$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20323034373239.roa File: 3137322e38322e38392e302f32342d3234203d3e20323034373239.roa (raw, json) Hash identifier: QRUINHYfO172S9AzeLs8HklRpXpF3mY8z9W+JK6Nuws= Subject key identifier: A0:17:E0:52:C7:9B:F6:2D:AA:23:C1:10:77:DE:6C:44:05:84:43:55 Certificate issuer: /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2 Certificate serial: 7A96B690F6F7B6C8A925AF2DC1E9D3E5520A448B Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20323034373239.roa Signing time: Mon 06 Jul 2026 18:13:04 +0000 ROA not before: Mon 06 Jul 2026 18:08:04 +0000 ROA not after: Mon 05 Jul 2027 18:13:04 +0000 asID: 204729 IP address blocks: 172.82.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 14:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:96:b6:90:f6:f7:b6:c8:a9:25:af:2d:c1:e9:d3:e5:52:0a:44:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2 Validity Not Before: Jul 6 18:08:04 2026 GMT Not After : Jul 5 18:13:04 2027 GMT Subject: CN=A017E052C79BF62DAA23C11077DE6C4405844355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:07:c4:f8:1a:84:fb:1f:11:59:6b:3d:94: b9:b0:be:c1:4d:81:7a:38:2b:3a:e0:be:ef:b8:fb: 2d:39:4e:88:8c:63:07:d8:8f:9f:d4:b7:cd:89:ad: 91:f8:cc:36:68:a1:4b:41:b4:fe:c1:4e:77:a1:d0: d3:5f:25:6e:27:4d:c0:d9:33:b5:55:90:3b:57:09: 3f:f3:38:1e:03:98:af:9e:f6:f0:ae:b8:8c:b8:a4: 41:d5:c9:01:1e:ac:5c:c2:4f:93:2d:a6:b1:34:a7: 6f:c8:ee:1c:3c:53:a7:bf:f7:26:06:83:55:32:67: de:f1:28:4c:18:fb:a5:50:09:d9:87:d9:08:7c:40: 7e:40:e6:c9:49:dd:a6:cf:aa:1a:9d:fa:f1:7a:f5: 02:47:a8:5d:cf:79:e1:d9:cd:b7:56:f1:41:12:b5: 99:be:f4:5b:01:cd:f3:43:f4:b4:86:2b:71:a4:39: 62:e2:52:c2:62:61:ee:bd:89:11:50:27:8b:e3:be: f4:fd:37:d7:53:8d:aa:0c:fe:38:69:3b:c6:57:5b: 7a:60:26:f4:ad:3f:b3:32:3f:e0:47:b6:89:f4:c5: d8:1b:1b:1d:67:b4:ff:f6:08:fd:45:c7:de:66:d6: c1:95:7e:a4:07:81:71:ac:b8:df:58:53:c8:86:6e: b6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:17:E0:52:C7:9B:F6:2D:AA:23:C1:10:77:DE:6C:44:05:84:43:55 X509v3 Authority Key Identifier: keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e20323034373239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.82.89.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:47:8e:9e:dc:ba:59:b7:ee:0c:80:e9:a7:aa:f7:01:fd:d5: 8d:cd:4c:78:ec:ba:56:68:b3:eb:a8:99:27:a9:6f:da:40:b5: da:72:a7:0d:2c:71:fb:52:87:c5:70:45:56:05:25:b3:ab:a5: d3:d2:50:2c:df:b1:08:05:d6:e6:5a:c0:ef:d3:59:2a:a2:bf: f6:0b:6c:26:c3:6d:88:de:3e:02:e3:3f:66:44:43:29:75:9f: a9:12:d4:20:a1:4b:f0:80:f6:02:9b:29:d4:5c:5d:6c:d3:4e: 72:d0:51:ce:a2:7f:74:6b:35:8c:d5:f4:f0:81:a3:e2:12:4e: e1:c0:52:89:58:f7:76:37:0b:58:1a:8a:ec:4d:2b:36:41:d5: 44:d2:c0:f5:1d:e8:d6:10:c6:ae:49:10:9b:3a:08:0f:99:b6: 67:fa:bd:50:fd:60:d3:ec:9c:dd:0b:bd:1a:78:0c:c1:4f:e5: 66:fd:07:be:09:74:c4:53:ea:2a:e4:5e:c0:25:88:32:b7:36: e2:8b:47:12:95:09:cd:8e:70:7b:5b:88:b9:d1:d8:62:4c:a6: 03:20:ff:cf:49:67:93:ef:46:19:83:2f:b5:4b:86:16:21:c1: 39:07:67:a4:09:85:fa:f3:30:dd:b4:87:41:dd:06:9b:7a:bf: f6:0b:b7:dd -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUepa2kPb3tsipJa8twenT5VIKRIswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy ODczNzg3MDM5YmI2YjI3YjIwHhcNMjYwNzA2MTgwODA0WhcNMjcwNzA1MTgxMzA0 WjAzMTEwLwYDVQQDEyhBMDE3RTA1MkM3OUJGNjJEQUEyM0MxMTA3N0RFNkM0NDA1 ODQ0MzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg4HxPgahPsf EVlrPZS5sL7BTYF6OCs64L7vuPstOU6IjGMH2I+f1LfNia2R+Mw2aKFLQbT+wU53 odDTXyVuJ03A2TO1VZA7Vwk/8zgeA5ivnvbwrriMuKRB1ckBHqxcwk+TLaaxNKdv yO4cPFOnv/cmBoNVMmfe8ShMGPulUAnZh9kIfEB+QObJSd2mz6oanfrxevUCR6hd z3nh2c23VvFBErWZvvRbAc3zQ/S0hitxpDli4lLCYmHuvYkRUCeL4770/TfXU42q DP44aTvGV1t6YCb0rT+zMj/gR7aJ9MXYGxsdZ7T/9gj9RcfeZtbBlX6kB4FxrLjf WFPIhm62+QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKAX4FLHm/YtqiPBEHfebEQF hENVMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1 ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz M2M1YzVmNmI1Yi8wLzMxMzczMjJlMzgzMjJlMzgzOTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMyMzAzNDM3MzIzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxSWTANBgkqhkiG9w0BAQsF AAOCAQEAT0eOnty6WbfuDIDpp6r3Af3Vjc1MeOy6Vmiz66iZJ6lv2kC12nKnDSxx +1KHxXBFVgUls6ul09JQLN+xCAXW5lrA79NZKqK/9gtsJsNtiN4+AuM/ZkRDKXWf qRLUIKFL8ID2Apsp1FxdbNNOctBRzqJ/dGs1jNX08IGj4hJO4cBSiVj3djcLWBqK 7E0rNkHVRNLA9R3o1hDGrkkQmzoID5m2Z/q9UP1g0+yc3Qu9GngMwU/lZv0Hvgl0 xFPqKuRewCWIMrc24otHEpUJzY5we1uIudHYYkymAyD/z0lnk+9GGYMvtUuGFiHB OQdnpAmF+vMw3bSHQd0Gm3q/9gu33Q== -----END CERTIFICATE-----Generated at Thu Jul 23 22:45:50 2026 by rpki-client