$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa File: 3137322e39392e32332e302f32342d3234203d3e20333938393632.roa (raw, json) Hash identifier: ltO/LQElPHZdXAtMEh3eSQLkC3Xt5HRkgrx41umn8Os= Subject key identifier: 8F:46:42:B3:28:04:C9:DC:56:E2:E4:86:EC:F9:00:89:97:94:09:19 Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Certificate serial: 19C10E7D27314EEB8BC31C408640CAB2D5FB859A Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa Signing time: Wed 10 Sep 2025 09:29:45 +0000 ROA not before: Wed 10 Sep 2025 09:24:45 +0000 ROA not after: Wed 09 Sep 2026 09:29:45 +0000 asID: 398962 IP address blocks: 172.99.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:c1:0e:7d:27:31:4e:eb:8b:c3:1c:40:86:40:ca:b2:d5:fb:85:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe Validity Not Before: Sep 10 09:24:45 2025 GMT Not After : Sep 9 09:29:45 2026 GMT Subject: CN=8F4642B32804C9DC56E2E486ECF9008997940919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:e6:0c:83:11:39:82:fa:42:b1:1b:3b:4f: 46:7b:73:47:77:9d:ed:40:73:45:db:59:30:df:ee: d9:36:4a:d2:cf:d0:f3:bd:03:d3:9b:84:a0:1b:aa: 8c:0e:02:ce:04:28:c2:46:79:a5:c0:6a:41:e0:93: a5:2d:d7:49:2c:a6:4b:a4:b8:db:20:aa:fa:24:d6: bd:17:4b:fb:09:27:0c:f3:76:06:39:15:b6:0c:93: 7d:c9:06:9a:de:6f:3f:36:b4:85:00:19:c9:85:3c: b9:67:04:14:36:99:58:2f:d9:4c:96:16:44:d2:ad: 5a:06:a4:99:5d:ce:9f:45:2b:65:0e:6e:22:fb:54: c8:44:85:aa:b0:95:48:4e:9a:f4:ee:f0:b8:ad:2a: 0a:43:2f:b4:a4:7f:47:5c:05:64:cb:1c:8c:14:8e: 08:1d:1f:56:80:a4:a6:25:d6:50:9d:39:11:4c:5a: 07:2b:c9:99:6f:7d:3b:79:76:88:df:4c:eb:5a:8a: 01:b3:3d:4f:6c:0e:cb:84:c6:5a:87:e8:36:5a:de: 51:57:67:f4:b4:e4:e0:00:ba:36:69:40:2f:f5:64: c3:6f:98:32:3c:52:d0:c2:6a:d7:33:98:47:e2:2f: 86:fd:48:e5:7b:07:8f:f4:ba:8e:83:b6:80:35:8b: 9e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:46:42:B3:28:04:C9:DC:56:E2:E4:86:EC:F9:00:89:97:94:09:19 X509v3 Authority Key Identifier: keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32332e302f32342d3234203d3e20333938393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.99.23.0/24 Signature Algorithm: sha256WithRSAEncryption b4:a9:70:48:14:58:0f:2f:d1:c3:58:e5:a9:41:d2:fd:c8:5b: fc:d7:42:ae:90:86:90:3e:28:e3:e5:16:37:51:57:4d:8d:2e: cf:ea:4d:59:f2:7e:91:35:b7:db:6d:f9:05:ee:1e:4e:81:b3: 62:18:10:e1:99:a6:69:d6:12:4c:e7:a1:d7:c5:59:21:cc:15: 55:60:ec:34:4f:25:26:05:37:dd:02:ca:09:1c:fa:78:db:27: cd:bd:94:79:b3:a3:a7:6d:de:9d:49:02:9f:63:6c:a3:bc:8a: cc:5f:03:f3:ed:65:09:f5:6b:dd:d0:eb:27:d4:c5:67:3f:73: a6:23:37:bc:17:a1:4f:46:b9:57:bd:33:8e:ad:c4:8a:c1:59: 91:51:b0:94:60:e0:ec:d2:38:02:44:74:73:9f:ac:08:79:f2: 5c:b1:ca:ff:c1:52:a2:de:bf:e6:8d:94:21:d9:0d:fa:7a:3d: ee:5d:42:c6:55:12:dc:d5:e8:46:3d:b9:be:d7:74:5f:f3:6c: 18:aa:a4:5c:70:79:9e:ae:1c:bb:d6:6d:43:47:f1:26:ca:f2: 89:f3:ea:87:71:00:7a:de:f9:59:06:ef:d2:13:28:62:6f:66: 86:34:7f:df:f4:bf:ec:c9:f1:dd:18:d0:76:64:84:74:85:a4: 7f:18:82:34 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUGcEOfScxTuuLwxxAhkDKstX7hZowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3 MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjUwOTEwMDkyNDQ1WhcNMjYwOTA5MDkyOTQ1 WjAzMTEwLwYDVQQDEyg4RjQ2NDJCMzI4MDRDOURDNTZFMkU0ODZFQ0Y5MDA4OTk3 OTQwOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPvmDIMROYL6 QrEbO09Ge3NHd53tQHNF21kw3+7ZNkrSz9DzvQPTm4SgG6qMDgLOBCjCRnmlwGpB 4JOlLddJLKZLpLjbIKr6JNa9F0v7CScM83YGORW2DJN9yQaa3m8/NrSFABnJhTy5 ZwQUNplYL9lMlhZE0q1aBqSZXc6fRStlDm4i+1TIRIWqsJVITpr07vC4rSoKQy+0 pH9HXAVkyxyMFI4IHR9WgKSmJdZQnTkRTFoHK8mZb307eXaI30zrWooBsz1PbA7L hMZah+g2Wt5RV2f0tOTgALo2aUAv9WTDb5gyPFLQwmrXM5hH4i+G/UjleweP9LqO g7aANYuesQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFI9GQrMoBMncVuLkhuz5AImX lAkZMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4 MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4 MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMzJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDMzMzkzODM5MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxjFzANBgkqhkiG9w0BAQsF AAOCAQEAtKlwSBRYDy/Rw1jlqUHS/chb/NdCrpCGkD4o4+UWN1FXTY0uz+pNWfJ+ kTW32235Be4eToGzYhgQ4ZmmadYSTOeh18VZIcwVVWDsNE8lJgU33QLKCRz6eNsn zb2UebOjp23enUkCn2Nso7yKzF8D8+1lCfVr3dDrJ9TFZz9zpiM3vBehT0a5V70z jq3EisFZkVGwlGDg7NI4AkR0c5+sCHnyXLHK/8FSot6/5o2UIdkN+no97l1CxlUS 3NXoRj25vtd0X/NsGKqkXHB5nq4cu9ZtQ0fxJsryifPqh3EAet75WQbv0hMoYm9m hjR/3/S/7Mnx3RjQdmSEdIWkfxiCNA== -----END CERTIFICATE-----Generated at Mon Oct 20 08:13:15 2025 by rpki-client