$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32332d3233203d3e20333938393931.roa File: 3230392e3133312e3132302e302f32332d3233203d3e20333938393931.roa (raw, json) Hash identifier: 1wb1PJoN094XzXgD1HHlEdJ1odCqXkKjbazs5na2yFo= Subject key identifier: C5:D9:57:A5:8D:94:8C:FC:43:FA:BE:D5:77:75:25:51:38:F8:A0:C5 Certificate issuer: /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c Certificate serial: 1C6E3108F2B9B0DC2E92ACEDA4B6DF4404E2162C Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer Subject info access: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32332d3233203d3e20333938393931.roa Signing time: Thu 14 Aug 2025 15:43:30 +0000 ROA not before: Thu 14 Aug 2025 15:38:30 +0000 ROA not after: Thu 13 Aug 2026 15:43:30 +0000 asID: 398991 IP address blocks: 209.131.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 12:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6e:31:08:f2:b9:b0:dc:2e:92:ac:ed:a4:b6:df:44:04:e2:16:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c Validity Not Before: Aug 14 15:38:30 2025 GMT Not After : Aug 13 15:43:30 2026 GMT Subject: CN=C5D957A58D948CFC43FABED57775255138F8A0C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b1:33:2d:93:b1:ce:67:81:8a:35:ce:3f:98: 7b:4c:fe:6e:04:b9:4e:ed:0b:4c:24:c5:7a:ac:5f: a6:54:80:d0:a4:d8:40:6d:86:54:bd:1c:87:7f:93: ba:ee:fb:96:d4:d7:b5:67:35:45:a9:65:c9:1b:31: 98:c3:7b:f4:09:5d:15:67:60:99:92:de:fd:45:cf: 74:33:b2:25:a8:99:48:91:6f:16:ed:d7:01:16:7d: 66:94:02:80:d7:81:8e:e4:0b:d3:74:be:6c:a7:1c: 0a:3f:c4:50:af:94:61:3f:07:2c:f4:56:5b:46:24: 4d:e0:1c:b9:ea:7c:ff:75:92:65:a8:45:22:52:6d: a6:72:26:24:18:f2:77:e7:58:11:fe:69:4b:e6:3f: 85:86:8e:94:34:fb:11:a4:6d:75:c0:58:71:54:6f: 54:bc:39:f8:34:b5:69:6f:0d:b4:f3:fe:59:c4:89: 4b:7d:8e:2d:6d:ea:ba:41:6f:45:96:9c:07:d9:93: 81:42:bb:5d:cc:8f:bb:96:c7:3a:8d:6d:7d:2c:b7: d0:7d:c6:9b:e7:e4:52:b5:d6:a6:84:60:13:04:4c: 4a:e5:bd:62:b7:64:b2:0e:f8:6b:a5:f8:e3:31:c3: 03:4d:1d:32:f6:33:cb:fb:4c:95:e2:4e:f5:10:55: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D9:57:A5:8D:94:8C:FC:43:FA:BE:D5:77:75:25:51:38:F8:A0:C5 X509v3 Authority Key Identifier: keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32332d3233203d3e20333938393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.131.120.0/23 Signature Algorithm: sha256WithRSAEncryption 39:dc:86:ca:b2:50:5f:80:6b:cf:bb:ab:dc:c6:09:c8:7b:a5: 24:42:a1:50:16:6f:00:8e:ea:c8:61:14:50:94:a6:8b:6e:bb: a0:73:bf:73:e3:ac:95:a8:a0:a4:40:92:0e:9f:b3:31:5d:98: