$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234382e302f32312d3231203d3e2035363530.roa File: 3137322e39352e3234382e302f32312d3231203d3e2035363530.roa (raw, json) Hash identifier: USNSNgM/GrUx78nOdfVEuiDI9eknZI1mOhH8Eh8HCl8= Subject key identifier: DF:C5:00:10:1B:7D:81:2E:52:2D:36:AA:3A:28:F8:1D:74:2B:89:74 Certificate issuer: /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef Certificate serial: 716CFAAB87036516705A55C56D780E41A2484891 Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234382e302f32312d3231203d3e2035363530.roa Signing time: Fri 01 May 2026 02:28:06 +0000 ROA not before: Fri 01 May 2026 02:23:06 +0000 ROA not after: Fri 30 Apr 2027 02:28:06 +0000 asID: 5650 IP address blocks: 172.95.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 16:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6c:fa:ab:87:03:65:16:70:5a:55:c5:6d:78:0e:41:a2:48:48:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef Validity Not Before: May 1 02:23:06 2026 GMT Not After : Apr 30 02:28:06 2027 GMT Subject: CN=DFC500101B7D812E522D36AA3A28F81D742B8974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:63:f1:98:7a:d0:4c:f6:76:33:fd:53:b3:cb: be:3e:a1:13:18:19:2d:ef:f1:7c:69:cf:cf:44:12: bf:ff:c4:43:31:9d:8a:57:8a:88:1c:8a:ce:25:a3: 95:3e:1a:55:b2:25:d9:8c:d9:97:45:aa:a5:b1:97: d5:0b:5c:3d:98:5b:04:09:eb:59:5a:e7:c0:b1:01: cf:fa:5d:6a:fd:4b:e6:69:7c:82:18:f3:20:e5:f1: c8:ea:ba:1b:d1:3c:cc:97:c3:41:f2:ed:d4:41:f4: 40:ec:03:5f:9d:aa:96:65:22:11:10:80:bb:2c:bd: bc:89:cd:85:80:24:ae:8c:9e:ce:a3:6d:ea:b1:0b: 5b:59:b9:47:12:d4:75:12:82:94:2f:34:0d:d4:f2: fd:eb:5c:99:c7:9e:00:e6:d2:c2:94:f0:04:30:2a: 2c:36:fd:54:c7:75:f0:c2:96:dd:84:c1:7d:b1:9d: 8f:07:0d:a2:6c:e1:11:d3:e4:a0:ae:fd:01:b8:29: a1:32:1e:36:7b:2d:bb:71:65:72:ff:43:56:84:72: 05:af:e5:67:92:e4:b9:c6:bf:17:ed:67:71:1a:d4: 49:73:62:3f:55:d1:a0:59:92:7f:93:fe:dd:97:ce: 2f:4c:90:aa:0f:bf:03:96:5c:99:84:e8:68:97:0d: 50:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C5:00:10:1B:7D:81:2E:52:2D:36:AA:3A:28:F8:1D:74:2B:89:74 X509v3 Authority Key Identifier: keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/3137322e39352e3234382e302f32312d3231203d3e2035363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.95.248.0/21 Signature Algorithm: sha256WithRSAEncryption b5:5c:1a:e8:fe:60:3d:61:2b:3f:2e:b1:dd:2f:d3:51:76:83: bd:cd:d6:4d:f3:46:4f:53:cc:41:60:48:d0:eb:fa:8d:1f:69: 57:0c:08:4e:73:8e:88:59:98:a4:69:f9:9c:cf:52:6e:4c:68: 