$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa File: 38392e3230372e3137362e302f32322d3234203d3e203631333137.roa (raw, json) Hash identifier: 5MMEKMXX/5Eb9z2NUCBxhioQDeT7t5uwRF6B7476YB4= Subject key identifier: 0F:57:D5:EF:39:27:A1:DB:E8:7D:CE:CD:51:88:EA:3A:21:08:63:32 Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 7E661EA532402423EAA667A38D4FFA1CC1BE5280 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa Signing time: Mon 22 Sep 2025 16:29:45 +0000 ROA not before: Mon 22 Sep 2025 16:24:45 +0000 ROA not after: Mon 21 Sep 2026 16:29:45 +0000 asID: 61317 IP address blocks: 89.207.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 16:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:66:1e:a5:32:40:24:23:ea:a6:67:a3:8d:4f:fa:1c:c1:be:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 22 16:24:45 2025 GMT Not After : Sep 21 16:29:45 2026 GMT Subject: CN=0F57D5EF3927A1DBE87DCECD5188EA3A21086332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:54:53:f7:82:9d:2e:7d:ff:c3:14:52:b3:94: de:0a:bc:ef:31:b9:77:f4:95:36:c8:a6:7b:b6:dd: 7e:74:2d:15:99:e5:80:14:05:20:41:8d:3a:a6:45: 29:ef:8b:76:51:ef:49:c8:10:6a:40:f9:b5:4e:65: cc:1e:0b:67:4f:8c:61:f4:45:82:9d:ba:1d:2d:f5: 29:4f:8a:d8:fb:24:6c:52:e6:02:fa:63:70:40:0d: b6:7e:c6:4f:33:e3:6a:3f:90:fc:98:72:51:fb:5e: 34:df:a5:6c:69:01:65:8c:31:f5:c4:5c:f3:da:dd: 28:5a:61:fc:74:f7:32:1d:c7:91:70:14:5d:ed:d9: 01:89:b0:38:39:d9:b4:10:56:c0:e1:4a:6c:da:b7: 9e:3d:99:f9:6a:0e:95:80:cd:9c:d6:76:70:17:13: e6:43:84:c5:73:65:e5:42:2f:68:a2:5b:79:64:0c: 97:0b:88:f2:79:7f:cb:ee:be:fa:d5:4d:8c:8c:74: 6f:04:94:5a:03:43:63:8b:64:3d:86:99:84:30:8c: d0:15:39:b9:b7:67:64:6c:8b:9e:76:89:5a:72:ba: 50:4c:94:ea:c5:c5:a9:d2:22:65:43:1a:d7:7f:6c: 32:71:6c:03:f9:9d:e9:f1:6b:1f:50:8e:80:78:e5: f0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:57:D5:EF:39:27:A1:DB:E8:7D:CE:CD:51:88:EA:3A:21:08:63:32 X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32322d3234203d3e203631333137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.207.176.0/22 Signature Algorithm: sha256WithRSAEncryption 74:43:20:fc:98:ef:eb:f5:ca:57:db:76:73:e2:75:b6:e9:40: 2a:c1:d6:55:1c:c9:ce:26:87:7a:08:22:87:17:fa:34:04:8c: e2:8f:fd:68:42:a7:d3:73:28:e9:aa:dd:33:03:ed:63:24:4c: b4:69:8e:66:9a:d7:a9:16:c2:bb:ae:89:d0:3b:4d:b2:bc:ce: 34:aa:f9:69:60:fb:31:96:54:96:d7:8c:93:f4:ac:1b:84:29: b4:61:26:9a:d3:84:7e:59:6a:6b:d6:0c:0e:0a:b0:37:17:38: b6:bc:91:1c:ce:6f:c9:3f:81:b6:86:9a:ae:6c:ae:37:3e:e0: 6e:29:08:10:d7:14:05:74:da:cc:72:b2:41:64:cb:83:d7:9c: 3e:99:5c:ae:6f:3f:ef:13:24:b4:4c:eb:d2:4b:a8:ef:fe:aa: 86:b9:33:a1:44:c2:5d:81:54:b5:b2:1e:b6:20:fa:10:47:bb: e8:f9:34:57:4b:5a:30:a3:37:1e:3d:1d:e5:6a:fc:08:e3:f2: 58:8b:0c:a1:6c:04:ec:8c:6e:79:cb:23:a2:b6:45:ab:98:0f: 4e:7d:aa:af:d4:35:ea:a5:7f:51:8e:ee:de:9f:ac:e3:72:9f: 08:5b:a2:da:e3:08:e4:63:8c:cc:55:06:dc:14:33:b7:fd:6e: 0f:80:30:46 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUfmYepTJAJCPqpmejjU/6HMG+UoAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTIyMTYyNDQ1WhcNMjYwOTIxMTYyOTQ1 WjAzMTEwLwYDVQQDEygwRjU3RDVFRjM5MjdBMURCRTg3RENFQ0Q1MTg4RUEzQTIx MDg2MzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlRT94KdLn3/ wxRSs5TeCrzvMbl39JU2yKZ7tt1+dC0VmeWAFAUgQY06pkUp74t2Ue9JyBBqQPm1 TmXMHgtnT4xh9EWCnbodLfUpT4rY+yRsUuYC+mNwQA22fsZPM+NqP5D8mHJR+140 36VsaQFljDH1xFzz2t0oWmH8dPcyHceRcBRd7dkBibA4Odm0EFbA4Ups2reePZn5 ag6VgM2c1nZwFxPmQ4TFc2XlQi9oolt5ZAyXC4jyeX/L7r761U2MjHRvBJRaA0Nj i2Q9hpmEMIzQFTm5t2dkbIuedolacrpQTJTqxcWp0iJlQxrXf2wycWwD+Z3p8Wsf UI6AeOXwJQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFA9X1e85J6Hb6H3OzVGI6joh CGMyMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzM4MzkyZTMyMzAzNzJlMzEzNzM2MmUzMDJmMzIzMjJkMzIz NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlnPsDANBgkqhkiG9w0BAQsF AAOCAQEAdEMg/Jjv6/XKV9t2c+J1tulAKsHWVRzJziaHeggihxf6NASM4o/9aEKn 03Mo6ardMwPtYyRMtGmOZprXqRbCu66J0DtNsrzONKr5aWD7MZZUlteMk/SsG4Qp tGEmmtOEfllqa9YMDgqwNxc4tryRHM5vyT+BtoaarmyuNz7gbikIENcUBXTazHKy QWTLg9ecPplcrm8/7xMktEzr0kuo7/6qhrkzoUTCXYFUtbIetiD6EEe76Pk0V0ta MKM3Hj0d5Wr8COPyWIsMoWwE7IxuecsjorZFq5gPTn2qr9Q16qV/UY7u3p+s43Kf CFui2uMI5GOMzFUG3BQzt/1uD4AwRg== -----END CERTIFICATE-----Generated at Thu Oct 9 03:52:47 2025 by rpki-client