$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32332d3234203d3e20333938393931.roa File: 3230392e3133312e3132302e302f32332d3234203d3e20333938393931.roa (raw, json) Hash identifier: +CwOfNcEf/yGK8ZUJOT1IIxPuNt72pt6hiYhuIVEjCA= Subject key identifier: FB:6D:37:E8:9F:4B:BC:B4:50:6C:A2:68:29:44:48:CB:5C:44:65:0B Certificate issuer: /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c Certificate serial: 1E3AEDBFB8241440A44BFA8CE76D4A60A74D2A90 Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer Subject info access: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32332d3234203d3e20333938393931.roa Signing time: Fri 15 Aug 2025 03:39:38 +0000 ROA not before: Fri 15 Aug 2025 03:34:38 +0000 ROA not after: Fri 14 Aug 2026 03:39:38 +0000 asID: 398991 IP address blocks: 209.131.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 21 Aug 2025 12:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:3a:ed:bf:b8:24:14:40:a4:4b:fa:8c:e7:6d:4a:60:a7:4d:2a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c Validity Not Before: Aug 15 03:34:38 2025 GMT Not After : Aug 14 03:39:38 2026 GMT Subject: CN=FB6D37E89F4BBCB4506CA268294448CB5C44650B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:34:b0:e3:81:da:e8:9d:f0:ea:da:53:89:84: 74:2e:f4:57:e0:fe:89:af:43:52:1b:92:33:05:32: 09:50:97:1d:60:6b:aa:03:fd:30:e3:69:09:12:28: 13:a0:a0:3d:ff:79:49:fb:c1:af:0f:94:35:0c:12: e9:a5:24:9a:89:93:aa:72:f2:82:ec:cc:91:20:24: ff:80:03:1a:20:53:da:c9:f2:6f:4b:3b:bf:17:d1: d6:0e:67:5e:c1:0f:26:05:cb:9c:7d:55:0b:14:eb: fb:5b:8d:cb:e1:92:34:65:06:05:ec:6d:a9:84:9b: 33:69:00:36:ea:87:db:6a:9a:ac:1f:59:da:16:5d: c0:ab:c7:08:e9:bb:f1:9c:ef:47:d9:ad:66:2f:9e: 38:95:88:55:8c:5d:19:9e:c0:b0:ab:cb:21:b5:41: 0f:32:40:67:49:37:81:38:61:12:f7:24:e9:00:74: 15:54:5f:56:f5:f6:13:7c:2f:ac:cf:a9:a9:61:8d: d7:1e:fd:31:fc:0c:48:5a:fe:ee:16:da:09:c1:ce: 11:f7:f2:0c:4a:e1:1a:9a:53:b8:8f:ee:ce:0b:57: fd:cc:43:a5:c4:4b:62:8a:91:67:d1:75:79:44:f5: 64:cc:b5:e8:0a:40:45:14:74:7d:6e:b6:76:67:ed: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:6D:37:E8:9F:4B:BC:B4:50:6C:A2:68:29:44:48:CB:5C:44:65:0B X509v3 Authority Key Identifier: keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230392e3133312e3132302e302f32332d3234203d3e20333938393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.131.120.