$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa File: 3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa (raw, json) Hash identifier: 8O3RA3X5Ygezrv6QqwpM9g2M85QQFusQzb0GTzBRLZ8= Subject key identifier: 3D:05:02:70:23:0B:3A:0A:A1:B1:19:62:9C:14:18:6F:11:F4:D4:35 Certificate issuer: /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0 Certificate serial: 46B0F610735468CA871CAEBC33D2E348770D39AD Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa Signing time: Tue 22 Apr 2025 13:28:30 +0000 ROA not before: Tue 22 Apr 2025 13:23:30 +0000 ROA not after: Tue 21 Apr 2026 13:28:30 +0000 asID: 53356 IP address blocks: 199.188.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 07:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b0:f6:10:73:54:68:ca:87:1c:ae:bc:33:d2:e3:48:77:0d:39:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0 Validity Not Before: Apr 22 13:23:30 2025 GMT Not After : Apr 21 13:28:30 2026 GMT Subject: CN=3D050270230B3A0AA1B119629C14186F11F4D435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:10:3d:e1:f8:e8:b0:3f:21:97:56:cc:01:c4: 87:d5:d9:99:fe:13:c4:fb:97:60:bc:ec:a8:91:84: ce:7f:48:f2:4b:5f:e5:ab:96:d2:b4:e1:bd:7b:92: 29:ff:3f:6d:a3:2e:cb:85:0d:55:b3:30:a4:5d:13: 11:f7:ed:eb:80:1a:59:76:2e:8b:5f:71:61:32:82: 66:08:89:23:9e:49:71:7f:31:9c:d6:a5:60:c6:88: 7a:05:d3:0e:df:17:ed:97:7c:a3:33:74:ab:d3:06: ed:d2:d1:13:75:88:2d:1f:9f:c2:ae:1e:85:da:af: a0:2e:8b:c2:c8:77:d1:63:f6:d9:76:8a:3b:12:53: 96:52:3b:b6:30:c7:6f:cf:b0:02:25:3b:7e:bc:f0: 51:81:7f:c3:c4:d4:8f:71:07:67:33:a8:7b:d2:58: 39:07:4c:aa:7a:a1:fa:af:24:33:cc:b9:4b:99:f9: 59:5b:6d:39:10:56:4f:ff:2a:27:4b:f7:56:39:68: 89:bc:45:ed:a4:43:72:2d:68:59:4e:99:0c:d4:28: a1:2b:f7:29:3e:da:69:8b:90:66:9e:fa:df:4b:3a: c2:08:07:c5:4e:2e:74:73:55:32:49:16:74:d5:c4: 02:f4:05:a1:2d:28:46:11:8e:a0:a1:15:bb:b4:1a: d2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:05:02:70:23:0B:3A:0A:A1:B1:19:62:9C:14:18:6F:11:F4:D4:35 X509v3 Authority Key Identifier: keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 199.188.236.0/24 Signature Algorithm: sha256WithRSAEncryption 94:6d:eb:54:32:7b:77:1c:48:9f:6e:42:72:49:11:10:f7:4f: bd:18:2a:07:40:97:f3:df:a0:76:d5:be:40:ef:e3:d3:e1:6a: c8:fd:af:b2:cc:d1:1d:1b:08:5d:c5:d2:74:e9:4b:0d:33:79: ef:a2:28:18:2e:90:35:54:63:ed:04:8a:b7:d3:37:2c:7b:5f: 1d:39:c9:bb:c0:3a:45:9c:a7:80:13:49:68:77:9f:61:43:b5: 