$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa File: 3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa (raw, json) Hash identifier: rDY+nArd86nDMNpP/PGAEN5WpXxjnOD7l+YXYhgKY80= Subject key identifier: B9:C5:D1:A1:7B:E0:07:36:13:74:45:16:A0:5C:E2:E9:02:C5:D1:59 Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90 Certificate serial: 278FA94550A497E8DD4C1CB4CD8500C742245589 Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa Signing time: Sun 05 Jan 2025 14:10:37 +0000 ROA not before: Sun 05 Jan 2025 14:05:37 +0000 ROA not after: Sun 04 Jan 2026 14:10:37 +0000 asID: 63264 IP address blocks: 172.109.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Feb 2025 15:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:8f:a9:45:50:a4:97:e8:dd:4c:1c:b4:cd:85:00:c7:42:24:55:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90 Validity Not Before: Jan 5 14:05:37 2025 GMT Not After : Jan 4 14:10:37 2026 GMT Subject: CN=B9C5D1A17BE0073613744516A05CE2E902C5D159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c8:a8:68:a6:09:d9:48:64:5a:4c:f1:ec:6b: f3:f9:e0:48:3e:22:62:07:b0:35:11:64:fc:37:55: c6:72:8e:8e:b6:6f:e2:1e:b3:2a:76:04:4f:5a:80: 2b:d6:27:20:6c:7a:6f:29:e5:72:ac:f2:42:46:4c: 74:3c:72:fe:7c:1a:53:32:78:35:e8:e6:4e:25:04: b1:29:df:fd:3b:70:00:78:7f:af:1f:06:d8:16:4c: e6:a5:d4:6d:eb:92:8a:b0:2c:57:08:ea:81:c0:a5: 91:a0:1b:8b:80:82:7c:57:d5:67:65:17:b4:3b:59: c7:b2:f2:4f:ea:5d:a2:43:38:60:59:db:5e:31:e0: eb:44:ed:90:de:84:29:b7:b8:65:34:77:43:4c:9e: 3f:9f:7a:a9:27:da:e9:5b:6e:49:c9:15:dd:50:15: 1e:0e:37:15:ac:d7:dc:c4:2e:b1:f3:f3:36:f0:40: 7c:b7:86:61:e8:c1:3a:17:55:a8:41:33:83:9c:12: b0:2d:59:4a:8b:94:59:76:01:99:fa:9a:7f:89:ae: 3f:54:bc:ba:ca:9a:33:16:ca:8e:ba:b2:2b:11:c1: 60:c0:c4:1d:96:56:81:c5:04:e8:42:24:b1:b3:22: 95:81:bf:b7:c1:e4:28:84:05:65:4b:cf:9d:ea:70: ba:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C5:D1:A1:7B:E0:07:36:13:74:45:16:A0:5C:E2:E9:02:C5:D1:59 X509v3 Authority Key Identifier: keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235352e302f32342d3234203d3e203633323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.109.255.0/24 Signature Algorithm: sha256WithRSAEncryption 76:7b:44:5b:b5:18:10:d5:e5:49:ae:50:79:a2:1e:98:73:f5: 32:a0:6d:52:e7:be:a5:cc:91:1d:d8:93:22:ba:0c:86:25:0c: 6d:93:10:82:72:f9:c3:67:20:9d:90:5b:15:7b:66:2e:4d:73: df:4d:60:7d:9f:bb:06:ec:0b:07:40:61:e3:94:d4:34:7b:c1: 29:e5:81:88:30:1d:f5:d9:9a:a6:c1:06:7d:ef:de:b3:ac:65: eb:fb:74:91:31:af:7f:ed:07:91:1b:a9:0b:e1:1c:2c:be:f5: 89:94:2d:00:7d:a0:7b:70:b1:21:0e:b7:5d:22:1d:b3:37:57: 2c:61:e4:c7:1b:8f:3c:17:e1:17:3d:45:47:e5:ed:e9:5d:32: a2:72:9e:54:52:75:d1:b3:59:35:e1:2f:e3:39:4b:78:33:08: 8b:8a:e9:80:26:4f:0b:8a:da:40:3b:0e:83:2f:c2:62:f0:fd: 13:95:21:6a:32:c7:6a:5d:69:fc:e3:bf:22:24:2b:82:94:8a: b7:73:f9:f8:1a:9d:bd:51:02:ce:16:e2:d4:01:cf:79:bc:6b: af:d5:51:03:67:24:49:26:16:4e:1c:51:d3:07:ed:d1:a9:9f: 02:de:86:d6:17:1e:6b:39:87:19:e1:08:6a:f4:e3:8f:3e:2c: c0:fc:a2:aa -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUJ4+pRVCkl+jdTBy0zYUAx0IkVYkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx N2I3MjY5NjIwM2RjODNhOTAwHhcNMjUwMTA1MTQwNTM3WhcNMjYwMTA0MTQxMDM3 WjAzMTEwLwYDVQQDEyhCOUM1RDFBMTdCRTAwNzM2MTM3NDQ1MTZBMDVDRTJFOTAy QzVEMTU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8ioaKYJ2Uhk Wkzx7Gvz+eBIPiJiB7A1EWT8N1XGco6Otm/iHrMqdgRPWoAr1icgbHpvKeVyrPJC Rkx0PHL+fBpTMng16OZOJQSxKd/9O3AAeH+vHwbYFkzmpdRt65KKsCxXCOqBwKWR oBuLgIJ8V9VnZRe0O1nHsvJP6l2iQzhgWdteMeDrRO2Q3oQpt7hlNHdDTJ4/n3qp J9rpW25JyRXdUBUeDjcVrNfcxC6x8/M28EB8t4Zh6ME6F1WoQTODnBKwLVlKi5RZ dgGZ+pp/ia4/VLy6ypozFsqOurIrEcFgwMQdllaBxQToQiSxsyKVgb+3weQohAVl S8+d6nC6FwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFLnF0aF74Ac2E3RFFqBc4ukC xdFZMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy YTkwYTJmMDk3Zi8wLzMxMzczMjJlMzEzMDM5MmUzMjM1MzUyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNjMzMzIzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG3/MA0GCSqGSIb3DQEB CwUAA4IBAQB2e0RbtRgQ1eVJrlB5oh6Yc/UyoG1S576lzJEd2JMiugyGJQxtkxCC cvnDZyCdkFsVe2YuTXPfTWB9n7sG7AsHQGHjlNQ0e8Ep5YGIMB312ZqmwQZ9796z rGXr+3SRMa9/7QeRG6kL4RwsvvWJlC0AfaB7cLEhDrddIh2zN1csYeTHG488F+EX PUVH5e3pXTKicp5UUnXRs1k14S/jOUt4MwiLiumAJk8LitpAOw6DL8Ji8P0TlSFq MsdqXWn8478iJCuClIq3c/n4Gp29UQLOFuLUAc95vGuv1VEDZyRJJhZOHFHTB+3R qZ8C3obWFx5rOYcZ4Qhq9OOPPizA/KKq -----END CERTIFICATE-----Generated at Fri Feb 21 13:09:28 2025 by rpki-client