$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa File: 3139382e33372e39362e302f32302d3234203d3e203137323136.roa (raw, json) Hash identifier: ztFX7VTyWDNs28F3YvxsqnV4mIPIRHXFfg9SkRvMr6g= Subject key identifier: 28:DC:B7:4D:88:DB:AF:E2:54:8F:E9:28:C4:24:3C:C0:BD:F0:76:BE Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 7CCB9E0692F10B6FCF0F5932AF461B2C56A238B7 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa Signing time: Mon 01 Sep 2025 13:29:44 +0000 ROA not before: Mon 01 Sep 2025 13:24:44 +0000 ROA not after: Mon 31 Aug 2026 13:29:44 +0000 asID: 17216 IP address blocks: 198.37.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 15:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:cb:9e:06:92:f1:0b:6f:cf:0f:59:32:af:46:1b:2c:56:a2:38:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 1 13:24:44 2025 GMT Not After : Aug 31 13:29:44 2026 GMT Subject: CN=28DCB74D88DBAFE2548FE928C4243CC0BDF076BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7c:ad:3b:4e:5a:2e:09:ca:95:90:ac:5f:27: b2:b2:46:0e:dc:79:2c:3b:b9:2d:d1:ba:91:16:68: 1e:90:e2:a7:90:6e:38:1a:4c:d4:a0:48:c5:68:02: b3:80:24:2f:6c:95:02:5e:c8:be:d5:1e:18:dc:46: bc:45:5f:4d:14:04:c0:50:8a:78:8d:d2:a1:26:bb: f1:22:e4:43:2c:91:c3:02:14:0c:82:ab:9c:7a:4c: 14:e2:e3:ab:6e:90:53:e0:cd:9c:f2:92:66:08:92: a1:17:95:d8:d6:16:67:f3:58:4f:12:11:63:f7:e0: 6a:34:b1:b6:4b:3a:d2:29:f3:06:0a:f0:ba:2f:c6: 48:4e:c6:e8:19:07:87:74:33:95:bd:a3:81:00:48: 6c:6d:1d:69:bb:8d:8f:78:30:6f:6c:de:5a:c6:0a: e4:cd:dc:d5:3e:05:3e:6d:44:d4:e5:7b:d8:8a:8e: 5c:3f:f1:5d:37:51:0a:6b:09:41:8a:b9:37:ba:83: 00:80:fc:d0:14:5c:bf:aa:09:48:29:f2:78:d9:fb: 26:c3:24:ae:c4:1c:cc:a0:1b:49:d9:54:be:19:5d: 04:77:a5:54:7d:b0:fe:a8:55:15:d2:d2:24:2d:44: d8:ee:d1:a9:16:d5:4e:e7:bd:15:22:a3:fd:2d:f8: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:B7:4D:88:DB:AF:E2:54:8F:E9:28:C4:24:3C:C0:BD:F0:76:BE X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e203137323136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.37.96.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:80:a3:18:cb:58:f7:cd:0a:75:02:73:47:fa:34:49:42:82: ea:36:e3:6d:5c:af:f8:f4:8e:9b:bd:9e:ad:21:2a:ac:01:e9: 6c:9d:2a:f8:1c:5b:e4:1c:c0:e8:f9:4d:f1:05:d4:f4:7f:68: ef:ed:be:af:ba:68:7b:9f:6c:18:75:f2:66:4a:64:b2:d4:fb: c5:2d:23:08:a8:3b:b0:3c:81:e7:30:ea:12:ac:6d:64:d1:03: 0f:6e:82:c7:4a:2e:73:93:ff:0b:32:bb:2d:f6:05:0d:90:ab: 45:4e:49:71:05:f1:93:61:53:bb:24:38:c7:fd:51:04:31:46: f2:f7:e1:20:cf:fb:d7:da:2c:06:a8:1e:4c:d1:8f:8d:c1:05: 76:66:d7:3c:0a:ac:8a:fd:ce:f3:f2:22:d2:1e:b2:94:8e:ad: e5:fa:6e:14:d9:5d:08:52:6b:40:06:91:63:1c:64:b5:52:55: 2a:cd:ca:23:67:2c:8e:7a:56:3e:28:6e:3d:38:6d:fa:ae:08: 6b:e5:aa:37:e4:0b:f5:0d:b8:a1:93:a4:36:02:de:a3:0d:88: a7:0a:94:b9:d4:82:48:4b:4b:59:c9:26:bf:bc:ab:5a:7a:cf: 9f:b7:2f:c2:46:87:c5:6b:3e:bb:49:47:1d:b6:df:e1:d3:70: 04:c0:d4:e5 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUfMueBpLxC2/PD1kyr0YbLFaiOLcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTAxMTMyNDQ0WhcNMjYwODMxMTMyOTQ0 WjAzMTEwLwYDVQQDEygyOERDQjc0RDg4REJBRkUyNTQ4RkU5MjhDNDI0M0NDMEJE RjA3NkJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3ytO05aLgnK lZCsXyeyskYO3HksO7kt0bqRFmgekOKnkG44GkzUoEjFaAKzgCQvbJUCXsi+1R4Y 3Ea8RV9NFATAUIp4jdKhJrvxIuRDLJHDAhQMgqucekwU4uOrbpBT4M2c8pJmCJKh F5XY1hZn81hPEhFj9+BqNLG2SzrSKfMGCvC6L8ZITsboGQeHdDOVvaOBAEhsbR1p u42PeDBvbN5axgrkzdzVPgU+bUTU5XvYio5cP/FdN1EKawlBirk3uoMAgPzQFFy/ qglIKfJ42fsmwySuxBzMoBtJ2VS+GV0Ed6VUfbD+qFUV0tIkLUTY7tGpFtVO570V IqP9LfhQVwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCjct02I26/iVI/pKMQkPMC9 8Ha+MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzAyZDMyMzQy MDNkM2UyMDMxMzczMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATGJWAwDQYJKoZIhvcNAQELBQAD ggEBAGqAoxjLWPfNCnUCc0f6NElCguo2421cr/j0jpu9nq0hKqwB6WydKvgcW+Qc wOj5TfEF1PR/aO/tvq+6aHufbBh18mZKZLLU+8UtIwioO7A8gecw6hKsbWTRAw9u gsdKLnOT/wsyuy32BQ2Qq0VOSXEF8ZNhU7skOMf9UQQxRvL34SDP+9faLAaoHkzR j43BBXZm1zwKrIr9zvPyItIespSOreX6bhTZXQhSa0AGkWMcZLVSVSrNyiNnLI56 Vj4obj04bfquCGvlqjfkC/UNuKGTpDYC3qMNiKcKlLnUgkhLS1nJJr+8q1p6z5+3 L8JGh8VrPrtJRx223+HTcATA1OU= -----END CERTIFICATE-----Generated at Thu Sep 11 01:20:07 2025 by rpki-client