6c:20:19:f5:03:31:fa:83:a1:90:59:4e:7c:d6:0e:a3:01:cc: d6:9b:1d:ab:3b:af:b1:fd:7e:b1:c4:d4:69:ca:c1:c4:16:db: 5b:7e:29:67:2d:15:84:69:1a:af:06:f1:bd:58:69:dd:b0:86: 36:c3:74:01:d1:18:15:d4:14:cd:f0:63:63:9f:c2:32:09:1d: c6:4e:25:cd:5d:18:73:11:9b:e4:46:7a:b3:85:e2:bc:64:2a: 23:aa:6f:57:92:e6:20:46:74:3b:bb:57:56:fc:b3:3b:31:f5: d2:02:8c:fe:dd:12:52:20:18:46:e9:d9:b1:eb:2c:d0:c0:ef: c2:da:22:92:37:b1:66:9b:c4:67:c3:92:5d:ab:06:8d:86:47: a2:8e:d2:58:16:fd:37:41:e4:e0:6e:00:55:81:3c:bd:01:e2: 16:c0:35:44 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIURrD2EHNUaMqHHK68M9LjSHcNOa0wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzNhN2EyZmE5ZmRmN2E2ZjUwODdiODQwYjY2YzRmYzM0 MTIwZDVjZTcxMTRiODc4ZDAwHhcNMjUwNDIyMTMyMzMwWhcNMjYwNDIxMTMyODMw WjAzMTEwLwYDVQQDEygzRDA1MDI3MDIzMEIzQTBBQTFCMTE5NjI5QzE0MTg2RjEx RjRENDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxA94fjosD8h l1bMAcSH1dmZ/hPE+5dgvOyokYTOf0jyS1/lq5bStOG9e5Ip/z9toy7LhQ1VszCk XRMR9+3rgBpZdi6LX3FhMoJmCIkjnklxfzGc1qVgxoh6BdMO3xftl3yjM3Sr0wbt 0tETdYgtH5/Crh6F2q+gLovCyHfRY/bZdoo7ElOWUju2MMdvz7ACJTt+vPBRgX/D xNSPcQdnM6h70lg5B0yqeqH6ryQzzLlLmflZW205EFZP/yonS/dWOWiJvEXtpENy LWhZTpkM1CihK/cpPtppi5BmnvrfSzrCCAfFTi50c1UySRZ01cQC9AWhLShGEY6g oRW7tBrSmwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFD0FAnAjCzoKobEZYpwUGG8R 9NQ1MB8GA1UdIwQYMBaAFMuneLdBW9TR5u8OgA4li0bfpU2KMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThjZmEwYTE2YmYxOWY0LzAv Q0JBNzc4Qjc0MTVCRDREMUU2RUYwRTgwMEUyNThCNDZERkE1NEQ4QS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkL2NiZmM4NGNkLTM5ZmItNGVmYi1hNjVkLWRjYTczYWRmYTlhYy9jM2E3 YTJmYTlmZGY3YTZmNTA4N2I4NDBiNjZjNGZjMzQxMjBkNWNlNzExNGI4NzhkMC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4Y2Zh MGExNmJmMTlmNC8wLzMxMzkzOTJlMzEzODM4MmUzMjMzMzYyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNTMzMzMzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7zsMA0GCSqGSIb3DQEB CwUAA4IBAQCUbetUMnt3HEifbkJySREQ90+9GCoHQJfz36B21b5A7+PT4WrI/a+y zNEdGwhdxdJ06UsNM3nvoigYLpA1VGPtBIq30zcse18dOcm7wDpFnKeAE0lod59h Q7VsIBn1AzH6g6GQWU581g6jAczWmx2rO6+x/X6xxNRpysHEFttbfilnLRWEaRqv BvG9WGndsIY2w3QB0RgV1BTN8GNjn8IyCR3GTiXNXRhzEZvkRnqzheK8ZCojqm9X kuYgRnQ7u1dW/LM7MfXSAoz+3RJSIBhG6dmx6yzQwO/C2iKSN7Fmm8Rnw5JdqwaN hkeijtJYFv03QeTgbgBVgTy9AeIWwDVE -----END CERTIFICATE-----Generated at Mon May 5 20:04:36 2025 by rpki-client