$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32332d3234203d3e20383334.roa File: 3230392e38372e3136342e302f32332d3234203d3e20383334.roa (raw, json) Hash identifier: yqQcR84XWMJjxSpeRfqMaaOxDu1kepX235LHAL85pAY= Subject key identifier: D6:6E:AE:EB:43:D4:6A:07:1A:63:D4:37:F8:15:EF:C3:21:FC:DF:43 Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Certificate serial: 05D87856233B9B371CC510A19986A63B82766C21 Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32332d3234203d3e20383334.roa Signing time: Wed 25 Jun 2025 00:03:03 +0000 ROA not before: Tue 24 Jun 2025 23:58:03 +0000 ROA not after: Wed 24 Jun 2026 00:03:03 +0000 asID: 834 IP address blocks: 209.87.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 19:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:d8:78:56:23:3b:9b:37:1c:c5:10:a1:99:86:a6:3b:82:76:6c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Validity Not Before: Jun 24 23:58:03 2025 GMT Not After : Jun 24 00:03:03 2026 GMT Subject: CN=D66EAEEB43D46A071A63D437F815EFC321FCDF43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:89:73:f0:54:7b:17:dc:f8:e7:29:19:95: 02:a0:fc:38:d9:51:db:d3:4d:49:25:31:7d:3d:fe: ae:e4:eb:e8:f0:0c:b3:51:a3:65:d3:aa:8f:42:ec: a3:f7:37:91:99:53:fb:70:91:46:b0:ac:7a:e9:47: c7:fc:bf:c7:b1:c5:31:1b:b9:cb:85:c1:cb:3b:19: 28:73:ed:33:a7:84:8e:21:79:1e:75:8a:21:45:52: dc:5c:4f:b6:46:28:82:4f:5e:66:77:f1:08:14:a9: 22:69:c4:81:ba:73:2f:c9:e3:33:35:87:99:ca:43: 06:b1:0d:d5:b2:31:36:46:19:df:f7:c2:e1:11:99: d4:4e:57:9d:ed:f0:1a:9e:cc:6c:1a:e9:22:91:c0: f8:75:d7:57:84:3f:f9:4b:13:f7:62:76:a5:44:9b: 5d:f0:14:00:b0:66:44:11:24:50:53:b4:09:67:4f: d3:91:1e:fc:83:99:80:4c:b6:5f:aa:47:80:be:ba: 2e:2b:e3:d3:e3:6b:54:c5:6d:91:3a:66:ff:e1:62: ac:97:1c:c7:e1:61:33:cd:6e:1a:9b:c8:63:f2:e0: 95:3c:d8:ee:0d:f2:2b:4f:9b:83:7c:ff:ac:e7:0d: 63:4b:4e:ec:77:2e:7a:7c:a6:85:13:77:d2:d4:dd: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6E:AE:EB:43:D4:6A:07:1A:63:D4:37:F8:15:EF:C3:21:FC:DF:43 X509v3 Authority Key Identifier: keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32332d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.87.164.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:b2:34:70:2a:77:3e:1b:3d:7c:24:66:b7:ad:88:51:d7:8f: a6:7c:c8:1d:51:93:fe:5a:c1:3a:4a:ff:bc:65:be:8e:d3:1b: 0c:da:21:cc:91:fa:27:ed:d1:99:1b:71:0f:9e:1f:65:4c:4e: 99:7e:99:91:f5:bd:11:55:4e:72:9b:df:a9:55:b1:62:44:eb: b5:a7:ac:17:ba:1c:1c:36:d7:5b:52:46:1e:8e:b8:be:55:55: 00:dd:fe:6a:5e:cd:eb:10:95:0a:79:b6:98:08:86:a0:85:3f: 2e:57:df:dd:d7:33:f1:97:8f:be:87:9b:21:b5:80:ca:b6:a5: 03:66:a3:79:95:44:dd:0e:54:06:f5:d1:0f:f0:6a:c5:18:0f: a0:46:83:b9:71:5d:d1:f2:fb:02:3b:69:80:54:14:b9:1b:5d: c5:98:ad:8c:05:87:c6:22:6a:27:bd:81:aa:8d:0d:26:54:4d: a9:92:cd:d5:41:71:c1:88:41:b9:1b:53:46:91:26:11:7c:7a: 59:8b:ed:9c:81:a4:c4:6c:01:ed:88:4c:7a:3e:b0:64:32:45: 97:13:b3:b4:b1:f1:47:fc:d9:da:4f:cc:7f:d3:eb:a7:95:dc: a3:4b:7c:19:05:b6:bd:e6:7f:4e:91:2f:f3:ce:48:0c:c7:4c: 26:6d:67:52 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUBdh4ViM7mzccxRChmYamO4J2bCEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNjI0MjM1ODAzWhcNMjYwNjI0MDAwMzAz WjAzMTEwLwYDVQQDEyhENjZFQUVFQjQzRDQ2QTA3MUE2M0Q0MzdGODE1RUZDMzIx RkNERjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvmJc/BUexfc +OcpGZUCoPw42VHb001JJTF9Pf6u5Ovo8AyzUaNl06qPQuyj9zeRmVP7cJFGsKx6 6UfH/L/HscUxG7nLhcHLOxkoc+0zp4SOIXkedYohRVLcXE+2RiiCT15md/EIFKki acSBunMvyeMzNYeZykMGsQ3VsjE2Rhnf98LhEZnUTled7fAansxsGukikcD4dddX hD/5SxP3YnalRJtd8BQAsGZEESRQU7QJZ0/TkR78g5mATLZfqkeAvrouK+PT42tU xW2ROmb/4WKslxzH4WEzzW4am8hj8uCVPNjuDfIrT5uDfP+s5w1jS07sdy56fKaF E3fS1N31bQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNZurutD1GoHGmPUN/gV78Mh /N9DMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5 Mzg4NGQyYTMwLzAvMzIzMDM5MmUzODM3MmUzMTM2MzQyZTMwMmYzMjMzMmQzMjM0 MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHRV6QwDQYJKoZIhvcNAQELBQADggEB AF+yNHAqdz4bPXwkZretiFHXj6Z8yB1Rk/5awTpK/7xlvo7TGwzaIcyR+ift0Zkb cQ+eH2VMTpl+mZH1vRFVTnKb36lVsWJE67WnrBe6HBw211tSRh6OuL5VVQDd/mpe zesQlQp5tpgIhqCFPy5X393XM/GXj76HmyG1gMq2pQNmo3mVRN0OVAb10Q/wasUY D6BGg7lxXdHy+wI7aYBUFLkbXcWYrYwFh8Yiaie9gaqNDSZUTamSzdVBccGIQbkb U0aRJhF8elmL7ZyBpMRsAe2ITHo+sGQyRZcTs7Sx8Uf82dpPzH/T66eV3KNLfBkF tr3mf06RL/POSAzHTCZtZ1I= -----END CERTIFICATE-----Generated at Sun Jun 29 07:25:09 2025 by rpki-client