$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e2039333034.roa File: 34352e34322e34332e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: nrKLSBDkBmItkOk8nvSgPI7XQUQrl+SluKw9/QJbNwA= Subject key identifier: 20:D7:09:16:7D:24:CC:C3:00:48:98:90:79:EE:E6:90:9E:E4:78:F7 Certificate issuer: /CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc Certificate serial: 3FE51D548C4BCEE6610A941A1A494BEDD8B6B499 Authority key identifier: 48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e2039333034.roa Signing time: Mon 18 Aug 2025 16:06:59 +0000 ROA not before: Mon 18 Aug 2025 16:01:59 +0000 ROA not after: Mon 17 Aug 2026 16:06:59 +0000 asID: 9304 IP address blocks: 45.42.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/8e1b504d-a180-4591-a13c-7d211ad354f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:38:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:e5:1d:54:8c:4b:ce:e6:61:0a:94:1a:1a:49:4b:ed:d8:b6:b4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc Validity Not Before: Aug 18 16:01:59 2025 GMT Not After : Aug 17 16:06:59 2026 GMT Subject: CN=20D709167D24CCC30048989079EEE6909EE478F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f3:6a:ba:ce:23:2e:d9:70:25:c0:1c:fd:04: 8d:b5:2f:de:a5:68:6d:aa:94:47:5e:75:ff:6f:43: 95:d2:2d:c0:15:0d:78:d8:49:ba:4a:34:d1:14:e6: 5d:c6:ed:0c:af:f2:5f:40:00:a6:59:e7:32:03:f0: 48:82:e3:81:7e:26:6e:96:3e:c1:96:ae:1a:f7:49: 0d:05:8b:78:d8:39:cd:37:bf:50:50:d5:d6:f1:4e: 5d:42:f4:7c:5a:53:f5:40:e0:2d:d8:af:a0:d7:a6: d3:83:06:61:54:db:29:b4:a6:f9:17:ef:03:e2:9f: 86:e7:14:de:48:85:bf:2d:54:f4:3f:2c:9a:1b:1c: 34:63:c6:2b:a3:8e:10:2e:40:2c:0c:e3:f7:ae:39: 1b:69:61:5e:fb:67:79:ca:ec:c2:31:59:44:bc:2d: 20:b5:82:f3:5e:2e:7e:25:f7:cd:b0:c2:d3:80:a3: 02:58:20:2d:e7:e3:a8:3d:9c:b4:1c:fc:4d:6d:4c: 8a:9c:89:a9:c8:22:7a:65:37:9c:8b:76:34:51:0f: 5c:49:3c:25:ea:a0:a7:b8:ba:a3:4a:64:64:bf:95: ac:80:2a:e7:6f:c8:9f:09:f7:3a:12:42:79:64:8e: 44:45:4b:f4:40:b3:f7:51:a5:1f:7a:22:d9:8d:24: e9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:09:16:7D:24:CC:C3:00:48:98:90:79:EE:E6:90:9E:E4:78:F7 X509v3 Authority Key Identifier: keyid:48:7A:6F:2C:10:BA:17:48:1F:41:11:3A:8B:9D:32:CF:8F:C6:17:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/487A6F2C10BA17481F41113A8B9D32CF8FC6170F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8e1b504d-a180-4591-a13c-7d211ad354f2/b3927bb867d747659e5bdf263eb07917d64643d460aaedd8cc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8588029e0185cdc8710b42ff/0/34352e34322e34332e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.42.43.0/24 Signature Algorithm: sha256WithRSAEncryption 