$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e20313531333733.roa File: 3139342e33332e3134392e302f32342d3234203d3e20313531333733.roa (raw, json) Hash identifier: qitOZksJLo4btO4z1kxBNVrDMh2AOgMUcPSws1mxNYg= Subject key identifier: D0:12:39:8F:E4:F2:9A:3A:DC:0B:F7:68:2D:46:94:E4:AC:1F:52:1B Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 1272A27056B3166B7531CD0ECBAE6615AE5E2868 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e20313531333733.roa Signing time: Sat 21 Jun 2025 05:16:53 +0000 ROA not before: Sat 21 Jun 2025 05:11:53 +0000 ROA not after: Sat 20 Jun 2026 05:16:53 +0000 asID: 151373 IP address blocks: 194.33.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 19:15:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:72:a2:70:56:b3:16:6b:75:31:cd:0e:cb:ae:66:15:ae:5e:28:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Jun 21 05:11:53 2025 GMT Not After : Jun 20 05:16:53 2026 GMT Subject: CN=D012398FE4F29A3ADC0BF7682D4694E4AC1F521B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ca:f8:74:f0:37:f8:cc:bd:b2:fe:de:eb:a9: 37:88:93:e3:ca:27:b5:0f:7a:24:fd:94:6a:af:98: 77:86:78:72:c0:6c:32:5a:ad:a9:af:95:cd:d0:b8: 19:c3:3b:b0:89:b3:92:e7:07:f0:f1:25:98:3b:df: 23:e6:51:f1:3c:31:a6:dc:4e:82:61:5d:0a:d4:d3: 02:e2:25:1a:3f:3c:08:e0:0e:1f:35:04:7d:34:2b: 52:3a:12:12:25:d9:b1:66:78:5a:06:2f:5e:a9:35: 91:9a:db:75:ea:42:96:f4:cf:4b:7e:4f:18:69:d2: 4a:ef:f6:b2:d9:0a:1a:ab:b0:ac:ae:b9:0c:b4:e7: 1d:60:8b:40:09:ba:0b:2a:aa:1a:d5:ed:d5:f0:6b: 7f:e9:1e:35:9e:0c:e9:49:33:65:8d:3f:68:91:27: 9d:68:2e:6e:f1:fd:27:a6:81:82:49:21:c0:30:f2: cc:e7:76:e2:80:3a:e2:f3:90:09:bc:99:d9:a5:0d: f8:a3:a6:53:44:97:82:4a:5a:b5:0d:92:87:12:56: 23:87:7a:88:91:94:06:83:ee:64:6a:1a:e1:c7:b9: 24:03:c5:f3:9e:8d:95:b2:eb:14:de:dd:b7:1f:ab: ac:01:20:64:f8:48:2e:87:cb:cc:c5:6e:4a:15:36: ea:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:39:8F:E4:F2:9A:3A:DC:0B:F7:68:2D:46:94:E4:AC:1F:52:1B X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3134392e302f32342d3234203d3e20313531333733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.33.149.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:64:ba:3e:4c:af:4c:f2:a0:63:24:8e:2b:15:1c:7c:08:03: 98:12:59:bb:c2:d0:b1:f9:54:7a:f1:cc:6c:32:c1:82:4f:c1: 3c:21:00:ce:ea:dc:cc:a3:00:e6:c4:c4:7b:6f:09:63:ee:f5: 53:df:55:91:18:00:c7:68:51:c4:70:e9:53:75:74:3d:2b:de: d9:3f:e6:70:be:6a:07:2e:ec:17:d9:ea:b1:16:85:23:97:81: c0:f9:77:bf:af:be:68:c0:17:7f:7c:8d:31:2c:64:31:08:01: 55:93:e1:fa:4a:44:13:59:39:29:3f:78:9b:04:3c:a5:c2:e1: 3d:55:92:ad:ae:25:f2:ec:b7:6d:0f:66:fa:c5:8a:5a:08:7b: 13:55:0e:f7:e8:4d:b0:fd:2c:1c:80:51:85:b3:4b:77:86:60: ad:7a:31:85:6f:c6:25:32:1d:e3:4a:ee:02:f1:f6:0e:e2:47: 27:5d:7f:69:c9:4d:62:8a:d9:89:97:d2:39:c9:87:94:a2:8c: c2:af:b2:3f:86:b1:3c:5c:63:08:0e:7d:bb:3a:fc:7d:d6:43: 89:22:20:5b:c9:9a:07:f0:dd:cb:6e:2e:7c:9e:a0:2e:d9:ef: 2b:19:4f:c4:4e:bc:b1:a5:a5:f1:cf:21:13:bf:18:51:f1:90: b7:e0:7a:e1 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUEnKicFazFmt1Mc0Oy65mFa5eKGgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNjIxMDUxMTUzWhcNMjYwNjIwMDUxNjUz WjAzMTEwLwYDVQQDEyhEMDEyMzk4RkU0RjI5QTNBREMwQkY3NjgyRDQ2OTRFNEFD MUY1MjFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8r4dPA3+My9 sv7e66k3iJPjyie1D3ok/ZRqr5h3hnhywGwyWq2pr5XN0LgZwzuwibOS5wfw8SWY O98j5lHxPDGm3E6CYV0K1NMC4iUaPzwI4A4fNQR9NCtSOhISJdmxZnhaBi9eqTWR mtt16kKW9M9Lfk8YadJK7/ay2Qoaq7CsrrkMtOcdYItACboLKqoa1e3V8Gt/6R41 ngzpSTNljT9okSedaC5u8f0npoGCSSHAMPLM53bigDri85AJvJnZpQ34o6ZTRJeC Slq1DZKHElYjh3qIkZQGg+5kahrhx7kkA8Xzno2VsusU3t23H6usASBk+Eguh8vM xW5KFTbqqwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNASOY/k8po63Av3aC1GlOSs H1IbMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzNDJlMzMzMzJlMzEzNDM5MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzNTMxMzMzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiGVMA0GCSqGSIb3DQEB CwUAA4IBAQBfZLo+TK9M8qBjJI4rFRx8CAOYElm7wtCx+VR68cxsMsGCT8E8IQDO 6tzMowDmxMR7bwlj7vVT31WRGADHaFHEcOlTdXQ9K97ZP+ZwvmoHLuwX2eqxFoUj l4HA+Xe/r75owBd/fI0xLGQxCAFVk+H6SkQTWTkpP3ibBDylwuE9VZKtriXy7Ldt D2b6xYpaCHsTVQ736E2w/SwcgFGFs0t3hmCtejGFb8YlMh3jSu4C8fYO4kcnXX9p yU1iitmJl9I5yYeUoozCr7I/hrE8XGMIDn27Ovx91kOJIiBbyZoH8N3Lbi58nqAu 2e8rGU/ETryxpaXxzyETvxhR8ZC34Hrh -----END CERTIFICATE-----Generated at Tue Jul 1 06:14:24 2025 by rpki-client