$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa File: 3230392e38372e3137322e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: Gpas+LaOGwbB6TGBrwEJbtyedES7OQXrgE7fGTUDUEA= Subject key identifier: 39:C3:FF:61:4D:F3:79:02:C1:2F:78:3F:C0:74:E5:E9:A7:74:20:30 Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Certificate serial: 6A95A6D4AC42B1A52DA78726AA3842FBDCE6301B Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa Signing time: Tue 29 Jul 2025 10:52:27 +0000 ROA not before: Tue 29 Jul 2025 10:47:27 +0000 ROA not after: Tue 28 Jul 2026 10:52:27 +0000 asID: 834 IP address blocks: 209.87.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 10:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:95:a6:d4:ac:42:b1:a5:2d:a7:87:26:aa:38:42:fb:dc:e6:30:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Validity Not Before: Jul 29 10:47:27 2025 GMT Not After : Jul 28 10:52:27 2026 GMT Subject: CN=39C3FF614DF37902C12F783FC074E5E9A7742030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:5a:cd:18:d0:20:7e:fc:ce:47:f3:1a:b2: 7b:f7:84:30:cf:0e:19:2e:f4:a8:41:41:4e:fc:bb: 90:2f:17:3b:6e:5a:36:9d:2f:1c:85:2e:db:ce:32: 8a:dd:93:1e:e3:0d:b9:b4:7a:8a:c4:13:05:e7:73: f2:c8:b0:4e:cf:d4:0d:1b:43:0f:27:66:78:81:59: 00:60:ac:8b:8d:7b:62:02:a5:eb:a9:6f:08:cd:36: ba:a2:e9:fd:be:67:2c:45:07:8d:7f:3d:67:c5:a1: 0e:b0:2c:5c:dd:a0:eb:06:36:43:ca:8b:a3:8d:21: 90:db:0e:35:55:d7:91:69:2b:8e:a4:4c:f2:48:5b: 23:e1:e2:f3:34:25:eb:fe:d7:64:24:ef:50:a7:36: d5:df:94:99:8b:83:d7:48:29:85:3d:bb:ae:a6:bd: 88:b6:42:1b:b6:71:7c:27:94:ff:ad:dc:91:9f:b5: 87:6f:b0:b8:bb:71:93:c9:2e:a7:e1:25:7e:46:7b: ae:f8:a4:7c:14:6e:3b:21:28:f7:17:e9:ff:3b:d0: 74:a4:4e:94:05:e1:7c:08:e7:a6:78:36:46:25:50: fc:5d:30:26:46:5d:83:b5:8e:cb:a2:f5:b9:1b:1a: f1:72:1d:4a:0a:2a:f6:e2:c4:e9:b7:73:ec:e4:50: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C3:FF:61:4D:F3:79:02:C1:2F:78:3F:C0:74:E5:E9:A7:74:20:30 X509v3 Authority Key Identifier: keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.87.172.0/24 Signature Algorithm: sha256WithRSAEncryption 07:8d:eb:ec:f5:67:f0:8c:26:11:48:d1:86:6e:d6:ae:de:99: dd:06:c5:90:b6:ec:4a:84:33:75:64:bd:dd:75:c0:7d:5d:6c: 29:33:3a:21:03:17:f9:c4:b1:ec:e1:e6:e6:65:55:5c:8f:03: 8f:d8:09:93:11:58:34:82:be:a3:10:1f:66:e7:6a:e5:45:45: e2:a1:b2:d9:cf:95:c7:57:4a:be:0a:fa:58:f0:69:e7:e8:39: c2:e4:0b:15:b6:a1:0a:83:ad:ad:1f:68:49:f3:6f:8b:e0:f7: 6b:c5:83:4c:2d:9c:25:da:b8:73:37:03:a8:8a:ef:50:7a:3c: 70:03:d2:cc:41:3d:2a:ba:e5:1c:41:70:53:9c:a9:73:fb:c8: b9:f2:7e:a1:2e:d6:b7:7f:b0:55:10:26:d7:13:dd:fd:25:2e: 33:c7:52:7e:25:e0:3b:e0:69:90:b4:61:2e:2e:04:e3:17:c3: 02:24:65:c1:87:25:ee:94:59:44:af:1c:aa:61:a9:88:00:56: 5e:b6:8f:da:b0:e0:49:dd:b0:02:67:57:21:dd:d1:77:b6:01: 21:85:b5:1a:66:af:4c:b3:9f:a7:17:c9:0a:60:7c:97:eb:f1: 67:b0:62:c9:22:c9:9d:b3:e2:00:bf:9c:8c:d8:ea:9f:8e:20: 5c:5e:31:c9 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUapWm1KxCsaUtp4cmqjhC+9zmMBswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNzI5MTA0NzI3WhcNMjYwNzI4MTA1MjI3 WjAzMTEwLwYDVQQDEygzOUMzRkY2MTRERjM3OTAyQzEyRjc4M0ZDMDc0RTVFOUE3 NzQyMDMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaZazRjQIH78 zkfzGrJ794Qwzw4ZLvSoQUFO/LuQLxc7blo2nS8chS7bzjKK3ZMe4w25tHqKxBMF 53PyyLBOz9QNG0MPJ2Z4gVkAYKyLjXtiAqXrqW8IzTa6oun9vmcsRQeNfz1nxaEO sCxc3aDrBjZDyoujjSGQ2w41VdeRaSuOpEzySFsj4eLzNCXr/tdkJO9QpzbV35SZ i4PXSCmFPbuupr2ItkIbtnF8J5T/rdyRn7WHb7C4u3GTyS6n4SV+Rnuu+KR8FG47 ISj3F+n/O9B0pE6UBeF8COemeDZGJVD8XTAmRl2DtY7LovW5Gxrxch1KCir24sTp t3Ps5FBJjwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDnD/2FN83kCwS94P8B05emn dCAwMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5 Mzg4NGQyYTMwLzAvMzIzMDM5MmUzODM3MmUzMTM3MzIyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRV6wwDQYJKoZIhvcNAQELBQADggEB AAeN6+z1Z/CMJhFI0YZu1q7emd0GxZC27EqEM3Vkvd11wH1dbCkzOiEDF/nEsezh 5uZlVVyPA4/YCZMRWDSCvqMQH2bnauVFReKhstnPlcdXSr4K+ljwaefoOcLkCxW2 oQqDra0faEnzb4vg92vFg0wtnCXauHM3A6iK71B6PHAD0sxBPSq65RxBcFOcqXP7 yLnyfqEu1rd/sFUQJtcT3f0lLjPHUn4l4DvgaZC0YS4uBOMXwwIkZcGHJe6UWUSv HKphqYgAVl62j9qw4EndsAJnVyHd0Xe2ASGFtRpmr0yzn6cXyQpgfJfr8WewYski yZ2z4gC/nIzY6p+OIFxeMck= -----END CERTIFICATE-----Generated at Fri Aug 1 18:09:32 2025 by rpki-client