$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20313335343032.roa File: 3137332e3234372e3233302e302f32342d3234203d3e20313335343032.roa (raw, json) Hash identifier: cExWgm+iuxKFPNPkFYa5d+DSi02Z46Aym7FFtB3KR4A= Subject key identifier: 91:A2:72:B8:C7:0C:F2:B3:7A:51:CE:38:BF:BF:D0:E5:8B:AF:82:01 Certificate issuer: /CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e Certificate serial: 4D9B50760AAE998E82975F48940FA31F01F09D3E Authority key identifier: 0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20313335343032.roa Signing time: Tue 15 Apr 2025 14:07:25 +0000 ROA not before: Tue 15 Apr 2025 14:02:25 +0000 ROA not after: Tue 14 Apr 2026 14:07:25 +0000 asID: 135402 IP address blocks: 173.247.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 04:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9b:50:76:0a:ae:99:8e:82:97:5f:48:94:0f:a3:1f:01:f0:9d:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e Validity Not Before: Apr 15 14:02:25 2025 GMT Not After : Apr 14 14:07:25 2026 GMT Subject: CN=91A272B8C70CF2B37A51CE38BFBFD0E58BAF8201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b1:35:0a:ef:2f:9d:5b:0d:3d:68:14:6c:23: 96:de:0c:54:55:65:69:f7:30:ba:1d:6a:a4:26:50: cf:b6:a8:0c:f5:49:97:6f:32:ec:43:7e:7c:64:8d: e7:d5:da:85:15:89:77:46:30:3e:32:95:6b:dd:d5: e5:4a:35:2b:77:0e:3c:d4:07:1b:b4:cc:ac:a5:63: 6e:0a:ce:46:a9:34:58:53:47:65:26:fd:cd:8b:a2: 08:18:ec:cc:0c:8e:25:2d:fa:8e:d1:d2:54:ce:05: 37:f0:ba:63:67:f6:15:d8:c7:71:2b:4e:20:bc:48: 75:0b:b4:3b:3e:d9:37:0f:2f:93:de:ec:ff:2d:df: f2:50:60:7c:29:71:41:06:b7:05:92:a7:e1:ec:f9: 8c:5a:1c:fd:73:32:15:90:41:1e:b8:63:f7:5f:16: 9c:f1:52:b1:f9:43:53:7a:9f:f8:89:66:38:3e:44: 67:ba:a9:2d:5c:c1:68:a4:53:d5:35:08:97:12:59: 11:27:51:e0:fe:8c:27:a8:56:04:7a:24:8b:94:0e: 58:e9:05:e5:2e:d0:62:c0:a7:e3:b9:c9:d0:47:d4: 1f:1d:83:0a:f4:1a:3a:9a:9d:4c:24:7f:65:e3:8b: 6e:69:00:b9:9a:81:4c:fe:00:86:25:2f:ee:c1:e7: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A2:72:B8:C7:0C:F2:B3:7A:51:CE:38:BF:BF:D0:E5:8B:AF:82:01 X509v3 Authority Key Identifier: keyid:0A:17:B4:0A:79:DF:FF:44:FA:FA:3D:40:F6:E4:D0:0D:83:51:4B:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/0A17B40A79DFFF44FAFA3D40F6E4D00D83514BB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ff430e23ac6e14a09173d9b9b4b3e328a76b388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233302e302f32342d3234203d3e20313335343032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.247.230.