$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203231383430.roa File: 3230342e31342e37322e302f32342d3234203d3e203231383430.roa (raw, json) Hash identifier: P+qH+xYZpofR6LJur9s2TvU+3hU3XJNK6fsHz/vQBsw= Subject key identifier: 38:C3:BF:C0:20:14:F4:68:BD:85:A4:41:A9:96:FF:B4:20:8E:8C:C1 Certificate issuer: /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3 Certificate serial: 4D20EDB44A9A3DB9D53CD055EACD2E9DFE62F420 Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203231383430.roa Signing time: Fri 11 Apr 2025 10:21:10 +0000 ROA not before: Fri 11 Apr 2025 10:16:10 +0000 ROA not after: Fri 10 Apr 2026 10:21:10 +0000 asID: 21840 IP address blocks: 204.14.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:20:ed:b4:4a:9a:3d:b9:d5:3c:d0:55:ea:cd:2e:9d:fe:62:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3 Validity Not Before: Apr 11 10:16:10 2025 GMT Not After : Apr 10 10:21:10 2026 GMT Subject: CN=38C3BFC02014F468BD85A441A996FFB4208E8CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:36:f4:04:3c:03:a5:86:c9:97:fc:7f:e0:66: a6:52:1c:73:df:68:fe:1d:86:70:4d:87:6c:3b:1c: 4d:f6:99:66:99:8c:3b:43:7f:ea:6a:27:ab:2b:c4: bc:db:e3:77:b5:4b:4e:8f:e2:11:1a:13:73:13:64: 15:bb:51:f9:3e:1d:02:d9:ae:36:0e:9d:1a:c3:b6: 4e:df:68:d4:0e:f3:f9:77:a2:ac:22:0d:5e:f2:25: ee:e7:19:fa:a0:65:31:8e:82:bb:49:b2:34:4f:ed: 0c:56:f3:f5:da:7c:fd:72:a8:91:27:7c:73:d8:13: 84:5c:68:04:06:fb:39:14:b0:1f:bc:c6:b3:5c:0d: ca:8d:03:40:51:03:5f:43:1a:24:7b:da:aa:75:07: 89:6a:11:c8:08:ed:e3:12:d7:71:2a:bb:d4:e9:57: 9d:50:c8:41:bd:41:43:34:5d:1e:45:e5:a5:91:30: fd:79:c5:43:1f:07:ff:49:11:85:1d:17:8f:e0:09: 05:0c:19:77:5d:c3:fa:9d:03:b9:20:57:24:e7:65: b1:f2:74:a3:03:0a:d6:0e:ba:2b:bd:00:b2:0b:23: af:20:5f:82:a9:3e:9a:d7:f9:45:aa:45:66:37:e0: c6:82:d2:85:e4:2f:9e:3b:28:55:26:89:ad:90:42: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C3:BF:C0:20:14:F4:68:BD:85:A4:41:A9:96:FF:B4:20:8E:8C:C1 X509v3 Authority Key Identifier: keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203231383430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.14.