$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e20323035383836.roa File: 3139382e3137372e36322e302f32342d3234203d3e20323035383836.roa (raw, json) Hash identifier: mYzlpJL0C7F9RrPs1Vid4QR8hS1R5fuJ3pr+LAjxhCM= Subject key identifier: 99:BA:C2:68:EE:41:4D:30:3E:98:80:82:6A:DC:8E:C5:4E:62:62:87 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 3A293DBA87982A436C2AFE6AADBCCD23E53817CE Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e20323035383836.roa Signing time: Wed 29 Oct 2025 13:50:56 +0000 ROA not before: Wed 29 Oct 2025 13:45:56 +0000 ROA not after: Wed 28 Oct 2026 13:50:56 +0000 asID: 205886 IP address blocks: 198.177.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 01 Nov 2025 05:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:29:3d:ba:87:98:2a:43:6c:2a:fe:6a:ad:bc:cd:23:e5:38:17:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Oct 29 13:45:56 2025 GMT Not After : Oct 28 13:50:56 2026 GMT Subject: CN=99BAC268EE414D303E9880826ADC8EC54E626287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c9:61:30:3e:85:89:33:52:89:14:bf:80:f5: a0:65:d3:92:9e:9c:ad:5b:b0:b4:7f:55:2b:cf:76: 04:e8:95:a0:d2:d8:dc:f8:c3:66:9d:99:59:dc:c9: ad:23:84:3c:8d:4e:1a:eb:34:a7:15:5a:2d:35:f4: 6e:95:b0:ce:17:6c:e8:ae:13:6a:4f:8b:35:13:4d: b5:2f:9e:ca:89:5d:ce:2e:62:e9:aa:1a:ef:d7:a3: ea:f9:4a:57:b1:7d:2e:9e:b1:9d:aa:8d:82:6f:9f: 74:13:e3:bf:1c:dd:d8:1d:e6:97:f6:e2:8c:d7:fb: bc:bb:7f:6b:aa:d6:47:72:b1:e8:34:c4:67:8a:66: 85:dc:1d:09:ab:bc:1d:9a:4e:20:cc:75:99:60:f5: 9b:00:f8:f5:d1:46:01:32:1d:b7:59:3d:cb:2a:4a: 9e:43:a8:2b:bf:78:b2:78:b4:40:69:98:29:45:cc: 17:00:98:73:27:e7:39:96:32:02:77:f2:c9:ba:f3: 00:ee:59:c2:3e:ad:af:c2:cb:ab:fe:80:22:1d:52: 57:eb:72:14:33:5a:d8:f0:9c:c9:9d:c7:d3:33:6d: ca:50:51:4e:1b:95:9e:92:6d:10:61:a9:e7:e0:da: 25:0b:a9:e3:77:5c:92:ef:2d:73:92:9f:69:5e:1d: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BA:C2:68:EE:41:4D:30:3E:98:80:82:6A:DC:8E:C5:4E:62:62:87 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e20323035383836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.177.62.0/24 Signature Algorithm: sha256WithRSAEncryption b9:53:10:35:6e:d7:f3:b3:a3:fe:19:84:16:cd:0d:6c:4f:37: 2d:9f:18:4c:78:3f:c8:bc:53:41:fe:88:e8:8f:75:07:4e:d1: 1a:54:86:98:63:86:cf:c2:4e:3c:8a:d0:b5:ce:9d:92:51:c4: d4:c9:4e:44:69:ff:22:0c:75:84:59:32:66:70:9b:76:47:5e: c6:c3:4d:bf:5d:95:b0:2f:d3:d6:aa:b1:e7:39:ee:b7:5e:b3: 56:2f:e3:b6:f1:b8:37:6a:97:ce:c1:a9:e9:a9:e0:50:fb:ca: 44:ba:b6:4c:6b:67:25:8a:00:9f:df:49:44:32:2e:83:3b:d8: 20:75:ed:ba:f9:2d:b5:eb:c7:bb:e1:69:eb:f9:d1:2c:03:f0: 1e:1f:1a:54:f9:9a:62:3b:25:83:72:35:72:02:d9:f2:76:f5: e3:0b:32:0d:3d:95:88:34:17:3b:ad:88:de:06:fb:e4:ac:64: 60:ab:5a:97:5e:76:57:23:3b:4d:59:cc:5c:1d:18:12:ba:fa: 44:76:87:20:2d:be:ca:79:51:6f:2b:6b:19:c1:67:0e:70:1a: 0c:d3:2c:6b:e1:48:a7:cc:b8:fb:91:db:c1:ce:b3:1d:bf:9e: 67:f9:f0:5a:6a:a1:4f:08:d4:29:5c:81:d6:b4:08:96:48:4f: 68:66:82:94 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUOik9uoeYKkNsKv5qrbzNI+U4F84wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUxMDI5MTM0NTU2WhcNMjYxMDI4MTM1MDU2 WjAzMTEwLwYDVQQDEyg5OUJBQzI2OEVFNDE0RDMwM0U5ODgwODI2QURDOEVDNTRF NjI2Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MlhMD6FiTNS iRS/gPWgZdOSnpytW7C0f1Urz3YE6JWg0tjc+MNmnZlZ3MmtI4Q8jU4a6zSnFVot NfRulbDOF2zorhNqT4s1E021L57KiV3OLmLpqhrv16Pq+UpXsX0unrGdqo2Cb590 E+O/HN3YHeaX9uKM1/u8u39rqtZHcrHoNMRnimaF3B0Jq7wdmk4gzHWZYPWbAPj1 0UYBMh23WT3LKkqeQ6grv3iyeLRAaZgpRcwXAJhzJ+c5ljICd/LJuvMA7lnCPq2v wsur/oAiHVJX63IUM1rY8JzJncfTM23KUFFOG5Wekm0QYann4NolC6njd1yS7y1z kp9pXh3o4wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJm6wmjuQU0wPpiAgmrcjsVO YmKHMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0 MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzNzM3MmUzNjMyMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMDM1MzgzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrE+MA0GCSqGSIb3DQEB CwUAA4IBAQC5UxA1btfzs6P+GYQWzQ1sTzctnxhMeD/IvFNB/ojoj3UHTtEaVIaY Y4bPwk48itC1zp2SUcTUyU5Eaf8iDHWEWTJmcJt2R17Gw02/XZWwL9PWqrHnOe63 XrNWL+O28bg3apfOwanpqeBQ+8pEurZMa2cligCf30lEMi6DO9ggde26+S2168e7 4Wnr+dEsA/AeHxpU+ZpiOyWDcjVyAtnydvXjCzINPZWINBc7rYjeBvvkrGRgq1qX XnZXIztNWcxcHRgSuvpEdocgLb7KeVFvK2sZwWcOcBoM0yxr4UinzLj7kdvBzrMd v55n+fBaaqFPCNQpXIHWtAiWSE9oZoKU -----END CERTIFICATE-----Generated at Fri Oct 31 16:39:22 2025 by rpki-client