$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e203237343633.roa File: 3139322e302e32322e302f32342d3234203d3e203237343633.roa (raw, json) Hash identifier: RG7eRC/nwttb9YxmqFzDDaPW4qQS1VkBptb2vJO/djQ= Subject key identifier: 55:52:62:31:6D:3F:28:8D:9C:88:9C:CC:35:82:0C:C0:7C:73:A2:BB Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 2151E7CBB1E9FD58880F911525CA7039D7F0223F Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e203237343633.roa Signing time: Mon 25 Aug 2025 01:53:11 +0000 ROA not before: Mon 25 Aug 2025 01:48:11 +0000 ROA not after: Mon 24 Aug 2026 01:53:11 +0000 asID: 27463 IP address blocks: 192.0.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 22:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:51:e7:cb:b1:e9:fd:58:88:0f:91:15:25:ca:70:39:d7:f0:22:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Aug 25 01:48:11 2025 GMT Not After : Aug 24 01:53:11 2026 GMT Subject: CN=555262316D3F288D9C889CCC35820CC07C73A2BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b6:03:e7:f0:2a:fa:8a:02:ce:12:5b:20:1f: 14:d9:05:9b:1e:75:9b:d0:e5:06:6b:b0:0a:a7:d7: 50:ba:1d:c9:e2:94:d3:d5:9b:a4:fb:ef:b0:3d:ae: 31:ca:9e:bb:65:5e:79:ec:c4:93:f5:d4:99:6f:7d: aa:d3:e4:11:95:8d:ba:4a:62:ee:a3:da:10:7e:10: 0b:91:17:c8:55:c6:56:a0:da:f5:c2:78:86:03:6e: 5f:12:56:34:77:6a:df:6c:fe:b3:c0:af:35:8b:ab: e7:53:90:cd:1f:5b:1e:cf:9a:a6:0f:a1:40:27:0d: 85:4a:9c:79:58:b9:27:b6:02:59:35:c4:1e:1c:93: 2a:dc:76:d0:c5:78:ee:e3:09:20:72:f9:72:14:cc: 6e:66:76:5e:58:c5:fa:83:47:bc:a4:7f:9a:56:dc: bc:f9:d0:1c:ac:21:43:63:19:fd:67:8d:3b:f1:05: 5d:7f:e1:d9:bb:81:e6:bb:08:77:2f:3b:56:52:07: f0:de:6f:91:ea:17:bc:20:00:c9:8f:bc:3d:bd:33: 3d:60:99:b0:28:14:0f:91:49:41:19:52:32:18:ca: 5a:21:19:04:1c:df:c1:c2:12:e8:06:f9:fd:0c:21: 42:6e:d7:31:fb:9c:98:14:51:98:8b:6f:cd:5c:51: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:52:62:31:6D:3F:28:8D:9C:88:9C:CC:35:82:0C:C0:7C:73:A2:BB X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e203237343633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.22.0/24 Signature Algorithm: sha256WithRSAEncryption a0:11:ea:29:1b:15:a1:60:6a:fd:52:4b:65:aa:7d:a1:a1:cc: 14:c0:09:28:08:cc:20:24:84:cc:6f:86:f3:ab:a6:e9:3e:4b: 09:50:9f:3e:4f:eb:96:a0:94:0e:fc:74:3b:81:04:26:89:f8: 0c:79:45:88:3d:45:fe:c2:c0:47:45:4c:ae:a9:48:da:fe:8f: 47:65:77:40:a4:ae:ce:5f:70:e9:5d:27:d3:98:b4:64:7b:6b: 33:23:d7:34:13:de:0d:6f:e3:ff:a4:f9:8f:d1:4b:96:5c:73: 55:5b:09:b9:a8:82:89:d1:a0:fd:bb:7d:89:f4:df:24:94:79: a5:51:44:e0:81:23:fd:bc:44:d4:e2:e9:a1:3a:4a:3d:3e:15: 87:57:c5:bc:42:4b:f8:c3:50:56:9a:dd:29:eb:7b:36:00:66: 63:05:1f:27:63:5f:16:ea:62:4f:74:ff:74:6c:99:51:c9:76: 09:1d:4d:30:82:e5:f7:f7:cd:36:9d:00:68:ce:4d:1d:13:67: ff:6f:d7:f2:ba:5e:04:8c:38:b3:74:75:ac:ab:81:4c:33:25: b4:49:14:95:f5:c7:60:fa:19:d4:b1:13:6c:74:ce:94:c1:b5: 67:dd:ba:55:a0:a8:aa:d1:e7:fa:c9:98:36:a3:29:fc:df:2d: eb:5c:55:e0 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUIVHny7Hp/ViID5EVJcpwOdfwIj8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwODI1MDE0ODExWhcNMjYwODI0MDE1MzEx WjAzMTEwLwYDVQQDEyg1NTUyNjIzMTZEM0YyODhEOUM4ODlDQ0MzNTgyMENDMDdD NzNBMkJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrYD5/Aq+ooC zhJbIB8U2QWbHnWb0OUGa7AKp9dQuh3J4pTT1Zuk+++wPa4xyp67ZV557MST9dSZ b32q0+QRlY26SmLuo9oQfhALkRfIVcZWoNr1wniGA25fElY0d2rfbP6zwK81i6vn U5DNH1sez5qmD6FAJw2FSpx5WLkntgJZNcQeHJMq3HbQxXju4wkgcvlyFMxuZnZe WMX6g0e8pH+aVty8+dAcrCFDYxn9Z4078QVdf+HZu4Hmuwh3LztWUgfw3m+R6he8 IADJj7w9vTM9YJmwKBQPkUlBGVIyGMpaIRkEHN/BwhLoBvn9DCFCbtcx+5yYFFGY i2/NXFFs4wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFVSYjFtPyiNnIiczDWCDMB8 c6K7MB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzIzMjJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMyMzczNDM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABYwDQYJKoZIhvcNAQELBQADggEB AKAR6ikbFaFgav1SS2WqfaGhzBTACSgIzCAkhMxvhvOrpuk+SwlQnz5P65aglA78 dDuBBCaJ+Ax5RYg9Rf7CwEdFTK6pSNr+j0dld0Ckrs5fcOldJ9OYtGR7azMj1zQT 3g1v4/+k+Y/RS5Zcc1VbCbmogonRoP27fYn03ySUeaVRROCBI/28RNTi6aE6Sj0+ FYdXxbxCS/jDUFaa3SnrezYAZmMFHydjXxbqYk90/3RsmVHJdgkdTTCC5ff3zTad AGjOTR0TZ/9v1/K6XgSMOLN0dayrgUwzJbRJFJX1x2D6GdSxE2x0zpTBtWfdulWg qKrR5/rJmDajKfzfLetcVeA= -----END CERTIFICATE-----Generated at Tue Aug 26 15:14:46 2025 by rpki-client