$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e203139333138.roa File: 3137322e39392e32312e302f32342d3234203d3e203139333138.roa (raw, json) Hash identifier: lP7xk6iCq+Mygzn0WmTxhoRUL5+vfQCostYfw6N1fmw= Subject key identifier: A0:D4:3D:3B:AB:27:86:5D:9A:AD:B6:5E:96:51:51:50:6B:10:3A:C3 Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Certificate serial: 0E4A1A2367F4D5D948E438AE1F20D696E90E2D5E Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e203139333138.roa Signing time: Tue 19 Aug 2025 11:13:43 +0000 ROA not before: Tue 19 Aug 2025 11:08:43 +0000 ROA not after: Tue 18 Aug 2026 11:13:43 +0000 asID: 19318 IP address blocks: 172.99.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 22:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4a:1a:23:67:f4:d5:d9:48:e4:38:ae:1f:20:d6:96:e9:0e:2d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Validity Not Before: Aug 19 11:08:43 2025 GMT Not After : Aug 18 11:13:43 2026 GMT Subject: CN=A0D43D3BAB27865D9AADB65E965151506B103AC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:db:55:1d:fb:f9:8b:25:e7:29:de:3f:26:24: 66:a0:94:59:48:01:0e:89:92:6e:0f:1c:55:4e:71: f4:c2:ee:67:91:56:bf:49:8b:c8:cb:86:fd:ff:96: 23:1b:e3:52:92:86:08:37:8e:49:15:71:e0:22:47: ad:ca:2b:df:72:b4:8b:fb:f0:28:7b:bb:07:91:6f: 58:a1:5d:40:ed:2d:4d:89:d5:40:f7:51:fd:ff:d3: 56:02:07:ee:a7:c5:b3:64:c2:cc:18:bb:d0:b2:b7: c1:5d:b4:d9:35:25:8a:d4:26:98:46:b1:a9:d3:78: e7:70:32:8e:f4:df:c0:d4:ee:4e:c1:38:ca:ed:b9: 03:80:4a:05:bb:c8:c0:6f:2d:99:00:20:a0:0f:81: e3:57:f0:e1:43:01:b1:10:04:35:bd:56:ad:fd:24: 77:1b:86:9b:33:09:17:86:eb:ff:c1:4d:24:15:52: f3:99:11:09:f4:70:83:45:3d:1c:22:24:f9:8f:69: 6c:bd:38:14:be:50:5b:8d:4d:e1:d2:c6:0c:10:78: 6b:b8:e8:a7:85:25:f0:f3:fc:e7:10:09:70:f3:11: e2:7c:a0:72:2c:a1:f7:ff:38:ee:5d:82:1d:06:3a: eb:60:45:0a:4e:f4:be:98:70:7b:b8:5d:41:91:4d: 89:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D4:3D:3B:AB:27:86:5D:9A:AD:B6:5E:96:51:51:50:6B:10:3A:C3 X509v3 Authority Key Identifier: keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e203139333138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.99.21.0/24 Signature Algorithm: sha256WithRSAEncryption 23:ca:79:b4:e4:24:c5:63:b4:e3:8d:43:0f:31:15:24:09:14: 01:67:24:e2:9f:0c:d2:0f:5c:e6:66:93:58:17:96:ee:6a:f8: 92:11:13:41:be:dc:66:14:dd:04:2b:dc:71:8c:18:26:c7:e7: ba:0d:1d:fa:5e:e1:db:6d:7d:79:7c:7c:c2:5e:53:6f:5a:f8: fb:f9:00:4e:37:3d:ef:20:4f:b6:99:ab:33:27:81:f0:6a:74: 3f:ed:c2:53:29:dd:11:f2:96:c2:45:c1:c8:69:cf:b0:8a:54: 04:a5:b5:c0:ab:c0:52:a8:39:2b:ec:cb:3a:24:87:ec:2f:7f: df:1c:21:8a:6a:f2:45:bd:42:e4:31:ca:7b:25:24:a8:34:d6: 6f:05:33:a0:ac:cf:08:ba:12:55:52:e2:de:b2:f4:b5:60:d1: d3:ce:d5:3f:d9:d7:51:4c:f4:a6:53:d2:06:5f:9d:ad:04:1e: b2:42:b5:c5:3b:33:13:09:9f:48:bc:4a:44:03:b1:d1:f6:d0: e1:d2:11:38:37:68:a0:72:d4:a4:ab:bc:b4:88:c3:f2:80:1f: 83:ed:30:5f:fd:32:bb:b9:18:50:9b:7c:62:3d:2f:ab:d4:b3: 8b:d9:98:13:30:53:df:cf:74:80:a0:8d:6a:07:44:47:3e:a1: 63:18:2e:8d -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUDkoaI2f01dlI5DiuHyDWlukOLV4wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3 MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjUwODE5MTEwODQzWhcNMjYwODE4MTExMzQz WjAzMTEwLwYDVQQDEyhBMEQ0M0QzQkFCMjc4NjVEOUFBREI2NUU5NjUxNTE1MDZC MTAzQUMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dtVHfv5iyXn Kd4/JiRmoJRZSAEOiZJuDxxVTnH0wu5nkVa/SYvIy4b9/5YjG+NSkoYIN45JFXHg IketyivfcrSL+/Aoe7sHkW9YoV1A7S1NidVA91H9/9NWAgfup8WzZMLMGLvQsrfB XbTZNSWK1CaYRrGp03jncDKO9N/A1O5OwTjK7bkDgEoFu8jAby2ZACCgD4HjV/Dh QwGxEAQ1vVat/SR3G4abMwkXhuv/wU0kFVLzmREJ9HCDRT0cIiT5j2lsvTgUvlBb jU3h0sYMEHhruOinhSXw8/znEAlw8xHifKByLKH3/zjuXYIdBjrrYEUKTvS+mHB7 uF1BkU2JQwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKDUPTurJ4Zdmq22XpZRUVBr EDrDMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4 MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMxMzkzMzMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYxUwDQYJKoZIhvcNAQELBQAD ggEBACPKebTkJMVjtOONQw8xFSQJFAFnJOKfDNIPXOZmk1gXlu5q+JIRE0G+3GYU 3QQr3HGMGCbH57oNHfpe4dttfXl8fMJeU29a+Pv5AE43Pe8gT7aZqzMngfBqdD/t wlMp3RHylsJFwchpz7CKVASltcCrwFKoOSvsyzokh+wvf98cIYpq8kW9QuQxynsl JKg01m8FM6Cszwi6ElVS4t6y9LVg0dPO1T/Z11FM9KZT0gZfna0EHrJCtcU7MxMJ n0i8SkQDsdH20OHSETg3aKBy1KSrvLSIw/KAH4PtMF/9Mru5GFCbfGI9L6vUs4vZ mBMwU9/PdICgjWoHREc+oWMYLo0= -----END CERTIFICATE-----Generated at Sat Aug 23 22:08:24 2025 by rpki-client