$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa File: 3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa (raw, json) Hash identifier: pZ5CW7JhBaik3w/dGBTOw565bgIgaSHaRsCvcMjk1tE= Subject key identifier: 03:68:4A:29:D0:F4:8C:0B:4F:E2:D5:A9:90:B6:14:42:9D:DA:81:E3 Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Certificate serial: 256F364668B6D05E0C64155AAD7AC5AC64FA287B Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa Signing time: Mon 08 Sep 2025 17:27:52 +0000 ROA not before: Mon 08 Sep 2025 17:22:52 +0000 ROA not after: Mon 07 Sep 2026 17:27:52 +0000 asID: 2914 IP address blocks: 147.189.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Oct 2025 21:27:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:6f:36:46:68:b6:d0:5e:0c:64:15:5a:ad:7a:c5:ac:64:fa:28:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Validity Not Before: Sep 8 17:22:52 2025 GMT Not After : Sep 7 17:27:52 2026 GMT Subject: CN=03684A29D0F48C0B4FE2D5A990B614429DDA81E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:da:1b:f4:0f:98:aa:7f:05:3b:d3:51:34: ee:c4:02:a7:fe:64:29:d8:5c:36:70:46:f7:ee:f7: ca:08:d8:2e:4c:1e:09:3e:99:a3:7a:f8:ae:a5:7b: b5:91:7b:76:80:f3:a6:c3:83:99:e8:ab:78:eb:6a: a2:6b:ee:9a:99:f8:70:43:6a:26:8e:19:36:6a:61: 53:c0:fb:17:88:3d:d7:df:cb:cc:f9:64:14:61:f6: b6:5b:ca:b5:4c:30:d6:88:a7:fc:0c:dd:b8:1a:9d: e6:61:a9:1f:9d:c8:9b:85:db:02:e2:e2:a0:05:a6: a7:d8:7f:b9:72:7e:d2:90:eb:2b:71:01:62:6c:11: f1:2d:be:c7:d0:74:88:29:40:14:e5:ba:97:ff:6f: f0:57:64:0c:3b:2b:39:64:b0:ba:99:90:50:b9:dd: 59:63:ef:a3:e2:69:81:20:4d:85:63:a0:d1:07:88: 3f:80:dc:95:a1:b1:83:37:65:c2:01:c8:a4:1f:31: 4d:c4:b9:04:ff:23:06:0b:d8:f3:83:d1:46:c0:38: 94:3c:8f:41:f8:6c:ca:60:5d:e5:09:50:7c:bf:b9: 24:51:47:b5:13:73:30:47:bc:71:73:f9:ec:3c:3a: a8:99:11:99:4d:7c:d7:e9:19:09:62:91:29:fb:12: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:68:4A:29:D0:F4:8C:0B:4F:E2:D5:A9:90:B6:14:42:9D:DA:81:E3 X509v3 Authority Key Identifier: keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.189.152.0/23 Signature Algorithm: sha256WithRSAEncryption 48:ce:f5:bc:05:ab:89:91:5f:4e:03:17:50:99:07:4d:25:b7: 3e:4f:8d:6f:62:14:f2:38:9d:6f:c6:f6:22:07:43:f6:e0:72: 59:81:99:66:aa:ae:f5:c6:c7:28:a4:c6:35:11:71:52:e8:84: 33:09:88:bd:0f:ca:08:27:32:e4:d6:d5:2d:b4:d7:ed:ce:54: 3f:6b:06:83:78:bb:6c:47:3f:46:c8:59:f2:df:75:eb:80:91: 5f:e1:07:9c:2c:3c:ec:47:7b:62:44:71:80:6f:8c:8f:50:a6: 1e:95:b5:82:4f:cb:00:c0:d8:65:53:87:f7:0c:27:20:de:a5: ac:98:bf:1f:d7:d4:34:22:4e:03:7d:5e:bf:69:30:22:75:65: fe:78:e9:9f:ae:2d:f5:7a:12:2a:0c:e5:34:0d:21:ed:be:ae: cc:4b:e5:78:7e:a6:e6:fb:6a:a9:7c:34:00:36:c5:fc:51:83: 27:4f:fe:f2:1c:47:f4:42:46:3b:16:35:6f:1e:bc:bc:ce:12: 99:d1:6c:89:6d:7f:2b:e7:aa:0c:a0:98:bc:da:14:7e:52:28: ba:71:6d:25:2c:ed:d4:72:81:86:09:b3:08:03:8b:96:98:d2: d1:75:cf:01:96:12:1b:e2:df:7a:e8:ca:03:03:4d:51:d0:3f: 14:65:37:35 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUJW82Rmi20F4MZBVarXrFrGT6KHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjUwOTA4MTcyMjUyWhcNMjYwOTA3MTcyNzUy WjAzMTEwLwYDVQQDEygwMzY4NEEyOUQwRjQ4QzBCNEZFMkQ1QTk5MEI2MTQ0MjlE REE4MUUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP7aG/QPmKp/ BTvTUTTuxAKn/mQp2Fw2cEb37vfKCNguTB4JPpmjeviupXu1kXt2gPOmw4OZ6Kt4 62qia+6amfhwQ2omjhk2amFTwPsXiD3X38vM+WQUYfa2W8q1TDDWiKf8DN24Gp3m YakfncibhdsC4uKgBaan2H+5cn7SkOsrcQFibBHxLb7H0HSIKUAU5bqX/2/wV2QM Oys5ZLC6mZBQud1ZY++j4mmBIE2FY6DRB4g/gNyVobGDN2XCAcikHzFNxLkE/yMG C9jzg9FGwDiUPI9B+GzKYF3lCVB8v7kkUUe1E3MwR7xxc/nsPDqomRGZTXzX6RkJ YpEp+xI0cQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFANoSinQ9IwLT+LVqZC2FEKd 2oHjMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1 ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj NjFiNDI2NTFkNi8wLzMxMzQzNzJlMzEzODM5MmUzMTM1MzIyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZO9mDANBgkqhkiG9w0BAQsF AAOCAQEASM71vAWriZFfTgMXUJkHTSW3Pk+Nb2IU8jidb8b2IgdD9uByWYGZZqqu 9cbHKKTGNRFxUuiEMwmIvQ/KCCcy5NbVLbTX7c5UP2sGg3i7bEc/RshZ8t9164CR X+EHnCw87Ed7YkRxgG+Mj1CmHpW1gk/LAMDYZVOH9wwnIN6lrJi/H9fUNCJOA31e v2kwInVl/njpn64t9XoSKgzlNA0h7b6uzEvleH6m5vtqqXw0ADbF/FGDJ0/+8hxH 9EJGOxY1bx68vM4SmdFsiW1/K+eqDKCYvNoUflIounFtJSzt1HKBhgmzCAOLlpjS 0XXPAZYSG+LfeujKAwNNUdA/FGU3NQ== -----END CERTIFICATE-----Generated at Wed Oct 8 12:01:35 2025 by rpki-client