$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3139382e31372e3137312e302f32342d3234203d3e203131333538.roa File: 3139382e31372e3137312e302f32342d3234203d3e203131333538.roa (raw, json) Hash identifier: lImyiCvyyFcXXyPa3oShrGWPgqyfQJ+/ULubs30SIXM= Subject key identifier: 42:8E:5F:78:B5:42:A9:92:22:D8:C8:19:82:0E:A0:9E:A4:F0:CE:7D Certificate issuer: /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0 Certificate serial: 267BA5995EE0AC68D0C91F1577F0301395F37266 Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3139382e31372e3137312e302f32342d3234203d3e203131333538.roa Signing time: Sat 03 Oct 2026 20:23:50 +0000 ROA not before: Sat 03 Oct 2026 20:18:50 +0000 ROA not after: Sat 02 Oct 2027 20:23:50 +0000 asID: 11358 IP address blocks: 198.17.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:7b:a5:99:5e:e0:ac:68:d0:c9:1f:15:77:f0:30:13:95:f3:72:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0 Validity Not Before: Oct 3 20:18:50 2026 GMT Not After : Oct 2 20:23:50 2027 GMT Subject: CN=428E5F78B542A99222D8C819820EA09EA4F0CE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:32:40:b6:9a:c4:bc:2f:ad:f0:82:33:03:56: 1f:71:fa:b9:4c:f3:c8:51:90:46:f4:54:f1:d3:84: bc:20:5a:b3:a4:04:14:e1:15:ba:75:ed:bc:be:ff: 2a:18:5e:21:af:10:c7:0d:29:a2:9b:e0:6f:48:5d: 61:c3:de:50:91:26:0b:2a:5d:56:3c:91:1a:8d:59: a1:c1:70:4c:ac:52:5d:5f:44:ea:88:44:b0:af:9d: 8c:13:7b:55:3e:cf:55:c8:e7:5a:12:ec:4f:70:49: 11:b4:b1:0c:e2:b9:c1:86:68:f3:c6:4a:b5:0c:34: ff:91:1f:40:73:44:01:a0:5e:8c:5e:78:39:4e:d5: 13:15:2c:5f:f6:86:58:13:67:46:da:44:15:db:a8: e4:7b:8a:1d:74:4f:d3:09:38:1f:f4:63:a7:f2:24: a5:79:23:f6:5c:f4:e0:d5:0f:e8:cc:c7:0a:5b:5c: 16:93:37:37:15:e4:59:77:26:07:27:13:8f:29:7f: fd:d2:e3:e0:26:48:31:a4:45:8f:82:e9:ef:d7:fd: 90:89:f1:76:09:8e:c2:f3:65:cb:23:41:dc:70:51: 9a:3b:cc:16:72:27:b8:d5:d1:a5:39:70:e2:8e:5e: 26:a7:d3:38:bb:1a:59:d3:74:8d:a6:43:3c:da:f2: 3e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8E:5F:78:B5:42:A9:92:22:D8:C8:19:82:0E:A0:9E:A4:F0:CE:7D X509v3 Authority Key Identifier: keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3139382e31372e3137312e302f32342d3234203d3e203131333538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.17.171.0/24 Signature Algorithm: sha256WithRSAEncryption b8:09:fe:fd:6e:9e:79:be:ca:c8:46:7b:c7:a8:b3:da:76:c4: 24:82:b5:92:f5:ba:41:d8:cb:f0:22:51:e7:9e:39:1c:25:b8: b8:f1:1d:64:23:0d:fd:25:4c:a3:19:97:eb:92:28:96:a6:18: 