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:c7:4b:55:09:be:27:e8:91:54:74:50:bc:96:53:16:7c:7a: 58:25:bc:d0:b8:e1:2b:98:6e:5f:d2:95:06:f9:e2:73:81:eb: 3b:1c:3e:d2:e3:27:d1:ea:68:fa:bd:d6:d5:b3:7b:4f:ac:da: f8:33:f9:b2:42:18:b3:28:41:29:c4:57:58:cb:b7:88:ca:3f: a8:36:aa:17:c5:e2:17:4f:05:d4:fd:46:4d:3e:12:bd:1c:be: 3c:ae:cb:99:e1:d6:5b:47:c1:b0:c2:96:ed:03:c3:f8:be:c2: 39:15:29:73:7c:b9:cf:4c:8f:5e:1a:39:3f:b1:21:30:cf:17: 49:b6:6f:6b:3b:bf:82:72:1b:cb:b0:40:de:5d:59:2f:fe:88: d3:6a:ba:91:02:4a:6f:08:9b:7f:3c:49:17:d5:df:11:56:a6: f8:da:63:57:bd:f5:45:33:52:d4:ac:7f:37:f7:3c:8e:28:86: 61:e9:39:0b:68:9b:9d:c0:6a:f6:a5:92:c9:bb:90:43:7b:de: 88:17:31:b5:29:0e:6e:0c:55:b8:f3:53:2b:38:43:c3:78:68: 8d:75:de:5d:5c:d1:bc:fd:3c:b0:5b:55:ad:a8:e2:63:48:5d: 3d:7b:a3:c4:56:d3:ea:21:5a:97:fc:29:5a:7b:f2:b2:1b:04: e8:fc:40:e1 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUHjrtv7gkFECkS/qM521KYKdNKpAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzZmYzAzYzJlMTE2NzEyYzIzMjE0OTcxMGRlYTFiOTU0 OTdmMDIwMDM4MWZjMjg3NWMwHhcNMjUwODE1MDMzNDM4WhcNMjYwODE0MDMzOTM4 WjAzMTEwLwYDVQQDEyhGQjZEMzdFODlGNEJCQ0I0NTA2Q0EyNjgyOTQ0NDhDQjVD NDQ2NTBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzSw44Ha6J3w 6tpTiYR0LvRX4P6Jr0NSG5IzBTIJUJcdYGuqA/0w42kJEigToKA9/3lJ+8GvD5Q1 DBLppSSaiZOqcvKC7MyRICT/gAMaIFPayfJvSzu/F9HWDmdewQ8mBcucfVULFOv7 W43L4ZI0ZQYF7G2phJszaQA26ofbapqsH1naFl3Aq8cI6bvxnO9H2a1mL544lYhV jF0ZnsCwq8shtUEPMkBnSTeBOGES9yTpAHQVVF9W9fYTfC+sz6mpYY3XHv0x/AxI Wv7uFtoJwc4R9/IMSuEamlO4j+7OC1f9zEOlxEtiipFn0XV5RPVkzLXoCkBFFHR9 brZ2Z+0HZwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPttN+ifS7y0UGyiaClESMtc RGULMB8GA1UdIwQYMBaAFOFUCMMQsG6ale0Szi7pMytywtnTMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzViYzg3Mjg5NDczYjQzYzVhNmNlZTkxOWU2ZGViMDkwLzAv RTE1NDA4QzMxMEIwNkU5QTk1RUQxMkNFMkVFOTMzMkI3MkMyRDlEMy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3 ZTM0M2Y4L2Y3MGM5NjEzLTdkZWYtNGJjNC1iODYwLWY0ZTUzNzRkNzZhNy8zNmZj MDNjMmUxMTY3MTJjMjMyMTQ5NzEwZGVhMWI5NTQ5N2YwMjAwMzgxZmMyODc1Yy5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS81YmM4NzI4OTQ3M2I0M2M1YTZjZWU5 MTllNmRlYjA5MC8wLzMyMzAzOTJlMzEzMzMxMmUzMTMyMzAyZTMwMmYzMjMzMmQz MjM0MjAzZDNlMjAzMzM5MzgzOTM5MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHRg3gwDQYJKoZIhvcN AQELBQADggEBAHzHS1UJvifokVR0ULyWUxZ8elglvNC44SuYbl/SlQb54nOB6zsc PtLjJ9HqaPq91tWze0+s2vgz+bJCGLMoQSnEV1jLt4jKP6g2qhfF4hdPBdT9Rk0+ Er0cvjyuy5nh1ltHwbDClu0Dw/i+wjkVKXN8uc9Mj14aOT+xITDPF0m2b2s7v4Jy G8uwQN5dWS/+iNNqupECSm8Im388SRfV3xFWpvjaY1e99UUzUtSsfzf3PI4ohmHp OQtom53Aavalksm7kEN73ogXMbUpDm4MVbjzUys4Q8N4aI113l1c0bz9PLBbVa2o 4mNIXT17o8RW0+ohWpf8KVp78rIbBOj8QOE= -----END CERTIFICATE-----Generated at Wed Aug 20 10:46:09 2025 by rpki-client