6gRFOT6tT3Ydll6hOfn+UUJg5GF/sEHbZ0asa4F/P5nz/4VO63IcC8Qt+ecs MDVB+4fu3oflFQj/50vW4Ho= -----END CERTIFICATE-----Generated at Sun Sep 7 02:04:17 2025 by rpki-client