$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa File: 32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa (raw, json) Hash identifier: AoE5SI1d851mZX+EZYZ4mhS4XBSEd6yhpQL1SgxMaPU= Subject key identifier: 9A:36:B5:81:F3:6A:19:BF:73:E3:3C:36:E0:4B:C9:7F:7B:61:D6:9F Certificate issuer: /CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44 Certificate serial: 604A00C3DF6E90BA3B6828933F4FF5ECFFE5C154 Authority key identifier: A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa Signing time: Sat 19 Jul 2025 18:05:10 +0000 ROA not before: Sat 19 Jul 2025 18:00:10 +0000 ROA not after: Sat 18 Jul 2026 18:05:10 +0000 asID: 142046 IP address blocks: 23.147.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 07:47:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:4a:00:c3:df:6e:90:ba:3b:68:28:93:3f:4f:f5:ec:ff:e5:c1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44 Validity Not Before: Jul 19 18:00:10 2025 GMT Not After : Jul 18 18:05:10 2026 GMT Subject: CN=9A36B581F36A19BF73E33C36E04BC97F7B61D69F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:07:ae:a7:45:87:2d:61:48:fb:90:dc:3a:f0: 5a:45:f9:19:94:8d:b1:69:d8:14:86:18:3c:7a:50: f3:73:e9:e9:8f:f2:2e:4e:14:44:2d:29:e5:4e:19: 13:58:cf:fe:1b:f8:76:c7:1a:6b:c4:78:29:ee:a3: 0f:e8:67:06:f8:00:24:63:54:3e:d7:ac:0f:3e:dc: 9c:67:52:a6:5e:67:1c:79:14:c3:37:0e:53:4d:fa: e6:d5:1f:1f:a6:7f:4c:4d:80:1b:9f:37:7d:b7:a2: 6d:01:69:ba:de:70:6b:24:5d:69:ca:4f:b4:79:2f: 77:94:e6:f2:3f:b9:76:b3:d0:90:e8:f2:83:bb:f1: 71:63:df:34:76:e4:9c:35:f5:64:1c:32:81:f7:7d: 55:58:c6:4b:83:e2:da:a1:e6:89:5c:84:54:95:40: 73:d1:4a:b3:65:11:64:17:1d:c9:c6:fc:1f:84:d4: 5e:90:46:90:c6:1f:3c:ff:fc:0d:c0:01:00:0a:0c: dc:02:32:e1:e2:40:4b:37:9c:7f:8d:a5:9b:0c:02: 2e:85:eb:7d:bc:47:d8:b5:76:55:7c:44:84:fb:11: f4:b8:b6:1d:16:b7:c7:18:ec:82:b4:c7:5e:4c:07: 94:1c:b4:02:d9:e5:0e:d9:e4:6e:d6:41:9f:5b:f3: 90:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:36:B5:81:F3:6A:19:BF:73:E3:3C:36:E0:4B:C9:7F:7B:61:D6:9F X509v3 Authority Key Identifier: keyid:A3:4D:5B:EC:B8:01:C2:A8:5A:98:5B:BC:3F:9E:74:E4:07:7A:95:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/A34D5BECB801C2A85A985BBC3F9E74E4077A9547.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbb06c4e00ba348eccdc94bd4e751cc37adff6b7d44.