$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e203133333335.roa File: 3137322e39392e32332e302f32342d3234203d3e203133333335.roa (raw, json) Hash identifier: PyTIdf90zKZ6/1YvuvOCbshSlyfZ3ktUpji40kpPRmw= Subject key identifier: BE:73:73:75:E2:96:78:13:E1:13:9E:6E:0A:7C:6C:A8:88:77:99:AD Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Certificate serial: 78540ED2BAAC30BA601E638A29F50CBC462B6C29 Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e203133333335.roa Signing time: Wed 10 Sep 2025 09:29:45 +0000 ROA not before: Wed 10 Sep 2025 09:24:45 +0000 ROA not after: Wed 09 Sep 2026 09:29:45 +0000 asID: 13335 IP address blocks: 172.99.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:54:0e:d2:ba:ac:30:ba:60:1e:63:8a:29:f5:0c:bc:46:2b:6c:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Validity Not Before: Sep 10 09:24:45 2025 GMT Not After : Sep 9 09:29:45 2026 GMT Subject: CN=BE737375E2967813E1139E6E0A7C6CA8887799AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:be:48:aa:ee:21:8d:f2:bd:4d:2e:e4:53:46: 63:09:37:a3:ab:ff:a2:58:9c:49:ce:96:d8:4f:d3: 6a:48:30:0d:52:b4:cb:61:2f:95:71:9a:c4:55:e3: c1:db:85:c9:f3:a4:42:20:d8:af:f7:65:34:a6:3e: 0f:66:bb:f4:19:db:06:a7:55:2a:98:05:22:e7:76: e7:e7:68:6b:6d:04:25:0e:92:ad:6b:37:f7:3c:56: 34:11:d4:6e:31:de:66:8f:14:e4:64:5a:ea:cc:86: 75:dd:37:8b:cc:fc:5e:eb:2b:bb:b4:35:f4:99:d2: 39:e9:3f:ae:19:44:8a:eb:e0:35:b8:98:38:f8:6c: 77:69:dd:52:a2:6b:85:a1:27:3f:6c:b7:c8:0d:90: 34:74:8d:3d:39:d7:50:cc:96:e3:d0:21:4b:fa:a2: cf:99:aa:d7:cf:b1:b1:79:5c:55:8e:6e:46:9e:6b: 71:f7:ef:94:80:ed:c9:00:08:4b:d5:55:5d:62:72: 4d:ce:40:df:61:0c:89:3e:f0:13:b7:1d:60:7d:2c: ee:5c:86:f9:23:0f:7c:f6:b1:7d:90:d6:45:85:0f: 9f:b9:2f:14:18:53:36:32:7e:47:cd:fc:de:99:11: 49:77:da:d6:f6:e8:65:e0:84:53:69:96:61:ef:fc: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:73:73:75:E2:96:78:13:E1:13:9E:6E:0A:7C:6C:A8:88:77:99:AD X509v3 Authority Key Identifier: keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e203133333335.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.99.23.0/24 Signature Algorithm: sha256WithRSAEncryption 63:98:75:46:e8:14:84:af:d1:ee:db:3e:42:d5:55:6d:b6:bb: 82:42:20:c8:f3:72:7d:da:ce:c3:0e:70:a4:1a:4b:62:64:b5: 55:a8:14:ce:51:27:ad:18:8a:4b:2d:21:9a:50:68:91:83:6b: 99:46:2e:e7:78:2e:42:d5:ac:e8:ff:70:3e:5b:77:10:a8:09: b1:af:90:2d:12:d1:a3:76:38:5a:f3:3c:a2:40:c0:82:56:d2: 84:08:16:96:6d:1f:4b:0b:ad:54:ac:32:27:50:db:90:36:35: 25:c1:08:3c:67:24:5a:0b:b5:be:16:c9:05:f1:80:f7:81:59: 2d:2d:83:5e:f3:74:39:6b:72:13:ad:0c:9a:38:6a:4f:87:17: cb:74:98:2f:2e:36:e3:60:27:7c:36:ad:82:ff:66:55:a7:33: e1:89:92:c0:06:98:81:b3:0d:13:cf:26:f4:0d:0b:1d:a1:cd: 69:fb:45:69:3b:8f:e2:90:4f:23:3a:d0:7f:00:40:30:06:24: 03:ad:18:58:e8:c5:23:47:f0:6e:d1:d8:01:2f:e5:b0:6f:09: 2d:65:36:da:3b:3b:e8:d7:7c:98:7e:dd:22:33:75:3f:8b:47: 5a:da:49:63:ab:a3:34:27:c9:ce:63:52:ae:97:4b:69:a7:c8: 62:fb:4d:84 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUeFQO0rqsMLpgHmOKKfUMvEYrbCkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3 MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjUwOTEwMDkyNDQ1WhcNMjYwOTA5MDkyOTQ1 WjAzMTEwLwYDVQQDEyhCRTczNzM3NUUyOTY3ODEzRTExMzlFNkUwQTdDNkNBODg4 Nzc5OUFEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9L5Iqu4hjfK9 TS7kU0ZjCTejq/+iWJxJzpbYT9NqSDANUrTLYS+VcZrEVePB24XJ86RCINiv92U0 pj4PZrv0GdsGp1UqmAUi53bn52hrbQQlDpKtazf3PFY0EdRuMd5mjxTkZFrqzIZ1 3TeLzPxe6yu7tDX0mdI56T+uGUSK6+A1uJg4+Gx3ad1SomuFoSc/bLfIDZA0dI09 OddQzJbj0CFL+qLPmarXz7GxeVxVjm5Gnmtx9++UgO3JAAhL1VVdYnJNzkDfYQyJ PvATtx1gfSzuXIb5Iw989rF9kNZFhQ+fuS8UGFM2Mn5HzfzemRFJd9rW9uhl4IRT aZZh7/yefQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFL5zc3XilngT4ROebgp8bKiI d5mtMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4 MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMzJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMxMzMzMzMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYxcwDQYJKoZIhvcNAQELBQAD ggEBAGOYdUboFISv0e7bPkLVVW22u4JCIMjzcn3azsMOcKQaS2JktVWoFM5RJ60Y ikstIZpQaJGDa5lGLud4LkLVrOj/cD5bdxCoCbGvkC0S0aN2OFrzPKJAwIJW0oQI FpZtH0sLrVSsMidQ25A2NSXBCDxnJFoLtb4WyQXxgPeBWS0tg17zdDlrchOtDJo4 ak+HF8t0mC8uNuNgJ3w2rYL/ZlWnM+GJksAGmIGzDRPPJvQNCx2hzWn7RWk7j+KQ TyM60H8AQDAGJAOtGFjoxSNH8G7R2AEv5bBvCS1lNto7O+jXfJh+3SIzdT+LR1ra SWOrozQnyc5jUq6XS2mnyGL7TYQ= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:32 2025 by rpki-client