$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e20383334.roa File: 3139322e302e32332e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: qawE0c4bykpoIGnX/ZIQ7Ru5jW2EnYcWQfVw8A/hd20= Subject key identifier: CA:E3:10:7F:9F:C5:FB:A4:F9:7C:01:95:6A:65:16:FA:60:FC:AB:D3 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 5F0C135A3B6A61592A5327318FF1627EED7D8FF2 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e20383334.roa Signing time: Mon 15 Sep 2025 12:32:25 +0000 ROA not before: Mon 15 Sep 2025 12:27:25 +0000 ROA not after: Mon 14 Sep 2026 12:32:25 +0000 asID: 834 IP address blocks: 192.0.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Sep 2025 14:24:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0c:13:5a:3b:6a:61:59:2a:53:27:31:8f:f1:62:7e:ed:7d:8f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Sep 15 12:27:25 2025 GMT Not After : Sep 14 12:32:25 2026 GMT Subject: CN=CAE3107F9FC5FBA4F97C01956A6516FA60FCABD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7d:44:9e:fc:18:8b:0e:86:45:be:4b:12:ce: 6e:d6:32:56:2a:68:71:41:6c:b7:85:ce:2a:3c:22: 2e:6a:be:d8:3c:d0:6a:a7:ab:de:7c:37:ef:43:53: db:50:7d:b6:26:fa:ed:eb:03:ab:eb:1a:8d:d3:89: 6b:8c:d3:0d:9b:3a:9c:ae:15:dd:38:93:ff:fe:62: 49:ed:1a:0b:38:cc:29:58:0b:e4:4e:52:9a:fd:90: aa:ea:84:df:84:28:10:1f:29:4a:f1:b6:05:70:a8: 23:e3:fe:ea:cf:5c:c3:8e:eb:bf:0d:ff:d6:7f:f5: ba:9f:a2:86:cd:a5:80:9e:08:28:84:9b:d1:e8:32: 2d:d9:c7:4c:32:10:14:3c:67:e9:d6:ae:6b:a1:1d: e5:e2:a5:14:32:b0:74:a1:15:e3:34:c1:80:5b:c5: 4d:67:2b:e9:15:11:83:3b:f9:9e:90:55:37:0a:f8: b2:ff:ce:db:ac:9e:33:39:3e:dc:66:67:f8:c3:f8: bd:9b:d6:77:3c:ef:ec:50:13:33:fb:ab:b9:cb:b9: c7:0a:e0:85:ee:fa:cb:7b:5d:91:51:2b:5c:ac:64: 3e:d9:ee:9a:71:72:b0:fe:60:20:8c:0d:35:c7:92: 24:d3:3c:d6:f7:f1:2d:4b:9f:2f:8d:46:db:82:7c: 66:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E3:10:7F:9F:C5:FB:A4:F9:7C:01:95:6A:65:16:FA:60:FC:AB:D3 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.23.0/24 Signature Algorithm: sha256WithRSAEncryption 13:62:4a:5c:18:b4:ab:f9:f0:d6:d8:f8:1e:9b:35:07:01:de: 52:d8:e5:1e:e6:1e:c1:40:61:57:50:e6:58:4e:ee:18:32:16: 70:f7:58:0f:4f:8e:60:f1:1f:f8:3f:17:0b:60:4a:83:89:72: e1:e3:63:20:eb:a1:86:bf:aa:0b:95:81:ae:df:9a:13:c3:c9: ba:83:3d:a5:11:d3:c9:3c:cd:d5:cc:43:4a:0a:10:e7:8c:d5: 7d:a2:a1:f0:91:85:9d:d2:9a:6c:da:9f:99:79:f5:bc:df:3a: c9:8b:14:9f:76:38:cc:7b:96:90:58:64:ce:a7:97:93:b8:5d: 25:14:45:ef:f8:52:bc:50:ad:25:be:b2:2c:4b:de:56:79:ae: 5f:ff:69:6e:c3:63:6e:ab:62:17:2c:55:71:b8:6f:c1:99:d1: 3e:ea:c8:a8:ab:fe:c6:64:9e:65:fe:7a:72:05:6f:f4:2c:42: b2:fd:64:4c:0c:64:5d:97:2c:97:b1:6b:02:f8:91:0f:01:b6: cf:cd:26:54:7b:9b:f2:c0:51:6a:d0:e3:69:ce:32:1b:d7:df: 7b:c6:77:77:b6:42:17:61:ea:fc:7e:b7:dd:47:5b:46:0c:42: c4:3c:62:80:c8:5f:6f:e0:be:89:62:1e:fc:ec:9b:43:92:e7: 15:7e:73:79 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUXwwTWjtqYVkqUycxj/Fifu19j/IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwOTE1MTIyNzI1WhcNMjYwOTE0MTIzMjI1 WjAzMTEwLwYDVQQDEyhDQUUzMTA3RjlGQzVGQkE0Rjk3QzAxOTU2QTY1MTZGQTYw RkNBQkQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk31EnvwYiw6G Rb5LEs5u1jJWKmhxQWy3hc4qPCIuar7YPNBqp6vefDfvQ1PbUH22Jvrt6wOr6xqN 04lrjNMNmzqcrhXdOJP//mJJ7RoLOMwpWAvkTlKa/ZCq6oTfhCgQHylK8bYFcKgj 4/7qz1zDjuu/Df/Wf/W6n6KGzaWAnggohJvR6DIt2cdMMhAUPGfp1q5roR3l4qUU MrB0oRXjNMGAW8VNZyvpFRGDO/mekFU3Cviy/87brJ4zOT7cZmf4w/i9m9Z3PO/s UBMz+6u5y7nHCuCF7vrLe12RUStcrGQ+2e6acXKw/mAgjA01x5Ik0zzW9/EtS58v jUbbgnxm2QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFMrjEH+fxfuk+XwBlWplFvpg /KvTMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMAAFzANBgkqhkiG9w0BAQsFAAOCAQEAE2JK XBi0q/nw1tj4Hps1BwHeUtjlHuYewUBhV1DmWE7uGDIWcPdYD0+OYPEf+D8XC2BK g4ly4eNjIOuhhr+qC5WBrt+aE8PJuoM9pRHTyTzN1cxDSgoQ54zVfaKh8JGFndKa bNqfmXn1vN86yYsUn3Y4zHuWkFhkzqeXk7hdJRRF7/hSvFCtJb6yLEveVnmuX/9p bsNjbqtiFyxVcbhvwZnRPurIqKv+xmSeZf56cgVv9CxCsv1kTAxkXZcsl7FrAviR DwG2z80mVHub8sBRatDjac4yG9ffe8Z3d7ZCF2Hq/H633UdbRgxCxDxigMhfb+C+ iWIe/OybQ5LnFX5zeQ== -----END CERTIFICATE-----Generated at Mon Sep 15 18:05:48 2025 by rpki-client