$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e20323134303235.roa File: 3139322e3130392e3131392e302f32342d3234203d3e20323134303235.roa (raw, json) Hash identifier: fQGi3wZMrBzD3rOu1WGLLJR88Bv76LYaObUxqG+1cXU= Subject key identifier: E1:D2:5D:E8:D5:BB:9A:B5:68:DB:CE:9C:39:04:11:AA:6B:4D:FE:D1 Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 3D656B68D5A80F0353A67763A3F67E27EEB63198 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e20323134303235.roa Signing time: Sun 28 Sep 2025 10:29:19 +0000 ROA not before: Sun 28 Sep 2025 10:24:19 +0000 ROA not after: Sun 27 Sep 2026 10:29:19 +0000 asID: 214025 IP address blocks: 192.109.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 23:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:65:6b:68:d5:a8:0f:03:53:a6:77:63:a3:f6:7e:27:ee:b6:31:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 28 10:24:19 2025 GMT Not After : Sep 27 10:29:19 2026 GMT Subject: CN=E1D25DE8D5BB9AB568DBCE9C390411AA6B4DFED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:aa:31:80:52:b6:ca:ff:80:06:5c:0b:14:c2: 50:01:9b:8a:9f:8f:b8:bf:31:e6:cc:c8:dc:4b:cb: f1:4b:31:7e:f9:de:1e:a6:5a:71:01:86:5d:55:56: 26:ce:f4:25:cf:14:5e:6c:d5:a7:60:f3:54:5f:5e: a9:da:22:42:7c:57:8e:1b:1e:91:ac:fa:70:fe:fc: 64:3a:94:be:eb:3b:ca:f0:d2:5d:9c:6e:58:6f:29: e3:8d:95:eb:f4:e7:91:9c:ee:a7:4e:6c:b7:d2:81: e2:72:f0:7a:31:8f:23:32:3c:7a:d8:5f:4c:02:78: e0:4a:c2:af:e7:26:a6:81:27:df:57:f1:1e:7d:c6: ad:2f:91:a9:00:aa:f5:dd:65:20:0c:d6:b8:71:34: 37:12:e9:8e:18:d5:61:3f:3d:62:23:1a:f1:85:c0: a2:59:9c:bd:6f:bb:0e:2d:cc:f5:9b:ac:14:0f:c7: f7:fb:95:c5:bb:30:89:a6:75:49:c0:81:17:6a:2e: 3b:94:ad:0a:4f:95:82:09:da:45:07:ea:2c:e5:de: 11:12:ac:53:a7:84:65:6d:96:90:c9:9b:81:1a:7a: 9a:ef:02:95:01:e5:2f:e5:35:6b:7b:b9:ff:11:d2: bc:82:69:57:99:90:13:9c:f3:2f:8d:1a:5f:90:c8: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:D2:5D:E8:D5:BB:9A:B5:68:DB:CE:9C:39:04:11:AA:6B:4D:FE:D1 X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e20323134303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.119.0/24 Signature Algorithm: sha256WithRSAEncryption 65:fa:18:69:e8:c9:ee:e4:d6:e5:14:d0:66:e3:f4:5b:9b:e6: fe:c7:d8:b1:ee:05:5c:9b:51:df:33:29:cf:ea:1d:de:8e:78: 85:0e:f3:7c:e6:fb:46:43:c5:22:08:da:64:78:1c:22:f8:92: bd:4d:7f:bb:53:4c:54:d5:51:bf:8e:fd:f6:0f:9e:7b:49:19: e1:d9:8e:d7:26:35:dc:3d:9f:ac:74:07:11:da:27:7f:bb:03: ec:e2:1a:a8:34:47:77:26:73:94:3c:ba:c3:68:73:60:7d:fd: c7:72:fc:bb:e9:6b:4a:7a:82:0a:2a:b5:ee:9d:6e:cb:72:0a: 21:23:79:a8:65:b9:13:b8:d0:42:eb:ab:e5:ad:23:f5:f9:f8: 9d:ce:f0:15:a1:09:dc:79:e7:f4:24:3b:fe:d4:5f:b0:7a:de: 48:69:ae:00:8c:bd:4a:f6:09:ac:fb:55:9f:a4:ab:4b:dc:aa: da:2f:a5:50:b5:69:cd:9f:dc:48:7e:5f:2a:b7:33:69:3d:d0: 80:2a:b2:4c:48:5e:33:0c:fd:50:57:db:66:7e:20:19:ec:4f: 33:68:ce:47:c1:8f:f4:37:5d:a6:ca:8b:7b:a5:21:b0:b8:06: c4:bc:55:cf:46:3d:a8:99:58:39:f7:67:a1:38:6b:f3:47:24: 3b:1f:3b:0c -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUPWVraNWoDwNTpndjo/Z+J+62MZgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTI4MTAyNDE5WhcNMjYwOTI3MTAyOTE5 WjAzMTEwLwYDVQQDEyhFMUQyNURFOEQ1QkI5QUI1NjhEQkNFOUMzOTA0MTFBQTZC NERGRUQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qoxgFK2yv+A BlwLFMJQAZuKn4+4vzHmzMjcS8vxSzF++d4eplpxAYZdVVYmzvQlzxRebNWnYPNU X16p2iJCfFeOGx6RrPpw/vxkOpS+6zvK8NJdnG5YbynjjZXr9OeRnO6nTmy30oHi cvB6MY8jMjx62F9MAnjgSsKv5yamgSffV/EefcatL5GpAKr13WUgDNa4cTQ3EumO GNVhPz1iIxrxhcCiWZy9b7sOLcz1m6wUD8f3+5XFuzCJpnVJwIEXai47lK0KT5WC CdpFB+os5d4REqxTp4RlbZaQyZuBGnqa7wKVAeUv5TVre7n/EdK8gmlXmZATnPMv jRpfkMgS4QIDAQABo4ICtjCCArIwHQYDVR0OBBYEFOHSXejVu5q1aNvOnDkEEapr Tf7RMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMxMzkyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzQzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAbXcwDQYJKoZIhvcN AQELBQADggEBAGX6GGnoye7k1uUU0Gbj9Fub5v7H2LHuBVybUd8zKc/qHd6OeIUO 83zm+0ZDxSII2mR4HCL4kr1Nf7tTTFTVUb+O/fYPnntJGeHZjtcmNdw9n6x0BxHa J3+7A+ziGqg0R3cmc5Q8usNoc2B9/cdy/Lvpa0p6ggoqte6dbstyCiEjeahluRO4 0ELrq+WtI/X5+J3O8BWhCdx55/QkO/7UX7B63khprgCMvUr2Caz7VZ+kq0vcqtov pVC1ac2f3Eh+Xyq3M2k90IAqskxIXjMM/VBX22Z+IBnsTzNozkfBj/Q3XabKi3ul IbC4BsS8Vc9GPaiZWDn3Z6E4a/NHJDsfOww= -----END CERTIFICATE-----Generated at Mon Oct 20 02:05:17 2025 by rpki-client