$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32342d3234203d3e203239383032.roa File: 3139322e302e32302e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: G4Z0hSIpgLO4Rk9V9Ix723KFlUVMMVjE/2ivswXcOPY= Subject key identifier: 31:21:9C:DE:1A:BD:4E:3B:84:8B:A0:88:52:BD:F1:36:0D:40:14:B2 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 701AFB5EDA3D9915F5658EB5DC7721FD393D1CE9 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32342d3234203d3e203239383032.roa Signing time: Mon 10 Nov 2025 08:59:43 +0000 ROA not before: Mon 10 Nov 2025 08:54:43 +0000 ROA not after: Mon 09 Nov 2026 08:59:43 +0000 asID: 29802 IP address blocks: 192.0.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 14:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:fb:5e:da:3d:99:15:f5:65:8e:b5:dc:77:21:fd:39:3d:1c:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Nov 10 08:54:43 2025 GMT Not After : Nov 9 08:59:43 2026 GMT Subject: CN=31219CDE1ABD4E3B848BA08852BDF1360D4014B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:69:f2:68:be:27:00:3f:bd:53:cb:73:ff:50: 9f:e3:ec:6a:c0:57:56:d1:1d:1f:e8:c2:70:7e:83: be:66:7b:54:2c:72:ab:46:ea:80:3a:6c:5f:d1:bf: 32:f5:66:70:b9:54:2c:ea:45:ac:8a:21:40:92:f9: e6:1e:2f:e7:dc:cc:d2:98:27:a8:73:a3:75:b4:23: 05:1f:c4:d7:1f:9c:76:50:66:c6:94:ad:28:c3:25: c4:1d:4a:df:c3:e7:2d:32:be:25:67:fb:f3:2b:17: d6:4c:46:f3:68:2f:13:41:7f:02:17:50:35:44:ef: 0d:58:73:39:12:96:ac:78:6e:f9:d8:8a:05:73:09: 21:16:3f:71:3d:db:5a:d7:e8:3c:19:b6:cb:6f:ac: 6f:0b:c6:70:6e:5e:5d:68:fb:d6:27:0b:52:ca:d3: 16:02:40:50:7d:13:42:a1:5b:e8:37:55:98:0e:8f: 0d:17:46:3e:0e:d7:01:d7:3e:50:0f:21:a5:c7:f7: d2:7c:e8:d3:aa:fd:c6:c0:2f:29:43:3c:47:b1:62: d5:86:3e:40:dd:83:d3:b1:87:e2:e3:c2:2a:dd:8c: b6:29:64:1e:1c:b2:9a:f3:8d:ea:4d:6b:b5:4a:32: 33:43:d4:9f:a8:8f:ea:fb:df:51:af:6e:ba:e9:57: 86:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:21:9C:DE:1A:BD:4E:3B:84:8B:A0:88:52:BD:F1:36:0D:40:14:B2 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.20.0/24 Signature Algorithm: sha256WithRSAEncryption 92:cb:6d:34:76:44:9d:84:4f:51:80:e6:12:a5:ef:7c:4d:85: 1c:2a:eb:89:8d:35:de:c1:f5:5b:99:d9:59:e7:02:76:b1:42: 91:a8:df:98:33:b0:05:bf:cf:fe:d1:09:b4:2d:9b:c2:26:f2: c6:16:67:b0:52:1a:02:45:1a:4e:6c:91:f4:4a:da:bc:44:e8: 35:00:65:71:85:13:db:25:73:86:81:f2:7a:98:70:d7:1e:68: 85:94:63:f2:45:2a:ea:bc:0c:cf:1b:a7:c0:70:12:49:60:5d: cd:83:6e:71:cc:69:27:b8:3b:74:24:a2:78:ec:d5:41:8e:a5: 3d:f7:3c:8c:c3:55:a0:33:d4:a9:ff:3e:b5:b0:e6:c3:87:f2: 9a:62:81:cb:60:54:2e:b6:fc:9f:bc:d7:08:9b:88:ed:cb:50: b6:f5:55:06:10:08:f6:93:96:02:d5:77:e9:59:35:96:71:9f: d1:bb:33:2c:b6:68:3f:3d:f6:49:c6:18:ae:ab:ef:3e:e1:77: 9e:11:fc:55:4f:d5:92:08:75:1e:9e:94:64:30:c5:b7:78:9c: ae:be:d0:e0:53:1b:be:d0:7d:b6:14:e4:81:34:0f:9c:2d:33: bb:0f:32:a9:dd:6a:43:01:24:c6:39:61:e7:8e:fa:9b:44:5d: 38:9e:a0:ca -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUcBr7Xto9mRX1ZY613Hch/Tk9HOkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUxMTEwMDg1NDQzWhcNMjYxMTA5MDg1OTQz WjAzMTEwLwYDVQQDEygzMTIxOUNERTFBQkQ0RTNCODQ4QkEwODg1MkJERjEzNjBE NDAxNEIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWnyaL4nAD+9 U8tz/1Cf4+xqwFdW0R0f6MJwfoO+ZntULHKrRuqAOmxf0b8y9WZwuVQs6kWsiiFA kvnmHi/n3MzSmCeoc6N1tCMFH8TXH5x2UGbGlK0owyXEHUrfw+ctMr4lZ/vzKxfW TEbzaC8TQX8CF1A1RO8NWHM5EpaseG752IoFcwkhFj9xPdta1+g8GbbLb6xvC8Zw bl5daPvWJwtSytMWAkBQfRNCoVvoN1WYDo8NF0Y+DtcB1z5QDyGlx/fSfOjTqv3G wC8pQzxHsWLVhj5A3YPTsYfi48Iq3Yy2KWQeHLKa843qTWu1SjIzQ9SfqI/q+99R r2666VeGRQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDEhnN4avU47hIugiFK98TYN QBSyMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABQwDQYJKoZIhvcNAQELBQADggEB AJLLbTR2RJ2ET1GA5hKl73xNhRwq64mNNd7B9VuZ2VnnAnaxQpGo35gzsAW/z/7R CbQtm8Im8sYWZ7BSGgJFGk5skfRK2rxE6DUAZXGFE9slc4aB8nqYcNceaIWUY/JF Kuq8DM8bp8BwEklgXc2DbnHMaSe4O3Qkonjs1UGOpT33PIzDVaAz1Kn/PrWw5sOH 8ppigctgVC62/J+81wibiO3LULb1VQYQCPaTlgLVd+lZNZZxn9G7Myy2aD899knG GK6r7z7hd54R/FVP1ZIIdR6elGQwxbd4nK6+0OBTG77QfbYU5IE0D5wtM7sPMqnd akMBJMY5YeeO+ptEXTieoMo= -----END CERTIFICATE-----Generated at Tue Nov 18 06:22:40 2025 by rpki-client