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a6:00:ff:57:97:49:ed:99:19:df:bf:3d:c4:15:31:0a:30: 8b:3d:6c:e5:23:ed:96:02:61:6e:4c:c3:e7:f1:34:6c:1c:c2: 47:1b:af:3a:fa:eb:66:f8:8e:6d:a1:28:14:c5:24:61:86:26: 5b:84:da:92:41:e8:7e:5d:17:ff:8f:c7:ee:57:00:3d:fd:f2: 0b:ba:bd:4d:89:15:97:d4:5a:8f:47:82:71:1b:4d:f2:bb:41: 89:46:54:70:a2:ef:52:f5:5d:fd:20:49:0c:eb:8c:86:6b:ea: c1:1d:02:cd:08:95:78:1d:c9:30:7a:8f:ac:f2:6d:89:f6:7e: 1d:1c:c9:e8:df:bd:5f:fb:b7:6f:9e:23:15:99:05:0f:24:81: ef:72:b6:8c:f4:dc:bb:c9:61:51:ad:25:34:de:f6:50:a3:22: f1:1c:56:c9:55:eb:af:db:fd:b8:18:a7:eb:e9:ab:83:c2:96: c2:5b:47:9d:27:51:ad:f9:5d:0d:14:55:cd:2a:80:89:6b:64: 8d:17:93:6d:af:a9:68:1a:2a:f6:01:49:d6:87:9a:89:29:1b: 9a:fb:55:92:7a:23:f1:b9:39:66:7c:a0:51:24:a7:c1:c7:a1: ac:35:b9:4b:a8:84:be:49:a6:2d:29:c8:7a:cd:88:f2:a0:2e: c5:84:8c:b6 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUTZtQdgqumY6Cl19IlA+jHwHwnT4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGZmNDMwZTIzYWM2ZTE0YTA5MTczZDli OWI0YjNlMzI4YTc2YjM4OGUwHhcNMjUwNDE1MTQwMjI1WhcNMjYwNDE0MTQwNzI1 WjAzMTEwLwYDVQQDEyg5MUEyNzJCOEM3MENGMkIzN0E1MUNFMzhCRkJGRDBFNThC QUY4MjAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rE1Cu8vnVsN PWgUbCOW3gxUVWVp9zC6HWqkJlDPtqgM9UmXbzLsQ358ZI3n1dqFFYl3RjA+MpVr 3dXlSjUrdw481AcbtMyspWNuCs5GqTRYU0dlJv3Ni6IIGOzMDI4lLfqO0dJUzgU3 8LpjZ/YV2MdxK04gvEh1C7Q7Ptk3Dy+T3uz/Ld/yUGB8KXFBBrcFkqfh7PmMWhz9 czIVkEEeuGP3Xxac8VKx+UNTep/4iWY4PkRnuqktXMFopFPVNQiXElkRJ1Hg/own qFYEeiSLlA5Y6QXlLtBiwKfjucnQR9QfHYMK9Bo6mp1MJH9l44tuaQC5moFM/gCG JS/uwectnQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFJGicrjHDPKzelHOOL+/0OWL r4IBMB8GA1UdIwQYMBaAFAoXtAp53/9E+vo9QPbk0A2DUUuzMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv MEExN0I0MEE3OURGRkY0NEZBRkEzRDQwRjZFNEQwMEQ4MzUxNEJCMy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh YjFjYjMwZmY0MzBlMjNhYzZlMTRhMDkxNzNkOWI5YjRiM2UzMjhhNzZiMzg4ZS5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1 MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzAyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMTMzMzUzNDMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACt9+YwDQYJKoZIhvcN AQELBQADggEBAHumAP9Xl0ntmRnfvz3EFTEKMIs9bOUj7ZYCYW5Mw+fxNGwcwkcb rzr662b4jm2hKBTFJGGGJluE2pJB6H5dF/+Px+5XAD398gu6vU2JFZfUWo9HgnEb TfK7QYlGVHCi71L1Xf0gSQzrjIZr6sEdAs0IlXgdyTB6j6zybYn2fh0cyejfvV/7 t2+eIxWZBQ8kge9ytoz03LvJYVGtJTTe9lCjIvEcVslV66/b/bgYp+vpq4PClsJb R50nUa35XQ0UVc0qgIlrZI0Xk22vqWgaKvYBSdaHmokpG5r7VZJ6I/G5OWZ8oFEk p8HHoaw1uUuohL5Jpi0pyHrNiPKgLsWEjLY= -----END CERTIFICATE-----Generated at Mon Apr 21 04:11:53 2025 by rpki-client