78:e9:e1:af:4b:1e:84:4d:ea:82:fd:cf:7c:24:31:52:55:6b: 8a:6a:0d:8e:c0:ca:06:98:f7:e5:fb:91:77:d2:e8:1e:ce:e7: 0a:a4:55:02:45:1e:ba:e0:fd:cd:78:d6:ea:c1:e8:cf:bb:ac: 68:1c:18:92:8b:0d:d7:8c:bc:a6:55:62:df:4f:d5:04:8d:36: a7:da:b8:34:9e:de:f0:ee:8c:3d:f9:4b:68:ad:90:dd:be:43: 89:2e:09:91:ee:a3:2d:a4:2a:03:be:54:24:08:f1:6a:9b:7f: 4d:e6:e1:85:b5:e4:a6:16:04:9b:0e:63:f7:e4:02:be:77:e4: 39:32:4a:ea:3f:88:d9:a2:65:10:19:b1:c0:81:59:4a:fe:53: 7e:39:2d:61:b0:1c:bf:4a:e8:b0:97:55:05:0d:fa:94:ae:e7: fe:01:9b:bd:a8:cb:f2:6e:9f:64:05:7f:25:ad:1b:2e:13:a6: 86:8f:51:be:88:b5:23:0b:0b:9a:d1:bf:86:95:6a:c9:c2:2c: e9:3f:c7:2c -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUJnulmV7grGjQyR8Vd/AwE5XzcmYwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmEyMTY0N2FhYzNkYzIxMzNiZDM2MThhNDE3ZjVhNDc5 YTU3MjBmYzM0MGY4ZTljYzAwHhcNMjYxMDAzMjAxODUwWhcNMjcxMDAyMjAyMzUw WjAzMTEwLwYDVQQDEyg0MjhFNUY3OEI1NDJBOTkyMjJEOEM4MTk4MjBFQTA5RUE0 RjBDRTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojJAtprEvC+t 8IIzA1Yfcfq5TPPIUZBG9FTx04S8IFqzpAQU4RW6de28vv8qGF4hrxDHDSmim+Bv SF1hw95QkSYLKl1WPJEajVmhwXBMrFJdX0TqiESwr52ME3tVPs9VyOdaEuxPcEkR tLEM4rnBhmjzxkq1DDT/kR9Ac0QBoF6MXng5TtUTFSxf9oZYE2dG2kQV26jke4od dE/TCTgf9GOn8iSleSP2XPTg1Q/ozMcKW1wWkzc3FeRZdyYHJxOPKX/90uPgJkgx pEWPgunv1/2QifF2CY7C82XLI0HccFGaO8wWcie41dGlOXDijl4mp9M4uxpZ03SN pkM82vI+XwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEKOX3i1QqmSItjIGYIOoJ6k 8M59MB8GA1UdIwQYMBaAFNMnxgjB6Fb2wHiXblBVWZRaI9rYMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGVhOThiYWUwMThlYzE4MGFjYzExMWEyLzAv RDMyN0M2MDhDMUU4NTZGNkMwNzg5NzZFNTA1NTU5OTQ1QTIzREFEOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzJjZDg1ODk2LWJlY2EtNGNjOS04ZTA5LTkzNjdiMGVhOWVhNC9iYTIx NjQ3YWFjM2RjMjEzM2JkMzYxOGE0MTdmNWE0NzlhNTcyMGZjMzQwZjhlOWNjMC5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlYTk4YmFlMDE4ZWMx ODBhY2MxMTFhMi8wLzMxMzkzODJlMzEzNzJlMzEzNzMxMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzMTMzMzUzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMYRqzANBgkqhkiG9w0BAQsF AAOCAQEAuAn+/W6eeb7KyEZ7x6iz2nbEJIK1kvW6QdjL8CJR5545HCW4uPEdZCMN /SVMoxmX65IolqYYeOnhr0sehE3qgv3PfCQxUlVrimoNjsDKBpj35fuRd9LoHs7n CqRVAkUeuuD9zXjW6sHoz7usaBwYkosN14y8plVi30/VBI02p9q4NJ7e8O6MPflL aK2Q3b5DiS4Jke6jLaQqA75UJAjxapt/TebhhbXkphYEmw5j9+QCvnfkOTJK6j+I 2aJlEBmxwIFZSv5TfjktYbAcv0rosJdVBQ36lK7n/gGbvajL8m6fZAV/Ja0bLhOm ho9Rvoi1IwsLmtG/hpVqycIs6T/HLA== -----END CERTIFICATE-----Generated at Sun Oct 25 07:59:44 2026 by rpki-client