$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa File: 3139382e33372e39362e302f32312d3234203d3e203137323136.roa (raw, json) Hash identifier: DgYb3+w2lGqVvpjeUWlA0GhePqOvilO8iKamgbaavVQ= Subject key identifier: 96:A0:DB:B9:A8:18:9B:49:B6:15:B1:70:15:40:D6:D5:80:35:83:DF Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 4E68A8EBF751E9C9A52203F53A895C3DC92117A1 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa Signing time: Mon 01 Sep 2025 13:29:45 +0000 ROA not before: Mon 01 Sep 2025 13:24:45 +0000 ROA not after: Mon 31 Aug 2026 13:29:45 +0000 asID: 17216 IP address blocks: 198.37.96.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 15:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:68:a8:eb:f7:51:e9:c9:a5:22:03:f5:3a:89:5c:3d:c9:21:17:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 1 13:24:45 2025 GMT Not After : Aug 31 13:29:45 2026 GMT Subject: CN=96A0DBB9A8189B49B615B1701540D6D5803583DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:fe:81:2f:9b:a4:66:a5:47:a1:ec:f7:12: ed:4b:b5:81:5b:04:65:6b:d8:d8:31:18:2f:66:ce: a7:a9:94:02:23:bf:3d:9c:dd:97:9a:30:58:39:f2: 13:b5:c7:33:e8:30:c5:1f:c5:98:c8:14:07:d9:20: eb:99:ed:82:5e:d2:35:1c:1d:3b:c2:db:56:ac:72: fd:9e:9c:88:19:21:0f:06:11:ab:d6:f9:b5:2f:bb: 79:c6:f9:d6:0d:99:d2:06:26:5d:9a:c0:6e:40:79: db:77:92:ec:38:9a:9c:e8:ad:e6:ac:ef:75:80:09: 76:a5:dd:b2:5d:eb:c5:75:cf:5f:58:15:eb:c0:68: 8e:03:8f:c5:43:b9:7a:af:e3:6a:b6:73:0b:0b:f1: ac:0f:70:4a:38:2f:b8:4e:a1:bd:7e:e8:d5:e9:33: d3:13:0e:fb:a1:ae:af:42:91:65:66:60:ba:21:f8: fd:9a:3a:5b:53:1b:76:c8:de:75:75:4e:e0:43:43: b8:90:9f:4f:81:71:96:71:05:10:e7:92:ba:74:64: 64:50:81:9b:c5:9e:78:ac:43:11:c8:7b:6c:ca:d0: c2:63:af:f1:d1:f3:ac:dc:dd:05:ba:d0:e2:cc:02: 93:ad:7a:a0:e9:8f:c6:bb:12:74:25:e6:9c:e5:99: 51:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A0:DB:B9:A8:18:9B:49:B6:15:B1:70:15:40:D6:D5:80:35:83:DF X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32312d3234203d3e203137323136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.37.96.0/21 Signature Algorithm: sha256WithRSAEncryption 83:8a:4f:ef:1f:bb:80:74:70:dc:79:3e:8e:f0:e6:00:bc:95: 93:22:de:c6:7f:eb:63:5b:53:aa:d7:bc:e9:1e:1a:c5:06:e3: 97:1b:cd:0d:2c:ce:99:07:d0:b3:c3:cb:82:c2:e8:81:20:8e: 86:08:57:3a:12:88:a6:c6:27:38:0b:2d:cd:5c:02:ed:fc:a5: 3e:c8:e6:9c:56:a0:20:89:07:bd:1a:7e:73:0f:20:e0:56:06: bf:0c:e8:7f:80:21:40:76:12:0c:2b:ad:93:6b:af:fe:64:b5: 90:3d:55:cf:f6:88:0a:a0:e1:29:42:c9:53:ae:72:d8:40:17: 22:2a:1e:bb:f7:5b:6d:d1:71:65:6e:77:34:a3:a9:63:bd:8a: cf:b4:2f:f9:ac:8e:5a:44:c5:1a:0f:c7:9f:e5:25:34:d5:14: 97:5d:bd:8a:02:94:ef:3b:59:75:06:4c:4d:37:83:a9:e7:3a: 33:03:d5:a0:a9:52:4a:ca:83:d0:00:69:6c:bc:18:b2:79:20: 74:4f:25:44:ee:02:d3:0a:7b:ed:51:c2:7f:1f:16:28:c7:5f: 58:53:f0:da:ae:2a:51:8e:c4:69:7e:ae:8a:fd:48:ca:8e:7c: 35:b9:21:94:33:c0:27:83:7b:0c:36:85:92:a3:36:24:9a:c5: 8b:84:03:94 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUTmio6/dR6cmlIgP1OolcPckhF6EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTAxMTMyNDQ1WhcNMjYwODMxMTMyOTQ1 WjAzMTEwLwYDVQQDEyg5NkEwREJCOUE4MTg5QjQ5QjYxNUIxNzAxNTQwRDZENTgw MzU4M0RGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUL+gS+bpGal R6Hs9xLtS7WBWwRla9jYMRgvZs6nqZQCI789nN2XmjBYOfITtccz6DDFH8WYyBQH 2SDrme2CXtI1HB07wttWrHL9npyIGSEPBhGr1vm1L7t5xvnWDZnSBiZdmsBuQHnb d5LsOJqc6K3mrO91gAl2pd2yXevFdc9fWBXrwGiOA4/FQ7l6r+NqtnMLC/GsD3BK OC+4TqG9fujV6TPTEw77oa6vQpFlZmC6Ifj9mjpbUxt2yN51dU7gQ0O4kJ9PgXGW cQUQ55K6dGRkUIGbxZ54rEMRyHtsytDCY6/x0fOs3N0FutDizAKTrXqg6Y/GuxJ0 Jeac5ZlRZwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJag27moGJtJthWxcBVA1tWA NYPfMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzEyZDMyMzQy MDNkM2UyMDMxMzczMjMxMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPGJWAwDQYJKoZIhvcNAQELBQAD ggEBAIOKT+8fu4B0cNx5Po7w5gC8lZMi3sZ/62NbU6rXvOkeGsUG45cbzQ0szpkH 0LPDy4LC6IEgjoYIVzoSiKbGJzgLLc1cAu38pT7I5pxWoCCJB70afnMPIOBWBr8M 6H+AIUB2EgwrrZNrr/5ktZA9Vc/2iAqg4SlCyVOucthAFyIqHrv3W23RcWVudzSj qWO9is+0L/msjlpExRoPx5/lJTTVFJddvYoClO87WXUGTE03g6nnOjMD1aCpUkrK g9AAaWy8GLJ5IHRPJUTuAtMKe+1Rwn8fFijHX1hT8NquKlGOxGl+ror9SMqOfDW5 IZQzwCeDeww2hZKjNiSaxYuEA5Q= -----END CERTIFICATE-----Generated at Thu Sep 11 01:20:07 2025 by rpki-client