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf872898880187602a50a03910/0/32332e3134372e3132302e302f32342d3234203d3e20313432303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 23.147.120.0/24 Signature Algorithm: sha256WithRSAEncryption 81:62:65:99:01:ad:00:0b:86:1f:30:83:7c:33:4a:d5:8a:3f: 04:90:0c:c5:61:f6:0c:e4:a3:b7:9f:26:44:71:24:9f:03:a5: f5:99:d3:f6:f3:23:fa:21:f9:0e:e7:f2:d9:78:78:19:86:e2: c7:6e:a5:6d:ab:93:20:af:91:fb:05:5f:4c:0d:8d:dd:85:92: 12:5e:3f:3b:29:69:46:0c:7c:cf:38:db:67:71:82:21:90:ec: c2:a5:ec:68:8b:d9:3c:7a:fd:74:4d:de:b6:29:8e:28:95:16: 37:d3:8b:b1:00:08:3b:94:9b:64:15:d7:94:7e:74:db:8a:05: c9:62:f2:65:ad:93:dc:32:76:1b:75:f7:e1:f3:84:80:d1:b8: 80:c6:07:33:98:01:0c:5c:e4:95:01:04:d5:11:11:de:df:e1: 4f:60:6c:a3:13:53:f9:ed:49:fa:63:c9:c1:c0:88:36:6a:e9: 59:67:d3:34:45:0d:3e:3b:32:8d:4b:9a:e0:e3:02:bd:75:f0: a9:af:c8:49:1e:b6:93:f5:0a:9c:75:76:78:a5:04:11:29:1d: 4f:37:5d:f0:79:2a:b2:ee:77:7d:d6:9b:0c:71:47:ef:7a:7f: 9b:69:f6:a3:ea:64:86:99:05:06:ce:3d:81:76:5b:07:72:69: 25:b1:3f:bb -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUYEoAw99ukLo7aCiTP0/17P/lwVQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMmE1YWY3NGRiYjA2YzRlMDBiYTM0OGVjY2RjOTRiZDRl NzUxY2MzN2FkZmY2YjdkNDQwHhcNMjUwNzE5MTgwMDEwWhcNMjYwNzE4MTgwNTEw WjAzMTEwLwYDVQQDEyg5QTM2QjU4MUYzNkExOUJGNzNFMzNDMzZFMDRCQzk3RjdC NjFENjlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAeup0WHLWFI +5DcOvBaRfkZlI2xadgUhhg8elDzc+npj/IuThRELSnlThkTWM/+G/h2xxprxHgp 7qMP6GcG+AAkY1Q+16wPPtycZ1KmXmcceRTDNw5TTfrm1R8fpn9MTYAbnzd9t6Jt AWm63nBrJF1pyk+0eS93lObyP7l2s9CQ6PKDu/FxY980duScNfVkHDKB931VWMZL g+LaoeaJXIRUlUBz0UqzZRFkFx3JxvwfhNRekEaQxh88//wNwAEACgzcAjLh4kBL N5x/jaWbDAIuhet9vEfYtXZVfESE+xH0uLYdFrfHGOyCtMdeTAeUHLQC2eUO2eRu 1kGfW/OQdQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJo2tYHzahm/c+M8NuBLyX97 YdafMB8GA1UdIwQYMBaAFKNNW+y4AcKoWphbvD+edOQHepVHMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODcyODk4ODgwMTg3NjAyYTUwYTAzOTEwLzAv QTM0RDVCRUNCODAxQzJBODVBOTg1QkJDM0Y5RTc0RTQwNzdBOTU0Ny5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzcwZjVkODBjLTlkYWEtNGY2Zi04ZjU4LTE4MWM1ZjBjNGIwYS8yYTVh Zjc0ZGJiMDZjNGUwMGJhMzQ4ZWNjZGM5NGJkNGU3NTFjYzM3YWRmZjZiN2Q0NC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg3Mjg5ODg4MDE4NzYw MmE1MGEwMzkxMC8wLzMyMzMyZTMxMzQzNzJlMzEzMjMwMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzNDMyMzAzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N4MA0GCSqGSIb3DQEB CwUAA4IBAQCBYmWZAa0AC4YfMIN8M0rVij8EkAzFYfYM5KO3nyZEcSSfA6X1mdP2 8yP6IfkO5/LZeHgZhuLHbqVtq5Mgr5H7BV9MDY3dhZISXj87KWlGDHzPONtncYIh kOzCpexoi9k8ev10Td62KY4olRY304uxAAg7lJtkFdeUfnTbigXJYvJlrZPcMnYb dffh84SA0biAxgczmAEMXOSVAQTVERHe3+FPYGyjE1P57Un6Y8nBwIg2aulZZ9M0 RQ0+OzKNS5rg4wK9dfCpr8hJHraT9QqcdXZ4pQQRKR1PN13weSqy7nd91psMcUfv en+bafaj6mSGmQUGzj2BdlsHcmklsT+7 -----END CERTIFICATE-----Generated at Mon Jul 21 21:40:53 2025 by rpki-client