$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa File: 3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: siP9eYYLzgW1bK97TdrQUnpaB45dXU5sNlG/pH+pC9Y= Subject key identifier: 68:93:DB:FE:05:69:14:DF:61:0C:DD:70:8F:2F:2C:79:BF:B3:6E:F4 Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 723E7B5E1235D665E947E0F6DC0407D4DF16D69E Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa Signing time: Tue 24 Mar 2026 08:35:54 +0000 ROA not before: Tue 24 Mar 2026 08:30:54 +0000 ROA not after: Tue 23 Mar 2027 08:35:54 +0000 asID: 9009 IP address blocks: 192.109.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 21:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:3e:7b:5e:12:35:d6:65:e9:47:e0:f6:dc:04:07:d4:df:16:d6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Mar 24 08:30:54 2026 GMT Not After : Mar 23 08:35:54 2027 GMT Subject: CN=6893DBFE056914DF610CDD708F2F2C79BFB36EF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fd:4d:04:6e:f3:1a:22:3a:40:fd:c1:3f:79: 35:ff:58:63:4c:d0:5b:a0:91:4a:4a:f3:d2:22:26: d1:32:35:62:c5:0c:7a:66:c4:bc:a4:81:0a:e7:aa: 16:4f:9e:66:fc:46:10:66:96:c3:b4:7f:78:d1:e2: ee:28:90:63:c6:13:c8:c2:6e:ee:3d:f2:4c:11:4c: 85:2b:18:b3:0b:a2:c8:29:f8:38:db:56:db:62:7f: d3:d8:6e:34:9e:55:55:10:62:e7:1c:e1:a4:34:a7: 6c:a7:85:64:32:53:25:b9:04:66:b3:e5:4f:2d:c7: c1:e4:91:6c:a8:8f:25:2f:d6:68:6d:40:39:70:ea: 57:24:5e:46:52:ec:ca:3b:30:8d:11:6d:74:26:14: d8:60:6d:d8:58:79:fe:ce:e6:6a:88:c1:60:44:e0: f7:ce:b5:43:88:b4:23:7c:0c:a5:76:8e:a4:8c:c6: 15:c3:9b:44:6e:c3:5e:f7:03:d0:66:14:90:b2:cd: 9d:73:03:60:9a:48:11:a7:2e:bd:db:96:ec:c3:20: 2e:69:12:89:5a:87:cb:dc:d9:06:82:08:78:2f:70: 63:e8:c4:d4:7b:ae:02:89:7d:c5:a6:a3:f0:e1:18: 48:83:15:71:8c:42:37:6a:8c:34:fb:c2:60:fc:78: 8f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:93:DB:FE:05:69:14:DF:61:0C:DD:70:8F:2F:2C:79:BF:B3:6E:F4 X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.125.0/24 Signature Algorithm: sha256WithRSAEncryption ac:11:3b:f3:6a:e4:70:50:b2:42:cd:5e:f0:9e:ec:47:c4:fa: bc:63:bb:df:ea:50:f7:27:9a:b2:00:ec:a6:e3:2e:40:d4:81: f0:af:4f:1f:23:d1:0f:53:32:68:90:13:fd:20:93:28:ad:5c: e5:5a:ec:1f:ab:89:11:21:9b:5c:4f:ad:56:3f:3e:b2:0b:3d: 17:cc:b6:67:fb:99:8f:7e:6a:2b:18:5b:1a:0e:54:90:a3:cd: 7f:51:f8:61:64:1c:b8:32:34:ea:95:37:06:d5:33:2e:aa:a6: 6e:0e:f7:9c:f3:b9:eb:d4:20:09:d5:8a:91:b0:04:81:c7:6b: 7a:fc:10:96:c2:ca:bd:3c:d0:b0:68:a4:92:32:e3:39:c1:e6: 37:3c:03:e5:c3:06:d8:eb:ce:59:75:75:1a:f5:67:da:71:c7: 9a:65:91:6c:b0:c7:77:4c:be:03:7a:16:a6:dd:fa:c0:4c:aa: 27:de:c7:6a:d5:a7:05:f9:db:2e:e9:44:96:e7:29:d1:ec:db: 05:38:58:60:07:4d:2d:a9:85:0b:65:0d:97:e2:fe:a5:d9:7c: 4e:c3:e9:59:e7:0b:53:1d:af:ac:9d:aa:b6:b1:6c:00:0c:62: c7:2e:f5:36:b3:8d:48:bb:1c:23:67:75:96:5c:7f:3a:23:df: 07:89:28:f7 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUcj57XhI11mXpR+D23AQH1N8W1p4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwMzI0MDgzMDU0WhcNMjcwMzIzMDgzNTU0 WjAzMTEwLwYDVQQDEyg2ODkzREJGRTA1NjkxNERGNjEwQ0RENzA4RjJGMkM3OUJG QjM2RUY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/1NBG7zGiI6 QP3BP3k1/1hjTNBboJFKSvPSIibRMjVixQx6ZsS8pIEK56oWT55m/EYQZpbDtH94 0eLuKJBjxhPIwm7uPfJMEUyFKxizC6LIKfg421bbYn/T2G40nlVVEGLnHOGkNKds p4VkMlMluQRms+VPLcfB5JFsqI8lL9ZobUA5cOpXJF5GUuzKOzCNEW10JhTYYG3Y WHn+zuZqiMFgROD3zrVDiLQjfAyldo6kjMYVw5tEbsNe9wPQZhSQss2dcwNgmkgR py6925bswyAuaRKJWofL3NkGggh4L3Bj6MTUe64CiX3FpqPw4RhIgxVxjEI3aow0 +8Jg/HiP3QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGiT2/4FaRTfYQzdcI8vLHm/ s270MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMyMzUyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBtfTANBgkqhkiG9w0BAQsF AAOCAQEArBE782rkcFCyQs1e8J7sR8T6vGO73+pQ9yeasgDspuMuQNSB8K9PHyPR D1MyaJAT/SCTKK1c5VrsH6uJESGbXE+tVj8+sgs9F8y2Z/uZj35qKxhbGg5UkKPN f1H4YWQcuDI06pU3BtUzLqqmbg73nPO569QgCdWKkbAEgcdrevwQlsLKvTzQsGik kjLjOcHmNzwD5cMG2OvOWXV1GvVn2nHHmmWRbLDHd0y+A3oWpt36wEyqJ97HatWn BfnbLulElucp0ezbBThYYAdNLamFC2UNl+L+pdl8TsPpWecLUx2vrJ2qtrFsAAxi xy71NrONSLscI2d1llx/OiPfB4ko9w== -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:48 2026 by rpki-client