$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa File: 3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: OtFfk28aGhXbBxDlNWHkzu4TabjYDzfA+HTzHVRvnf8= Subject key identifier: CC:76:11:5D:25:0C:2A:EA:06:3A:F5:E1:31:87:29:E9:FF:71:0B:BE Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 35B496D1037A4B1914450C88F91E1B06FE8D2B3E Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa Signing time: Mon 01 Sep 2025 13:29:45 +0000 ROA not before: Mon 01 Sep 2025 13:24:45 +0000 ROA not after: Mon 31 Aug 2026 13:29:45 +0000 asID: 212238 IP address blocks: 192.109.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 04:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b4:96:d1:03:7a:4b:19:14:45:0c:88:f9:1e:1b:06:fe:8d:2b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 1 13:24:45 2025 GMT Not After : Aug 31 13:29:45 2026 GMT Subject: CN=CC76115D250C2AEA063AF5E1318729E9FF710BBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:2c:2d:77:7b:39:a6:23:0d:ac:a5:ba:cd: dd:c9:bc:50:29:d3:7d:e9:2d:d3:b8:7b:87:77:8e: 04:4d:95:2f:6a:25:3b:2c:32:30:86:ff:5f:16:6a: b9:c1:2e:f6:c0:94:94:8c:1e:d6:d0:21:7a:1b:03: be:0d:24:e7:c4:b2:e3:ed:2e:64:57:0f:cc:38:0f: 01:fd:31:ac:87:8d:26:0e:bd:a3:3b:d8:af:61:d1: 6d:7a:a6:28:9d:8e:c6:82:b2:e6:5f:ab:1c:ae:2b: 61:34:61:5d:15:f1:fb:aa:e8:ff:a2:45:1d:46:d5: d9:92:2d:34:69:67:19:2e:39:6e:8c:35:0f:eb:9d: fa:09:21:a7:ab:24:39:15:4f:54:12:8c:64:5e:b5: 62:a8:03:0f:e9:dc:2f:4b:98:2b:f2:df:c4:96:b7: 3b:77:3f:9f:d7:1c:7a:44:29:75:7e:a7:f1:21:bb: de:ef:37:4c:13:8b:d7:cc:43:d5:55:43:eb:cd:02: 58:ae:9c:eb:6b:92:dc:8e:5a:62:3d:31:0a:60:bc: d2:d3:ab:f8:41:57:75:7a:cf:ba:e5:b2:7b:ae:66: 96:56:3e:51:31:0e:12:fb:72:9b:64:0a:f8:71:0d: 17:6c:a7:63:5a:6f:a5:6c:9c:e5:5f:e9:0c:51:d0: 94:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:76:11:5D:25:0C:2A:EA:06:3A:F5:E1:31:87:29:E9:FF:71:0B:BE X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3133362e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.136.0/24 Signature Algorithm: sha256WithRSAEncryption 57:0b:eb:0f:91:98:58:54:4c:23:6c:d4:f5:71:2a:73:2c:f3: de:aa:c0:f6:e3:6a:a1:b4:67:97:e1:12:bf:9f:e7:cb:b8:ae: 35:1a:15:48:f5:2c:31:32:04:19:10:ce:68:82:62:cb:f5:18: 9f:bb:05:22:01:aa:d0:ec:bf:d1:68:cc:8f:a8:cd:fc:35:8d: 2c:6b:c3:a9:8a:94:8b:3c:a7:14:bc:ef:f3:a3:5d:9f:e3:8b: 49:af:27:56:84:c8:dc:f6:07:63:72:4e:13:73:3e:a4:f3:42: 6e:b4:de:c6:13:0a:e8:3f:0a:34:a4:58:c5:f7:f3:67:1e:ca: 62:12:cc:30:15:77:c3:14:57:44:d1:3e:77:68:bf:9c:79:cb: 5c:d4:26:99:70:4f:b1:de:c8:01:f9:2d:ca:e5:5b:7b:d3:b1: 9c:2f:ad:c5:48:dd:9e:f0:0e:34:8a:e4:e9:2a:ff:80:cf:99: 17:c3:6a:db:6a:09:37:da:2c:d3:c8:78:ad:9a:18:32:99:0e: 43:e9:fe:2f:3a:0f:f4:00:5b:ae:70:22:5e:7d:62:9c:23:94: 68:b0:4f:e2:ea:6c:40:d6:41:42:05:14:79:1c:0b:49:ce:83: 1e:21:6f:f3:96:7f:e9:4c:ef:b9:14:ef:c0:e1:b4:37:1b:f8: b0:d5:09:71 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUNbSW0QN6SxkURQyI+R4bBv6NKz4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTAxMTMyNDQ1WhcNMjYwODMxMTMyOTQ1 WjAzMTEwLwYDVQQDEyhDQzc2MTE1RDI1MEMyQUVBMDYzQUY1RTEzMTg3MjlFOUZG NzEwQkJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl4sLXd7OaYj Daylus3dybxQKdN96S3TuHuHd44ETZUvaiU7LDIwhv9fFmq5wS72wJSUjB7W0CF6 GwO+DSTnxLLj7S5kVw/MOA8B/TGsh40mDr2jO9ivYdFteqYonY7GgrLmX6scrith NGFdFfH7quj/okUdRtXZki00aWcZLjlujDUP6536CSGnqyQ5FU9UEoxkXrViqAMP 6dwvS5gr8t/Elrc7dz+f1xx6RCl1fqfxIbve7zdME4vXzEPVVUPrzQJYrpzra5Lc jlpiPTEKYLzS06v4QVd1es+65bJ7rmaWVj5RMQ4S+3KbZAr4cQ0XbKdjWm+lbJzl X+kMUdCUowIDAQABo4ICtjCCArIwHQYDVR0OBBYEFMx2EV0lDCrqBjr14TGHKen/ cQu+MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMzMzYyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAbYgwDQYJKoZIhvcN AQELBQADggEBAFcL6w+RmFhUTCNs1PVxKnMs896qwPbjaqG0Z5fhEr+f58u4rjUa FUj1LDEyBBkQzmiCYsv1GJ+7BSIBqtDsv9FozI+ozfw1jSxrw6mKlIs8pxS87/Oj XZ/ji0mvJ1aEyNz2B2NyThNzPqTzQm603sYTCug/CjSkWMX382ceymISzDAVd8MU V0TRPndov5x5y1zUJplwT7HeyAH5LcrlW3vTsZwvrcVI3Z7wDjSK5Okq/4DPmRfD attqCTfaLNPIeK2aGDKZDkPp/i86D/QAW65wIl59YpwjlGiwT+LqbEDWQUIFFHkc C0nOgx4hb/OWf+lM77kU78DhtDcb+LDVCXE= -----END CERTIFICATE-----Generated at Sun Oct 19 08:23:32 2025 by rpki-client