$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20393834.roa File: 3139352e37382e35362e302f32342d3234203d3e20393834.roa (raw, json) Hash identifier: kGQpDh6Nv/Dvy48s/y34wH4uZ6OkW8/xaFfHRQ7Mr8k= Subject key identifier: A4:41:4D:13:5C:72:06:E5:37:A9:8F:89:BA:0E:30:F6:61:0E:99:5F Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 57C89C393A00A0ABF36252182C70DD480DAB7687 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20393834.roa Signing time: Sat 29 Mar 2025 10:28:26 +0000 ROA not before: Sat 29 Mar 2025 10:23:26 +0000 ROA not after: Sat 28 Mar 2026 10:28:26 +0000 asID: 984 IP address blocks: 195.78.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 20:26:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c8:9c:39:3a:00:a0:ab:f3:62:52:18:2c:70:dd:48:0d:ab:76:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Mar 29 10:23:26 2025 GMT Not After : Mar 28 10:28:26 2026 GMT Subject: CN=A4414D135C7206E537A98F89BA0E30F6610E995F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ad:1f:5e:f9:0b:27:14:70:51:e4:10:6d:ef: d4:3e:a2:24:37:8e:b4:98:d4:3b:56:66:97:22:b6: a8:4b:9e:5d:71:5f:c6:17:76:e2:da:c8:98:db:16: ae:f8:d5:ec:4c:c6:ea:31:65:d1:ef:0d:48:6a:6d: e5:b7:cc:2c:79:58:88:6f:a3:7e:b6:a0:6e:56:39: 86:ab:40:32:5b:57:01:c5:0c:44:c5:0a:7f:05:9d: 2f:ac:1b:7d:d8:05:3c:ac:d4:ae:6a:84:83:56:f2: 8c:ba:d8:07:fe:b5:b0:12:69:be:06:09:4d:4a:ac: 78:76:aa:b0:68:5c:5f:ae:5b:67:25:60:6a:8b:d9: 50:ab:91:68:24:46:28:89:3e:6a:64:92:af:75:53: 33:fe:5c:a7:9a:b8:0d:5b:6b:23:1d:65:71:6c:f6: cf:15:3e:a1:86:db:de:54:17:b5:b8:19:70:12:7b: c7:e4:c1:d2:d3:cb:bf:d2:bd:b6:e8:04:22:30:c7: 3a:c4:6f:6d:bc:7d:02:66:4f:06:3f:5e:2a:f6:9c: e4:bb:bc:28:2d:c8:3f:f0:7f:e9:f0:01:c7:78:17: 42:ea:20:46:fc:5a:b2:95:c7:20:c3:51:1a:d8:1b: 51:d7:be:a8:31:15:d3:05:c6:ed:92:5c:76:69:32: 5c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:41:4D:13:5C:72:06:E5:37:A9:8F:89:BA:0E:30:F6:61:0E:99:5F X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20393834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.56.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:8a:33:b2:3f:79:d2:68:ae:4a:19:7b:f5:4f:73:f8:33:20: 92:b4:da:5b:76:5b:83:5b:8c:2a:5d:ae:d3:78:ae:b7:24:60: 98:65:ad:db:9a:5a:47:6d:cf:bf:62:d0:d5:64:cc:23:a9:9c: 8a:2a:1f:ca:8f:ad:3a:ca:e8:a0:ef:b6:cd:9a:85:7c:f9:fa: 14:64:11:3d:a5:ec:93:fb:25:9a:b8:e6:6c:92:c3:1a:65:9b: 72:8d:8f:1c:2a:34:bf:53:1b:a6:9b:91:57:bd:73:79:c5:47: ba:8f:51:b5:e3:0c:ad:5d:9c:bc:06:41:0c:d0:4d:6c:cf:78: 4b:0d:36:d5:75:9d:5d:b2:b7:4c:1b:07:21:94:e0:5a:f2:f8: d7:53:38:d3:a3:55:15:9d:c9:79:da:e9:51:21:c8:c2:c9:4b: 6b:b9:48:2c:3c:f7:8c:1f:5a:77:cd:b9:df:79:55:16:f0:3b: d1:dc:7a:1b:4d:76:27:e4:be:04:46:f1:31:da:63:67:25:28: 51:a6:d5:13:04:4e:11:d2:76:4b:a0:18:f9:42:da:ac:00:14: b6:31:4b:e3:78:4e:fb:7a:c0:6b:3e:0e:17:a7:46:00:2f:69: e8:4b:24:cd:ab:f9:23:41:34:92:fb:1b:15:e2:0a:64:45:f1: 83:90:f4:5d -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUV8icOToAoKvzYlIYLHDdSA2rdocwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwMzI5MTAyMzI2WhcNMjYwMzI4MTAyODI2 WjAzMTEwLwYDVQQDEyhBNDQxNEQxMzVDNzIwNkU1MzdBOThGODlCQTBFMzBGNjYx MEU5OTVGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs60fXvkLJxRw UeQQbe/UPqIkN460mNQ7VmaXIraoS55dcV/GF3bi2siY2xau+NXsTMbqMWXR7w1I am3lt8wseViIb6N+tqBuVjmGq0AyW1cBxQxExQp/BZ0vrBt92AU8rNSuaoSDVvKM utgH/rWwEmm+BglNSqx4dqqwaFxfrltnJWBqi9lQq5FoJEYoiT5qZJKvdVMz/lyn mrgNW2sjHWVxbPbPFT6hhtveVBe1uBlwEnvH5MHS08u/0r226AQiMMc6xG9tvH0C Zk8GP14q9pzku7woLcg/8H/p8AHHeBdC6iBG/Fqylccgw1Ea2BtR176oMRXTBcbt klx2aTJcLQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFKRBTRNccgblN6mPiboOMPZh DplfMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk MzdkYWM3MmYxLzEvMzEzOTM1MmUzNzM4MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIw M2QzZTIwMzkzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw044MA0GCSqGSIb3DQEBCwUAA4IBAQBv ijOyP3nSaK5KGXv1T3P4MyCStNpbdluDW4wqXa7TeK63JGCYZa3bmlpHbc+/YtDV ZMwjqZyKKh/Kj606yuig77bNmoV8+foUZBE9peyT+yWauOZsksMaZZtyjY8cKjS/ Uxumm5FXvXN5xUe6j1G14wytXZy8BkEM0E1sz3hLDTbVdZ1dsrdMGwchlOBa8vjX UzjTo1UVncl52ulRIcjCyUtruUgsPPeMH1p3zbnfeVUW8DvR3HobTXYn5L4ERvEx 2mNnJShRptUTBE4R0nZLoBj5QtqsABS2MUvjeE77esBrPg4Xp0YAL2noSyTNq/kj QTSS+xsV4gpkRfGDkPRd -----END CERTIFICATE-----Generated at Sat Apr 12 07:53:42 2025 by rpki-client