80:58:ca:29:05:7a:ec:74:6a:30:ad:0a:21:0a:4b:10:74:e1: a7:54:17:9e:a7:8a:82:b3:32:a8:0d:7a:c0:92:a5:67:61:68: 01:49:f0:f0:18:9f:22:99:14:fc:bc:fc:b6:18:ab:fd:75:ae: 06:8f:d0:fd:8b:59:b4:e7:25:11:9c:4a:cc:1a:e8:13:d1:3e: d1:22:c2:3a:f0:b9:ad:12:86:a0:1d:5c:75:d2:e1:b7:7f:91: 76:e6:57:ad:56:68:61:ac:06:09:f9:ff:94:3d:c8:c4:5f:5d: be:8e:5c:e7:51:34:da:bc:f7:dd:44:67:5d:d1:e8:17:b4:f2: c1:e8:c9:9b:74:28:47:c5:90:6b:d7:fb:63:8a:42:54:2a:72: 82:af:94:42:87:16:7f:78:9a:16:59:5e:78:9e:01:d7:55:7d: 40:a7:b2:65:2b:7c:6d:ff:0b:66:f8:c1:39:4d:c7:46:a7:25: 22:dd:ac:ad:c2:08:8c:79:7f:fe:c4:d4:c3:ee:f2:9c:18:d5: bc:e4:9c:84 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUcWz6q4cDZRZwWlXFbXgOQaJISJEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzc2NjYxNjAwNTlhZjJjMTEyOWVjYjllNWY2YWJmNWNh OTJiYzg3NDRkNjFkNDU5ZWYwHhcNMjYwNTAxMDIyMzA2WhcNMjcwNDMwMDIyODA2 WjAzMTEwLwYDVQQDEyhERkM1MDAxMDFCN0Q4MTJFNTIyRDM2QUEzQTI4RjgxRDc0 MkI4OTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2PxmHrQTPZ2 M/1Ts8u+PqETGBkt7/F8ac/PRBK//8RDMZ2KV4qIHIrOJaOVPhpVsiXZjNmXRaql sZfVC1w9mFsECetZWufAsQHP+l1q/UvmaXyCGPMg5fHI6rob0TzMl8NB8u3UQfRA 7ANfnaqWZSIREIC7LL28ic2FgCSujJ7Oo23qsQtbWblHEtR1EoKULzQN1PL961yZ x54A5tLClPAEMCosNv1Ux3XwwpbdhMF9sZ2PBw2ibOER0+Sgrv0BuCmhMh42ey27 cWVy/0NWhHIFr+VnkuS5xr8X7WdxGtRJc2I/VdGgWZJ/k/7dl84vTJCqD78DllyZ hOholw1QgwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFN/FABAbfYEuUi02qjoo+B10 K4l0MB8GA1UdIwQYMBaAFPeLPlLSe9LnS+pP5uhiQGDdOF03MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzMv Rjc4QjNFNTJEMjdCRDJFNzRCRUE0RkU2RTg2MjQwNjBERDM4NUQzNy5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1L2YxNjcwNWEyLTA3YWMtNDAzMS05MjM3LTEwNDg5YzMxYjk2YS8zNzY2 NjE2MDA1OWFmMmMxMTI5ZWNiOWU1ZjZhYmY1Y2E5MmJjODc0NGQ2MWQ0NTllZi5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy YTkwYTJmMDk3Zi8zLzMxMzczMjJlMzkzNTJlMzIzNDM4MmUzMDJmMzIzMTJkMzIz MTIwM2QzZTIwMzUzNjM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOsX/gwDQYJKoZIhvcNAQELBQAD ggEBALVcGuj+YD1hKz8usd0v01F2g73N1k3zRk9TzEFgSNDr+o0faVcMCE5zjohZ mKRp+ZzPUm5MaIBYyikFeux0ajCtCiEKSxB04adUF56nioKzMqgNesCSpWdhaAFJ 8PAYnyKZFPy8/LYYq/11rgaP0P2LWbTnJRGcSswa6BPRPtEiwjrwua0ShqAdXHXS 4bd/kXbmV61WaGGsBgn5/5Q9yMRfXb6OXOdRNNq8991EZ13R6Be08sHoyZt0KEfF kGvX+2OKQlQqcoKvlEKHFn94mhZZXnieAddVfUCnsmUrfG3/C2b4wTlNx0anJSLd rK3CCIx5f/7E1MPu8pwY1bzknIQ= -----END CERTIFICATE-----Generated at Wed May 13 02:40:57 2026 by rpki-client