24:cc:4f:73:dc:ce:43:9a:a4:ff:28:9f:66:b4:cb:51:48:69: af:61:e5:10:1e:e8:9f:d0:b1:82:0a:e7:b8:c2:0a:7d:2f:5b: ba:22:a2:d8:f0:21:0d:f2:75:c6:df:f1:24:62:38:00:9c:96: 36:1b:61:49:ef:8f:a9:05:eb:6c:d3:92:99:a3:0a:bb:cd:0d: bf:ce:c2:23:05:a0:b8:95:03:64:61:34:1b:bb:16:44:f0:c9: dc:c4:16:f4:a8:f2:2b:5c:d4:93:bb:a5:27:ef:3c:f6:34:82: 3d:3e:35:15:1f:b9:20:65:cb:16:d4:64:6b:71:3e:b9:c9:9c: df:d1:01:fa:7d:09:1f:6f:a3:00:f2:fd:4a:80:2f:ec:c7:86: ea:88:06:79:d7:0b:e6:49:eb:f2:73:df:0a:86:f9:4f:7b:13: 6c:84:76:25:c0:bc:72:69:de:9b:28:81:62:a2:37:56:d1:99: 6e:37:80:93:85:0a:73:10:a3:13:77:9b:c5:4a:4f:cd:82:69: 95:01:4f:be:7a:76:3b:1b:31:c3:dc:4e:96:69:d4:64:fd:ac: e0:cf:18:d7:02:7a:9a:c3:20:57:09:57:1a:9e:f4:90:66:4d: af:c2:a9:28:23:bc:67:ce:66:26:94:5c:7c:44:6a:70:83:93: cb:53:69:5f -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUP+UdVIxLzuZhCpQaGklL7di2tJkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjM5MjdiYjg2N2Q3NDc2NTllNWJkZjI2M2ViMDc5MTdk NjQ2NDNkNDYwYWFlZGQ4Y2MwHhcNMjUwODE4MTYwMTU5WhcNMjYwODE3MTYwNjU5 WjAzMTEwLwYDVQQDEygyMEQ3MDkxNjdEMjRDQ0MzMDA0ODk4OTA3OUVFRTY5MDlF RTQ3OEY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPNqus4jLtlw JcAc/QSNtS/epWhtqpRHXnX/b0OV0i3AFQ142Em6SjTRFOZdxu0Mr/JfQACmWecy A/BIguOBfiZulj7Blq4a90kNBYt42DnNN79QUNXW8U5dQvR8WlP1QOAt2K+g16bT gwZhVNsptKb5F+8D4p+G5xTeSIW/LVT0PyyaGxw0Y8Yro44QLkAsDOP3rjkbaWFe +2d5yuzCMVlEvC0gtYLzXi5+JffNsMLTgKMCWCAt5+OoPZy0HPxNbUyKnImpyCJ6 ZTeci3Y0UQ9cSTwl6qCnuLqjSmRkv5WsgCrnb8ifCfc6EkJ5ZI5ERUv0QLP3UaUf eiLZjSTpDQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCDXCRZ9JMzDAEiYkHnu5pCe 5Hj3MB8GA1UdIwQYMBaAFEh6bywQuhdIH0EROoudMs+PxhcPMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2RjODcxMGI0MmZmLzAv NDg3QTZGMkMxMEJBMTc0ODFGNDExMTNBOEI5RDMyQ0Y4RkM2MTcwRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4LzhlMWI1MDRkLWExODAtNDU5MS1hMTNjLTdkMjExYWQzNTRmMi9iMzky N2JiODY3ZDc0NzY1OWU1YmRmMjYzZWIwNzkxN2Q2NDY0M2Q0NjBhYWVkZDhjYy5j ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODU4ODAyOWUwMTg1Y2Rj ODcxMGI0MmZmLzAvMzQzNTJlMzQzMjJlMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDM5MzMzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSorMA0GCSqGSIb3DQEBCwUAA4IBAQAk zE9z3M5DmqT/KJ9mtMtRSGmvYeUQHuif0LGCCue4wgp9L1u6IqLY8CEN8nXG3/Ek YjgAnJY2G2FJ74+pBets05KZowq7zQ2/zsIjBaC4lQNkYTQbuxZE8MncxBb0qPIr XNSTu6Un7zz2NII9PjUVH7kgZcsW1GRrcT65yZzf0QH6fQkfb6MA8v1KgC/sx4bq iAZ51wvmSevyc98KhvlPexNshHYlwLxyad6bKIFiojdW0ZluN4CThQpzEKMTd5vF Sk/NgmmVAU++enY7GzHD3E6WadRk/azgzxjXAnqawyBXCVcanvSQZk2vwqkoI7xn zmYmlFx8RGpwg5PLU2lf -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:35 2025 by rpki-client