$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa File: 3139392e3130312e3137312e302f32342d3234203d3e20313734.roa (raw, json) Hash identifier: XCImm6/E2iTc40kEAXpLfPB8p4fDe61VjLpzbBTrVik= Subject key identifier: 54:E0:07:BA:50:52:01:AF:8D:EC:19:BF:9F:9B:04:FA:48:A1:58:E5 Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a Certificate serial: 4E3FF7AE2D42A5308BF13B3D13F5B3C135F273A5 Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa Signing time: Wed 27 Aug 2025 16:29:44 +0000 ROA not before: Wed 27 Aug 2025 16:24:44 +0000 ROA not after: Wed 26 Aug 2026 16:29:44 +0000 asID: 174 IP address blocks: 199.101.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 02:14:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:3f:f7:ae:2d:42:a5:30:8b:f1:3b:3d:13:f5:b3:c1:35:f2:73:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a Validity Not Before: Aug 27 16:24:44 2025 GMT Not After : Aug 26 16:29:44 2026 GMT Subject: CN=54E007BA505201AF8DEC19BF9F9B04FA48A158E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:01:a2:27:8f:f8:fb:15:4b:bc:99:a8:30:0c: 6d:f1:38:a0:f5:56:59:a2:3d:86:55:c3:b7:9b:42: 4a:99:da:66:7b:d3:0c:dc:a7:6f:60:33:5e:47:93: 40:50:a5:bc:75:ca:c7:e1:76:a5:c7:05:81:9c:d8: f5:48:2d:b2:0a:aa:a0:d6:a7:a6:e6:9b:02:c7:0e: 1d:c9:07:e3:58:8c:3a:64:8e:a6:ee:68:e7:57:72: e6:50:37:7f:d0:e8:9d:b7:15:75:c6:28:f3:73:37: 23:bf:a0:ec:3b:0c:3c:df:c7:87:8c:67:c9:1e:de: c7:f9:20:07:f2:a7:b0:df:45:cf:73:9e:51:37:94: 4d:4b:98:b4:8f:22:9c:d9:4c:0a:67:44:99:cc:da: f3:c7:da:f1:60:e2:9e:d5:7a:37:c5:73:50:44:67: d1:51:4f:01:2b:b1:d3:ac:32:c0:14:47:4a:23:80: 6d:74:ef:ca:02:97:46:ed:5a:73:a2:af:8d:e3:90: 57:b1:76:dc:4d:55:d1:b3:dc:be:a5:46:5e:4e:71: 6d:50:41:3b:57:50:a2:59:4b:1d:79:56:a1:91:3d: d6:82:a5:6e:88:2c:c9:31:c0:12:19:70:4a:77:11: e0:70:87:79:9e:16:89:55:25:75:26:7b:f9:b6:61: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E0:07:BA:50:52:01:AF:8D:EC:19:BF:9F:9B:04:FA:48:A1:58:E5 X509v3 Authority Key Identifier: keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20313734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.101.171.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:5c:13:e0:80:71:9e:d5:ee:5c:5e:54:2e:8e:97:dc:92:2a: d4:6a:90:ed:76:ac:ba:4d:46:f3:07:9d:2f:c5:5f:7a:e8:c8: be:b6:d5:13:c0:3d:47:3e:cb:e0:20:1b:4b:e8:30:b2:e1:26: 15:57:38:8d:67:6b:a5:0f:49:b0:4b:7a:b3:a1:0d:26:ab:86: 52:b7:6b:59:6b:36:0a:b2:ba:e9:e2:84:04:8f:4e:fb:3d:d1: 8f:e0:d8:b8:b6:47:ef:1d:ab:6d:2d:a5:48:7f:43:33:bb:08: 49:b6:73:b3:9b:9d:2c:5b:49:ae:09:a3:dd:08:c4:d4:9b:48: 77:a7:3e:41:89:72:1d:b9:26:5f:12:df:05:30:84:a4:83:a0: a5:64:2b:cf:df:6f:45:12:78:d1:9e:51:a0:cf:c1:14:1b:33: 84:4d:83:95:0a:e9:25:f7:71:f0:32:61:a0:2f:2b:c6:81:46: ed:40:0f:67:1d:c4:f4:28:15:ad:6c:db:1e:27:79:f5:68:5b: 98:9c:1d:d6:c4:d1:07:78:1e:87:d3:33:21:9f:bb:5a:ef:34: 1f:d8:7d:52:de:63:18:d0:24:43:60:b3:4f:c3:3d:f8:61:70: 40:14:ab:b8:d4:70:70:c9:50:fb:c6:a7:dc:7e:0f:c1:3b:6e: 72:9e:9c:82 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUTj/3ri1CpTCL8Ts9E/WzwTXyc6UwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjUwODI3MTYyNDQ0WhcNMjYwODI2MTYyOTQ0 WjAzMTEwLwYDVQQDEyg1NEUwMDdCQTUwNTIwMUFGOERFQzE5QkY5RjlCMDRGQTQ4 QTE1OEU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwGiJ4/4+xVL vJmoMAxt8Tig9VZZoj2GVcO3m0JKmdpme9MM3KdvYDNeR5NAUKW8dcrH4XalxwWB nNj1SC2yCqqg1qem5psCxw4dyQfjWIw6ZI6m7mjnV3LmUDd/0OidtxV1xijzczcj v6DsOww838eHjGfJHt7H+SAH8qew30XPc55RN5RNS5i0jyKc2UwKZ0SZzNrzx9rx YOKe1Xo3xXNQRGfRUU8BK7HTrDLAFEdKI4BtdO/KApdG7Vpzoq+N45BXsXbcTVXR s9y+pUZeTnFtUEE7V1CiWUsdeVahkT3WgqVuiCzJMcASGXBKdxHgcId5nhaJVSV1 Jnv5tmFRpQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFTgB7pQUgGvjewZv5+bBPpI oVjlMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy YzFiMTllMGM1ZS8wLzMxMzkzOTJlMzEzMDMxMmUzMTM3MzEyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHZaswDQYJKoZIhvcNAQELBQAD ggEBAA5cE+CAcZ7V7lxeVC6Ol9ySKtRqkO12rLpNRvMHnS/FX3royL621RPAPUc+ y+AgG0voMLLhJhVXOI1na6UPSbBLerOhDSarhlK3a1lrNgqyuunihASPTvs90Y/g 2Li2R+8dq20tpUh/QzO7CEm2c7ObnSxbSa4Jo90IxNSbSHenPkGJch25Jl8S3wUw hKSDoKVkK8/fb0USeNGeUaDPwRQbM4RNg5UK6SX3cfAyYaAvK8aBRu1AD2cdxPQo Fa1s2x4nefVoW5icHdbE0Qd4HofTMyGfu1rvNB/YfVLeYxjQJENgs0/DPfhhcEAU q7jUcHDJUPvGp9x+D8E7bnKenII= -----END CERTIFICATE-----Generated at Tue Sep 9 06:17:52 2025 by rpki-client