$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa File: 3139392e3233312e37302e302f32342d3234203d3e203231363431.roa (raw, json) Hash identifier: bpgxiugl9G+mylRbbyYNd0C5UrbRwfHB+bF+Ck63uC8= Subject key identifier: 8A:1F:A4:2D:53:59:50:B6:7C:52:1F:59:58:6A:B7:4F:E5:2F:F8:15 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 0554F555FA152995A21163AFC3C4EA0A240AD418 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa Signing time: Mon 20 Jan 2025 23:27:31 +0000 ROA not before: Mon 20 Jan 2025 23:22:31 +0000 ROA not after: Mon 19 Jan 2026 23:27:31 +0000 asID: 21641 IP address blocks: 199.231.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 18:19:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:54:f5:55:fa:15:29:95:a2:11:63:af:c3:c4:ea:0a:24:0a:d4:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Jan 20 23:22:31 2025 GMT Not After : Jan 19 23:27:31 2026 GMT Subject: CN=8A1FA42D535950B67C521F59586AB74FE52FF815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:be:0d:48:38:a5:f1:c3:45:0e:a4:6a:53:63: b1:3a:d9:7e:14:8c:b5:c2:26:e9:d4:f8:76:8e:81: d5:75:8d:df:6e:d6:5e:f1:cb:9f:69:0e:b5:7e:ba: db:72:69:11:bb:ef:65:eb:f6:d6:f7:2b:49:b0:73: e9:80:d9:a1:37:2a:f3:9b:8a:ec:43:1e:a2:47:12: 67:fe:9f:e6:d9:96:54:f9:99:af:bd:9f:30:fb:3a: a0:5a:8d:a8:35:27:09:8d:8e:bb:24:13:8e:84:f3: 33:7f:b3:e5:73:f9:54:29:72:ab:0d:23:44:66:6e: 62:08:9a:f3:d9:65:ee:bb:55:9c:fa:96:3e:f1:9c: 8c:da:83:55:6b:b0:cd:65:e1:7a:5c:69:a6:39:71: 9a:27:3d:f9:2d:29:3b:33:18:56:eb:f6:c9:57:09: f4:79:65:0d:26:ba:ff:5f:33:18:f4:2b:17:bb:c4: a4:11:c3:0b:9b:d7:76:a1:cd:ab:d5:19:fa:04:2b: b8:f1:d1:55:09:40:ba:51:db:f3:5b:b7:d0:cf:bd: db:70:e3:04:c0:5e:44:6c:af:08:90:c3:c2:7e:d4: 28:01:02:3f:14:a4:db:ae:e4:92:61:16:00:51:8a: 2b:f8:0a:cb:df:cd:98:1e:0c:5c:8b:1e:d0:21:94: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:1F:A4:2D:53:59:50:B6:7C:52:1F:59:58:6A:B7:4F:E5:2F:F8:15 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e203231363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.231.70.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:47:55:89:f6:83:6a:89:f6:9d:91:64:c0:15:b0:9a:54:35: 8e:90:e5:31:60:b8:2b:65:e2:a4:db:82:5b:30:45:58:53:da: 43:ea:1b:63:5a:3b:6d:88:80:92:82:d4:9d:06:65:2b:5b:0b: c5:f3:a5:a7:77:d1:90:30:a5:38:c2:db:ae:81:bb:ec:b8:e3: 7d:4b:51:0d:ce:35:cc:90:db:01:ca:30:c0:39:a6:b1:0a:3b: ba:10:90:8d:d6:ae:1c:bc:2f:d8:0e:00:77:8c:62:64:2b:2c: eb:e0:5e:ab:82:45:f1:be:2e:64:0d:d9:25:ca:38:ce:33:ba: b6:ed:0a:a6:04:51:a2:1f:d8:4d:59:4b:8c:3f:68:d6:c8:12: 93:eb:dc:59:f1:91:c6:b3:a0:2c:5b:af:91:da:27:5f:f0:a7: c4:32:5e:21:78:79:87:3c:40:35:b0:2c:5e:4b:1d:38:f3:16: 38:85:8f:cc:ae:4d:c3:f7:f0:59:5c:e2:5b:c2:08:bf:96:90: 73:95:4d:8d:4f:0d:85:d5:d2:fe:b0:34:d1:30:c7:6c:4e:57: 05:70:81:5a:df:e3:64:89:de:c7:73:3c:b7:b5:55:77:b8:6a: c6:a4:a5:0d:7e:83:8d:16:c7:1a:b3:9f:f0:63:3b:79:66:8e: 99:d6:c9:30 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUBVT1VfoVKZWiEWOvw8TqCiQK1BgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwMTIwMjMyMjMxWhcNMjYwMTE5MjMyNzMx WjAzMTEwLwYDVQQDEyg4QTFGQTQyRDUzNTk1MEI2N0M1MjFGNTk1ODZBQjc0RkU1 MkZGODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb4NSDil8cNF DqRqU2OxOtl+FIy1wibp1Ph2joHVdY3fbtZe8cufaQ61frrbcmkRu+9l6/bW9ytJ sHPpgNmhNyrzm4rsQx6iRxJn/p/m2ZZU+ZmvvZ8w+zqgWo2oNScJjY67JBOOhPMz f7Plc/lUKXKrDSNEZm5iCJrz2WXuu1Wc+pY+8ZyM2oNVa7DNZeF6XGmmOXGaJz35 LSk7MxhW6/bJVwn0eWUNJrr/XzMY9CsXu8SkEcMLm9d2oc2r1Rn6BCu48dFVCUC6 UdvzW7fQz73bcOMEwF5EbK8IkMPCftQoAQI/FKTbruSSYRYAUYor+ArL382YHgxc ix7QIZTUsQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIofpC1TWVC2fFIfWVhqt0/l L/gVMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0 MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNzMwMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMTM2MzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMfnRjANBgkqhkiG9w0BAQsF AAOCAQEAO0dVifaDaon2nZFkwBWwmlQ1jpDlMWC4K2XipNuCWzBFWFPaQ+obY1o7 bYiAkoLUnQZlK1sLxfOlp3fRkDClOMLbroG77LjjfUtRDc41zJDbAcowwDmmsQo7 uhCQjdauHLwv2A4Ad4xiZCss6+Beq4JF8b4uZA3ZJco4zjO6tu0KpgRRoh/YTVlL jD9o1sgSk+vcWfGRxrOgLFuvkdonX/CnxDJeIXh5hzxANbAsXksdOPMWOIWPzK5N w/fwWVziW8IIv5aQc5VNjU8NhdXS/rA00TDHbE5XBXCBWt/jZInex3M8t7VVd7hq xqSlDX6DjRbHGrOf8GM7eWaOmdbJMA== -----END CERTIFICATE-----Generated at Thu Apr 17 23:50:44 2025 by rpki-client