$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203134393335.roa File: 3139382e33372e39362e302f32302d3234203d3e203134393335.roa (raw, json) Hash identifier: ZAc+4mnjrBh4B77WPokmsEHQivE4vS5GyT8/4kYjF3s= Subject key identifier: 72:06:4C:F4:64:68:08:41:1D:24:0A:E2:BF:9F:91:97:9D:B5:C7:BF Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 0EE4E1DE340C63A4F44985B72B6FCC6E850A276F Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203134393335.roa Signing time: Mon 01 Sep 2025 13:29:45 +0000 ROA not before: Mon 01 Sep 2025 13:24:45 +0000 ROA not after: Mon 31 Aug 2026 13:29:45 +0000 asID: 14935 IP address blocks: 198.37.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 08:32:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:e1:de:34:0c:63:a4:f4:49:85:b7:2b:6f:cc:6e:85:0a:27:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 1 13:24:45 2025 GMT Not After : Aug 31 13:29:45 2026 GMT Subject: CN=72064CF4646808411D240AE2BF9F91979DB5C7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:56:e2:b8:95:b1:e0:e3:b7:b9:3a:04:01:a5: 1b:99:c8:05:87:32:a1:fa:88:53:19:17:27:f3:f8: 69:cb:41:55:57:44:71:4f:80:8a:7d:3d:40:17:7f: 37:b5:85:cc:cd:24:9b:9b:fc:49:1c:15:65:2f:a0: 00:6c:f2:66:b2:c5:88:9a:27:a2:38:46:61:40:c7: 5c:a7:42:43:26:c2:72:38:c6:b0:46:a7:36:bc:0e: 82:27:4a:3d:32:17:7a:5a:f7:80:32:66:d0:d9:05: c9:7a:55:e5:71:aa:5c:fb:55:55:05:93:f7:4f:58: c6:f4:88:04:0e:53:5b:ac:5a:7b:af:68:36:5b:b1: a5:57:c2:0a:31:43:75:38:7a:c7:c4:de:2d:e6:ed: 61:d0:93:6b:4d:ad:37:88:be:00:52:a5:f2:4a:39: ec:0e:e8:6c:ac:ee:e0:13:f8:b2:0b:42:3a:3f:00: 70:57:be:f3:d7:e1:2c:d0:aa:c1:7e:21:20:ae:3f: 4a:2f:f8:84:86:fc:c7:38:1a:8f:79:ab:82:bc:f7: 12:98:29:a8:ba:a0:87:80:3f:bc:f5:de:ae:93:f4: 07:ce:82:cb:c7:38:52:66:bf:c4:ee:02:a5:d4:dc: d8:16:2a:8d:d8:0e:5e:83:84:e3:70:df:c6:4e:43: 71:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:06:4C:F4:64:68:08:41:1D:24:0A:E2:BF:9F:91:97:9D:B5:C7:BF X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203134393335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.37.96.0/20 Signature Algorithm: sha256WithRSAEncryption b4:4e:f9:42:3f:67:9a:29:ef:80:14:41:7d:51:f9:34:48:b8: b0:bd:8d:e3:89:fa:c6:09:4c:92:79:08:b0:88:c7:cd:ff:7c: f0:39:b0:21:b3:8d:e6:18:fb:08:a2:9a:7a:86:62:31:d6:8c: 04:c1:25:ec:3e:c6:30:9a:2b:df:7d:4d:78:db:2c:1c:ff:9b: 0d:53:b7:52:7d:bb:ca:2c:47:f6:e7:f3:61:1e:d9:cf:24:3a: ad:07:e4:6e:fd:45:63:d2:3b:0f:f4:95:52:b6:e2:78:07:e0: 31:10:2b:b8:7e:f0:1e:58:92:d6:7e:d9:92:5c:61:8e:3a:24: 36:36:68:9c:5c:de:48:e8:bc:ab:aa:5f:25:b0:bf:5e:c0:6c: b5:89:57:5a:01:c7:27:2b:8c:b0:a2:d8:ec:11:51:9f:b6:db: 4a:6a:66:52:fd:e3:10:a8:5d:6e:8c:47:bc:2d:2e:b7:72:0b: 45:45:ac:bc:12:50:3c:25:b3:47:5a:b9:43:19:86:00:62:57: cf:7e:c8:43:68:d0:d1:14:06:fd:99:c5:91:55:69:78:ff:be: 7a:d0:eb:fc:5e:76:79:1d:7e:e6:19:00:36:ef:73:53:c4:a9: 3c:5b:fe:f0:9a:e4:e6:a9:cd:32:74:eb:a9:10:65:b3:81:04: b6:ed:d0:05 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUDuTh3jQMY6T0SYW3K2/MboUKJ28wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTAxMTMyNDQ1WhcNMjYwODMxMTMyOTQ1 WjAzMTEwLwYDVQQDEyg3MjA2NENGNDY0NjgwODQxMUQyNDBBRTJCRjlGOTE5NzlE QjVDN0JGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlbiuJWx4OO3 uToEAaUbmcgFhzKh+ohTGRcn8/hpy0FVV0RxT4CKfT1AF383tYXMzSSbm/xJHBVl L6AAbPJmssWImieiOEZhQMdcp0JDJsJyOMawRqc2vA6CJ0o9Mhd6WveAMmbQ2QXJ elXlcapc+1VVBZP3T1jG9IgEDlNbrFp7r2g2W7GlV8IKMUN1OHrHxN4t5u1h0JNr Ta03iL4AUqXySjnsDuhsrO7gE/iyC0I6PwBwV77z1+Es0KrBfiEgrj9KL/iEhvzH OBqPeauCvPcSmCmouqCHgD+89d6uk/QHzoLLxzhSZr/E7gKl1NzYFiqN2A5eg4Tj cN/GTkNx8wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHIGTPRkaAhBHSQK4r+fkZed tce/MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzAyZDMyMzQy MDNkM2UyMDMxMzQzOTMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATGJWAwDQYJKoZIhvcNAQELBQAD ggEBALRO+UI/Z5op74AUQX1R+TRIuLC9jeOJ+sYJTJJ5CLCIx83/fPA5sCGzjeYY +wiimnqGYjHWjATBJew+xjCaK999TXjbLBz/mw1Tt1J9u8osR/bn82Ee2c8kOq0H 5G79RWPSOw/0lVK24ngH4DEQK7h+8B5YktZ+2ZJcYY46JDY2aJxc3kjovKuqXyWw v17AbLWJV1oBxycrjLCi2OwRUZ+220pqZlL94xCoXW6MR7wtLrdyC0VFrLwSUDwl s0dauUMZhgBiV89+yENo0NEUBv2ZxZFVaXj/vnrQ6/xednkdfuYZADbvc1PEqTxb /vCa5OapzTJ066kQZbOBBLbt0AU= -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:08 2025 by rpki-client