a5:be:ad:a6:ef:b7:a7:ef:36:f9:a4:31:d3:09:d5:22:84:ae: 3e:ff:4e:39:75:01:76:15:20:9a:5e:ed:24:4f:54:76:dd:40: 73:ec:39:55:a8:5c:a1:87:67:78:37:b9:fc:29:83:fc:e3:33: 65:a0:9e:c3:3d:c1:d5:83:51:98:27:95:e2:51:b0:94:11:1c: cb:17:92:6a:26:3a:5e:81:39:b2:88:35:b9:ec:00:e5:27:42: a5:23:1d:fc:69:1d:1f:5a:d1:2c:e1:87:6b:d3:b2:38:8e:a6: 63:02:07:44:d5:84:1a:af:06:30:89:f3:72:14:4c:ad:ee:f0: 15:77:74:d3:1c:29:d5:c1:ef:11:74:16:68:f3:75:ae:a5:93: 4e:ba:4d:d8:cc:6b:13:e6:3d:1e:9f:a6:a6:73:4d:43:7f:c9: 11:04:6f:3a:2d:e0:ab:c7:e4:29:7e:20:1c:81:7a:dc:5f:8b: ed:6b:d1:68:55:9d:92:d4:56:aa:07:ba:5c:e6:85:61:30:c0: 11:07:8f:3b -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUHG4xCPK5sNwukqztpLbfRATiFiwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzZmYzAzYzJlMTE2NzEyYzIzMjE0OTcxMGRlYTFiOTU0 OTdmMDIwMDM4MWZjMjg3NWMwHhcNMjUwODE0MTUzODMwWhcNMjYwODEzMTU0MzMw WjAzMTEwLwYDVQQDEyhDNUQ5NTdBNThEOTQ4Q0ZDNDNGQUJFRDU3Nzc1MjU1MTM4 RjhBMEM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLEzLZOxzmeB ijXOP5h7TP5uBLlO7QtMJMV6rF+mVIDQpNhAbYZUvRyHf5O67vuW1Ne1ZzVFqWXJ GzGYw3v0CV0VZ2CZkt79Rc90M7IlqJlIkW8W7dcBFn1mlAKA14GO5AvTdL5spxwK P8RQr5RhPwcs9FZbRiRN4By56nz/dZJlqEUiUm2mciYkGPJ351gR/mlL5j+Fho6U NPsRpG11wFhxVG9UvDn4NLVpbw208/5ZxIlLfY4tbeq6QW9FlpwH2ZOBQrtdzI+7 lsc6jW19LLfQfcab5+RStdamhGATBExK5b1it2SyDvhrpfjjMcMDTR0y9jPL+0yV 4k71EFVaHwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMXZV6WNlIz8Q/q+1Xd1JVE4 +KDFMB8GA1UdIwQYMBaAFOFUCMMQsG6ale0Szi7pMytywtnTMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzViYzg3Mjg5NDczYjQzYzVhNmNlZTkxOWU2ZGViMDkwLzAv RTE1NDA4QzMxMEIwNkU5QTk1RUQxMkNFMkVFOTMzMkI3MkMyRDlEMy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3 ZTM0M2Y4L2Y3MGM5NjEzLTdkZWYtNGJjNC1iODYwLWY0ZTUzNzRkNzZhNy8zNmZj MDNjMmUxMTY3MTJjMjMyMTQ5NzEwZGVhMWI5NTQ5N2YwMjAwMzgxZmMyODc1Yy5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS81YmM4NzI4OTQ3M2I0M2M1YTZjZWU5 MTllNmRlYjA5MC8wLzMyMzAzOTJlMzEzMzMxMmUzMTMyMzAyZTMwMmYzMjMzMmQz MjMzMjAzZDNlMjAzMzM5MzgzOTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHRg3gwDQYJKoZIhvcN AQELBQADggEBADnchsqyUF+Aa8+7q9zGCch7pSRCoVAWbwCO6shhFFCUpotuu6Bz v3PjrJWooKRAkg6fszFdmKW+rabvt6fvNvmkMdMJ1SKErj7/Tjl1AXYVIJpe7SRP VHbdQHPsOVWoXKGHZ3g3ufwpg/zjM2WgnsM9wdWDUZgnleJRsJQRHMsXkmomOl6B ObKINbnsAOUnQqUjHfxpHR9a0Szhh2vTsjiOpmMCB0TVhBqvBjCJ83IUTK3u8BV3 dNMcKdXB7xF0Fmjzda6lk066TdjMaxPmPR6fpqZzTUN/yREEbzot4KvH5Cl+IByB etxfi+1r0WhVnZLUVqoHulzmhWEwwBEHjzs= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:52 2025 by rpki-client