$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231362e302f32342d3234203d3e20323036313530.roa File: 3139392e36382e3231362e302f32342d3234203d3e20323036313530.roa (raw, json) Hash identifier: cQjQbt4UnLH0slST1zv0Mk75zEikoLwA81Cfnq1LehQ= Subject key identifier: 3D:FE:C2:A0:4E:9A:4C:0D:8B:2C:FB:3C:81:05:6A:66:CB:AD:A5:C9 Certificate issuer: /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a Certificate serial: 2DD0039A968A15AF42E9D2D0FB445A46919966B0 Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231362e302f32342d3234203d3e20323036313530.roa Signing time: Thu 11 Sep 2025 07:29:45 +0000 ROA not before: Thu 11 Sep 2025 07:24:45 +0000 ROA not after: Thu 10 Sep 2026 07:29:45 +0000 asID: 206150 IP address blocks: 199.68.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 04:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d0:03:9a:96:8a:15:af:42:e9:d2:d0:fb:44:5a:46:91:99:66:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a Validity Not Before: Sep 11 07:24:45 2025 GMT Not After : Sep 10 07:29:45 2026 GMT Subject: CN=3DFEC2A04E9A4C0D8B2CFB3C81056A66CBADA5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e6:11:c9:97:1c:7c:36:ae:b0:00:83:72:a7: 28:94:3a:96:e1:4e:ad:72:0f:c7:a6:84:02:7f:dd: dd:95:b9:74:d7:75:65:bb:3a:1b:71:08:b1:7b:e4: 6a:1c:c3:b4:36:87:d3:2f:38:32:ce:2b:af:82:e7: d8:b1:8e:98:88:be:a6:d2:4a:95:56:73:fd:06:58: 7c:bb:eb:ed:d3:2b:3f:3f:6b:f1:f7:df:6d:b1:e0: 30:c5:10:51:d8:5a:0a:71:5a:a0:72:2c:8d:40:01: 45:4b:b8:09:6a:d0:3a:70:3e:98:fd:23:ba:ad:a5: 80:b5:1d:8b:26:01:a6:34:60:77:01:25:ed:bf:3a: 80:43:61:fb:57:98:36:66:10:cf:f9:79:0f:93:28: b6:a8:1f:23:3d:7a:42:d5:ca:b7:7e:66:69:25:fe: 46:05:8f:6c:9a:a9:d2:ca:45:2a:72:03:fd:c4:5c: c0:65:d0:4d:68:77:28:fc:e1:f1:93:db:2c:2d:67: b9:36:3b:e1:03:10:d7:20:56:a0:f4:db:db:82:b4: 94:6f:d9:b5:6d:83:82:70:0f:29:9c:37:6b:d1:42: c8:d3:83:ca:22:e6:c9:1c:f2:b6:0a:02:13:d6:b2: 3a:f5:9a:21:39:9d:e3:9e:6b:78:21:c9:7f:cc:76: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FE:C2:A0:4E:9A:4C:0D:8B:2C:FB:3C:81:05:6A:66:CB:AD:A5:C9 X509v3 Authority Key Identifier: keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231362e302f32342d3234203d3e20323036313530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.68.216.0/24 Signature Algorithm: sha256WithRSAEncryption 94:92:1a:80:61:9f:ca:b8:3c:3f:c8:5d:d0:0d:00:2b:c8:dc: 9d:70:81:84:e6:85:99:22:ae:66:95:ee:fb:96:88:2a:3a:2c: ec:ad:b0:63:11:77:90:d0:4e:97:dd:82:dc:e0:48:80:c0:09: 09:90:e2:02:af:ed:3b:1b:85:ce:3d:30:c9:1b:08:ca:40:21: 16:56:80:6a:86:1d:84:4e:0e:ee:7a:ee:ec:37:e1:24:0a:43: 1e:17:56:24:22:c9:cd:a9:e5:43:c8:e3:2c:02:53:a7:35:96: d3:84:d5:99:86:94:77:db:11:f1:f7:9f:77:87:35:d1:2a:cf: e9:1e:ed:b4:fd:88:61:af:02:15:06:b8:b1:ee:df:45:85:a5: da:67:ad:fc:d7:7c:bb:55:88:a6:41:8b:a1:6c:85:53:91:24: 40:bd:f1:24:19:ba:98:89:9a:86:80:24:58:07:87:bb:83:ff: 3a:d5:8a:89:c0:34:1a:9a:93:42:3b:d4:c2:44:d4:1a:ac:90: 65:6f:3f:5b:a9:c7:93:e6:44:c1:ee:f6:4d:1c:73:bf:b1:7a: 39:de:b6:af:b5:99:d0:88:6a:85:34:05:04:c0:c1:e6:91:c9: 03:ed:e7:07:cf:10:6f:ca:2e:2b:c8:42:e2:be:17:0d:fc:47: cc:9c:9e:86 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIULdADmpaKFa9C6dLQ+0RaRpGZZrAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjUwOTExMDcyNDQ1WhcNMjYwOTEwMDcyOTQ1 WjAzMTEwLwYDVQQDEygzREZFQzJBMDRFOUE0QzBEOEIyQ0ZCM0M4MTA1NkE2NkNC QURBNUM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+YRyZccfDau sACDcqcolDqW4U6tcg/HpoQCf93dlbl013VluzobcQixe+RqHMO0NofTLzgyziuv gufYsY6YiL6m0kqVVnP9Blh8u+vt0ys/P2vx999tseAwxRBR2FoKcVqgciyNQAFF S7gJatA6cD6Y/SO6raWAtR2LJgGmNGB3ASXtvzqAQ2H7V5g2ZhDP+XkPkyi2qB8j PXpC1cq3fmZpJf5GBY9smqnSykUqcgP9xFzAZdBNaHco/OHxk9ssLWe5NjvhAxDX IFag9NvbgrSUb9m1bYOCcA8pnDdr0ULI04PKIubJHPK2CgIT1rI69ZohOZ3jnmt4 Icl/zHZAhwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFD3+wqBOmkwNiyz7PIEFambL raXJMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy YzFiMTllMGM1ZS8wLzMxMzkzOTJlMzYzODJlMzIzMTM2MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMDM2MzEzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx0TYMA0GCSqGSIb3DQEB CwUAA4IBAQCUkhqAYZ/KuDw/yF3QDQAryNydcIGE5oWZIq5mle77logqOizsrbBj EXeQ0E6X3YLc4EiAwAkJkOICr+07G4XOPTDJGwjKQCEWVoBqhh2ETg7ueu7sN+Ek CkMeF1YkIsnNqeVDyOMsAlOnNZbThNWZhpR32xHx9593hzXRKs/pHu20/YhhrwIV Brix7t9FhaXaZ63813y7VYimQYuhbIVTkSRAvfEkGbqYiZqGgCRYB4e7g/861YqJ wDQampNCO9TCRNQarJBlbz9bqceT5kTB7vZNHHO/sXo53ravtZnQiGqFNAUEwMHm kckD7ecHzxBvyi4ryELivhcN/EfMnJ6G -----END CERTIFICATE-----Generated at Mon Oct 20 04:09:44 2025 by rpki-client