$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32342d3234203d3e203239383032.roa File: 3139322e302e31382e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: vzg/052Cvi8QDScCmkI36Ttje/ax+YpmPcixNOyH6K8= Subject key identifier: B2:9F:D1:0C:7D:F3:F0:DC:F4:96:DC:15:45:62:00:E9:45:93:B0:58 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 124EB10BE1BD8D53199312D0831771A8E1B770C9 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32342d3234203d3e203239383032.roa Signing time: Mon 10 Nov 2025 08:59:41 +0000 ROA not before: Mon 10 Nov 2025 08:54:41 +0000 ROA not after: Mon 09 Nov 2026 08:59:41 +0000 asID: 29802 IP address blocks: 192.0.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4e:b1:0b:e1:bd:8d:53:19:93:12:d0:83:17:71:a8:e1:b7:70:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Nov 10 08:54:41 2025 GMT Not After : Nov 9 08:59:41 2026 GMT Subject: CN=B29FD10C7DF3F0DCF496DC15456200E94593B058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:76:7c:75:24:02:78:4b:c4:be:08:34:6d:7c: 1b:83:47:3c:ee:31:be:a2:6c:39:69:74:70:71:eb: 53:7d:cf:4e:bf:be:e6:66:ef:bf:08:0c:3b:6d:38: 36:92:fe:bd:30:5e:92:d2:84:8e:eb:a1:0f:e4:74: 2a:14:2e:84:65:4c:78:c3:a1:9e:8d:c4:ba:2d:5b: 5c:ac:11:eb:65:c5:51:ce:4a:0f:27:bc:75:08:de: 83:8e:c4:99:14:eb:a1:21:41:04:c0:1e:28:85:57: 72:09:e3:17:a0:07:fb:ab:ca:c1:09:41:eb:0e:ff: b5:39:8b:ed:a6:2d:9c:39:b8:50:64:a5:be:ae:f4: 6f:cb:e0:21:ed:cf:bd:7f:03:03:c0:79:44:8f:a7: 99:4f:e6:e9:1b:9a:68:98:a1:4a:47:12:1e:e1:d2: 4e:ce:fc:33:66:9e:e0:a7:ae:8e:5f:5d:f5:5e:29: 91:ce:7f:17:a2:c7:90:47:42:48:99:23:c7:86:f3: a6:d0:9e:2f:df:3f:a5:c5:f2:c8:8a:20:b7:97:52: 88:93:03:35:35:0b:a8:18:1e:a0:79:42:1b:83:20: 1d:cf:59:d8:4e:3f:bd:11:58:2f:39:c6:36:8e:c9: 33:bb:4d:5e:f5:33:a1:8c:63:7e:78:c8:32:2f:87: b9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:9F:D1:0C:7D:F3:F0:DC:F4:96:DC:15:45:62:00:E9:45:93:B0:58 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.18.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:9f:1d:9f:09:47:7c:09:cd:b0:f0:31:8d:f9:e2:0c:85:4f: 2f:f3:3d:2c:f8:30:37:a6:02:0a:dd:cf:b2:5b:a3:50:69:5d: 41:d7:44:5c:56:f6:c3:32:f5:eb:84:32:ed:e9:0a:4b:c2:b4: c3:b5:e1:31:8f:c8:42:a8:78:4d:20:36:d4:bd:23:58:4a:67: 3e:f0:a8:c1:1c:c0:8d:30:00:3f:5e:47:bd:5d:fa:22:fe:40: 04:db:04:61:d1:9c:bc:64:17:d1:45:75:2a:87:1d:89:22:01: af:a8:1a:82:c4:d3:3e:81:04:f7:25:09:28:8d:f1:a9:f4:96: 98:19:2d:85:46:f2:ac:13:07:0a:a4:c4:c9:bb:b4:c0:66:82: e2:f7:39:72:75:74:52:a3:08:fe:5d:dc:68:ad:1f:3c:42:d7: d0:94:81:75:d7:84:9a:30:87:13:b2:44:20:5c:99:d9:b6:24: f9:4d:ee:fc:3d:78:98:5f:29:91:8a:7c:a9:67:a4:50:65:0c: 7c:87:b5:f6:b8:48:7a:ea:00:85:bd:fe:33:ba:5c:e8:7b:16: 10:7b:19:a7:1e:05:c8:7a:b6:7b:65:d0:d7:46:fe:e7:c3:33: 6a:43:7b:15:ed:e6:08:5c:98:84:88:f9:eb:9e:ae:fd:08:a1: a3:ef:be:d1 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUEk6xC+G9jVMZkxLQgxdxqOG3cMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUxMTEwMDg1NDQxWhcNMjYxMTA5MDg1OTQx WjAzMTEwLwYDVQQDEyhCMjlGRDEwQzdERjNGMERDRjQ5NkRDMTU0NTYyMDBFOTQ1 OTNCMDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznZ8dSQCeEvE vgg0bXwbg0c87jG+omw5aXRwcetTfc9Ov77mZu+/CAw7bTg2kv69MF6S0oSO66EP 5HQqFC6EZUx4w6GejcS6LVtcrBHrZcVRzkoPJ7x1CN6DjsSZFOuhIUEEwB4ohVdy CeMXoAf7q8rBCUHrDv+1OYvtpi2cObhQZKW+rvRvy+Ah7c+9fwMDwHlEj6eZT+bp G5pomKFKRxIe4dJOzvwzZp7gp66OX131XimRzn8XoseQR0JImSPHhvOm0J4v3z+l xfLIiiC3l1KIkwM1NQuoGB6geUIbgyAdz1nYTj+9EVgvOcY2jskzu01e9TOhjGN+ eMgyL4e50wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLKf0Qx98/Dc9JbcFUViAOlF k7BYMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABIwDQYJKoZIhvcNAQELBQADggEB ABqfHZ8JR3wJzbDwMY354gyFTy/zPSz4MDemAgrdz7Jbo1BpXUHXRFxW9sMy9euE Mu3pCkvCtMO14TGPyEKoeE0gNtS9I1hKZz7wqMEcwI0wAD9eR71d+iL+QATbBGHR nLxkF9FFdSqHHYkiAa+oGoLE0z6BBPclCSiN8an0lpgZLYVG8qwTBwqkxMm7tMBm guL3OXJ1dFKjCP5d3GitHzxC19CUgXXXhJowhxOyRCBcmdm2JPlN7vw9eJhfKZGK fKlnpFBlDHyHtfa4SHrqAIW9/jO6XOh7FhB7GaceBch6tntl0NdG/ufDM2pDexXt 5ghcmISI+euerv0IoaPvvtE= -----END CERTIFICATE-----Generated at Tue Nov 18 06:22:40 2025 by rpki-client