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:55:d9:49:b2:b6:aa:80:be:9d:f7:c5:e2:91:89:39:30:44: 47:bd:ca:ea:45:82:51:68:f8:40:bc:aa:0b:8a:7f:1b:a2:37: 3f:e4:0a:aa:84:3b:0f:1e:14:fb:27:36:a4:d3:79:83:de:bb: ca:b8:e0:43:d8:4b:ba:3f:3d:a1:71:5f:32:34:49:90:89:50: a7:b2:2d:e2:5e:5f:ae:24:cb:fa:95:77:12:fb:46:3d:bd:d7: 8b:85:16:e9:5f:9d:b9:f2:6b:b8:52:4d:e4:f5:10:2c:a8:0f: 68:d8:b5:e3:02:81:3f:2a:2b:74:a4:91:75:7d:69:cb:40:a1: 25:f9:0b:48:a9:06:40:3f:20:25:26:f0:41:8a:87:40:89:e2: 7c:5a:5b:89:b4:69:f8:3a:02:4d:a7:97:f6:f4:84:28:90:59: cf:4f:39:28:7b:6e:cd:60:d2:fb:3a:b6:2d:30:f9:06:14:ac: 14:63:6e:1a:59:6b:9b:59:93:0e:da:e6:78:25:f9:97:3c:9b: 4e:b1:77:c4:9a:ae:9d:29:f8:46:2e:d8:20:c5:8d:dd:55:9f: f0:dc:66:8e:92:3c:66:b3:8a:cf:c5:0c:5e:4e:c9:f4:18:bb: 74:ee:f3:2e:be:4f:ca:93:32:a6:73:aa:4d:27:a7:82:9e:ec: fc:63:10:38 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUTSDttEqaPbnVPNBV6s0unf5i9CAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWM5NGExYzQxOTFkNmVlYWY3ZTc3MzM2YTVlZGJjMDVj Yjk5YWM2M2M3ODM1YThiYzMwHhcNMjUwNDExMTAxNjEwWhcNMjYwNDEwMTAyMTEw WjAzMTEwLwYDVQQDEygzOEMzQkZDMDIwMTRGNDY4QkQ4NUE0NDFBOTk2RkZCNDIw OEU4Q0MxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Tb0BDwDpYbJ l/x/4GamUhxz32j+HYZwTYdsOxxN9plmmYw7Q3/qaierK8S82+N3tUtOj+IRGhNz E2QVu1H5Ph0C2a42Dp0aw7ZO32jUDvP5d6KsIg1e8iXu5xn6oGUxjoK7SbI0T+0M VvP12nz9cqiRJ3xz2BOEXGgEBvs5FLAfvMazXA3KjQNAUQNfQxoke9qqdQeJahHI CO3jEtdxKrvU6VedUMhBvUFDNF0eReWlkTD9ecVDHwf/SRGFHReP4AkFDBl3XcP6 nQO5IFck52Wx8nSjAwrWDrorvQCyCyOvIF+CqT6a1/lFqkVmN+DGgtKF5C+eOyhV JomtkEI1uwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDjDv8AgFPRovYWkQamW/7Qg jozBMB8GA1UdIwQYMBaAFN9ORoOgyHb2inK936oFiDCTVsPWMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYjJkYWI3Y2MwYTkxLzAv REY0RTQ2ODNBMEM4NzZGNjhBNzJCRERGQUEwNTg4MzA5MzU2QzNENi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3LzA4MWJkNjZlLWIxZDEtNDA1YS04YTMyLWM4MzBlYzc5MGNlNS85Yzk0 YTFjNDE5MWQ2ZWVhZjdlNzczMzZhNWVkYmMwNWNiOTlhYzYzYzc4MzVhOGJjMy5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmIy ZGFiN2NjMGE5MS8wLzMyMzAzNDJlMzEzNDJlMzczMjJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMyMzEzODM0MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMDkgwDQYJKoZIhvcNAQELBQAD ggEBACpV2UmytqqAvp33xeKRiTkwREe9yupFglFo+EC8qguKfxuiNz/kCqqEOw8e FPsnNqTTeYPeu8q44EPYS7o/PaFxXzI0SZCJUKeyLeJeX64ky/qVdxL7Rj2914uF Fulfnbnya7hSTeT1ECyoD2jYteMCgT8qK3SkkXV9actAoSX5C0ipBkA/ICUm8EGK h0CJ4nxaW4m0afg6Ak2nl/b0hCiQWc9POSh7bs1g0vs6ti0w+QYUrBRjbhpZa5tZ kw7a5ngl+Zc8m06xd8Sarp0p+EYu2CDFjd1Vn/DcZo6SPGazis/FDF5OyfQYu3Tu 8y6+T8qTMqZzqk0np4Ke7PxjEDg= -----END CERTIFICATE-----Generated at Sun Apr 20 13:18:13 2025 by rpki-client