$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20323136303236.roa File: 3230392e38372e3137332e302f32342d3234203d3e20323136303236.roa (raw, json) Hash identifier: blGNbhUs7r/OTnqdnKZqzhSB9ILp0MFhRWPR0OQsK/A= Subject key identifier: 26:15:EF:13:4E:49:44:BE:66:F6:EE:F2:24:0E:64:CB:41:00:B7:47 Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Certificate serial: 113346570BAC338B6ED4B04BCA3922807143E242 Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20323136303236.roa Signing time: Tue 29 Jul 2025 10:49:24 +0000 ROA not before: Tue 29 Jul 2025 10:44:24 +0000 ROA not after: Tue 28 Jul 2026 10:49:24 +0000 asID: 216026 IP address blocks: 209.87.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 Aug 2025 10:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:33:46:57:0b:ac:33:8b:6e:d4:b0:4b:ca:39:22:80:71:43:e2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Validity Not Before: Jul 29 10:44:24 2025 GMT Not After : Jul 28 10:49:24 2026 GMT Subject: CN=2615EF134E4944BE66F6EEF2240E64CB4100B747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:51:b2:78:68:7e:c8:5a:4e:a5:b7:a4:48: 50:b0:4b:1e:3a:cd:20:a4:4d:c5:df:81:7b:87:93: 40:75:f8:d0:3d:3d:e1:9a:d5:44:63:fe:9d:99:9f: bc:d3:80:86:c1:56:87:48:74:e5:78:65:d3:7a:f6: 4e:75:01:b6:88:cb:69:c2:b3:75:56:d4:bf:34:43: 2e:7f:c1:52:6d:30:0a:01:2a:0b:46:10:9e:db:9d: d2:e7:cd:80:38:c2:4e:d0:85:86:7d:c2:cb:bc:00: cf:37:2d:6a:59:06:d0:00:21:15:d8:bc:08:26:5d: 1d:fb:60:e6:cc:8e:7e:2f:87:e6:8e:b1:96:79:66: c0:5c:c4:d4:4e:1f:06:55:be:9d:81:d0:3b:20:26: 57:01:2d:5f:c9:dd:b7:a5:4f:40:05:a4:75:00:c7: d1:df:a5:bd:3c:3a:e2:84:59:e3:33:56:f5:de:de: fe:34:ed:9a:dd:0c:8f:f2:d7:da:0e:25:53:e5:31: b5:a3:cc:7a:43:48:37:53:bb:b2:6f:91:75:e2:fd: d2:f7:b5:dd:9f:a0:cb:da:02:bf:db:57:21:a1:64: a3:7b:d8:d5:6f:df:6f:84:a9:e0:d4:5e:54:49:6f: 3d:19:4c:c8:7f:57:d4:30:9c:eb:cd:17:69:2e:f6: 9a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:15:EF:13:4E:49:44:BE:66:F6:EE:F2:24:0E:64:CB:41:00:B7:47 X509v3 Authority Key Identifier: keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20323136303236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.87.173.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:1b:0e:cf:7d:18:7d:8f:7c:2e:3d:c9:a3:13:1c:16:55:3b: 24:00:64:f7:ff:d4:b7:1a:65:d2:70:26:e5:38:ad:23:14:93: aa:10:e5:51:63:ea:fe:25:9e:e2:40:40:49:4a:4f:e0:54:0a: 4d:31:da:3e:37:b1:1a:44:18:13:dc:ce:25:b0:d9:0a:45:04: 74:3d:98:7b:9d:40:c9:9a:f1:1a:f5:02:a8:f7:4b:a3:17:13: fc:7f:bc:2b:b0:a8:e7:c6:18:bf:7f:24:f1:f0:1a:4a:0a:73: d6:36:ec:ac:f6:a4:98:08:27:86:f2:b2:4f:88:7f:a1:28:68: a6:bf:6b:e6:7b:c3:53:ae:c2:c0:ee:56:3d:82:29:85:8f:d5: aa:ce:f0:6e:fc:e3:68:1c:30:c7:00:17:dd:e6:d7:cb:19:d7: f6:8c:9a:23:96:d2:43:dd:dc:9e:f7:0d:fb:f5:80:0f:c9:ef: b5:c2:ca:ad:f9:f0:56:26:e4:e8:3d:6c:05:f2:70:d7:c5:46: e0:1a:f6:05:15:9a:2c:27:dd:59:e4:40:41:10:2e:26:17:e9: cf:dc:c5:ea:09:8d:a4:03:09:24:2d:da:89:40:67:90:03:28: 13:ea:fa:23:aa:ae:0e:5e:4e:46:1c:39:f6:5d:59:e6:05:57: 1d:d3:c7:72 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUETNGVwusM4tu1LBLyjkigHFD4kIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNzI5MTA0NDI0WhcNMjYwNzI4MTA0OTI0 WjAzMTEwLwYDVQQDEygyNjE1RUYxMzRFNDk0NEJFNjZGNkVFRjIyNDBFNjRDQjQx MDBCNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNBRsnhofsha TqW3pEhQsEseOs0gpE3F34F7h5NAdfjQPT3hmtVEY/6dmZ+804CGwVaHSHTleGXT evZOdQG2iMtpwrN1VtS/NEMuf8FSbTAKASoLRhCe253S582AOMJO0IWGfcLLvADP Ny1qWQbQACEV2LwIJl0d+2DmzI5+L4fmjrGWeWbAXMTUTh8GVb6dgdA7ICZXAS1f yd23pU9ABaR1AMfR36W9PDrihFnjM1b13t7+NO2a3QyP8tfaDiVT5TG1o8x6Q0g3 U7uyb5F14v3S97Xdn6DL2gK/21choWSje9jVb99vhKng1F5USW89GUzIf1fUMJzr zRdpLvaa0QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCYV7xNOSUS+Zvbu8iQOZMtB ALdHMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1 OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNzMzMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMTM2MzAzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VetMA0GCSqGSIb3DQEB CwUAA4IBAQBeGw7PfRh9j3wuPcmjExwWVTskAGT3/9S3GmXScCblOK0jFJOqEOVR Y+r+JZ7iQEBJSk/gVApNMdo+N7EaRBgT3M4lsNkKRQR0PZh7nUDJmvEa9QKo90uj FxP8f7wrsKjnxhi/fyTx8BpKCnPWNuys9qSYCCeG8rJPiH+hKGimv2vme8NTrsLA 7lY9gimFj9WqzvBu/ONoHDDHABfd5tfLGdf2jJojltJD3dye9w379YAPye+1wsqt +fBWJuToPWwF8nDXxUbgGvYFFZosJ91Z5EBBEC4mF+nP3MXqCY2kAwkkLdqJQGeQ AygT6vojqq4OXk5GHDn2XVnmBVcd08dy -----END CERTIFICATE-----Generated at Fri Aug 1 18:11:29 2025 by rpki-client