$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e2039333034.roa File: 3230392e38372e3137322e302f32342d3234203d3e2039333034.roa (raw, json) Hash identifier: lNhNf9lPruR2B6QqMer+5qqBQAaYiPY9CNKbH6GFdvM= Subject key identifier: C2:DB:89:8E:BB:C1:07:21:E7:18:76:41:91:DF:29:7F:F9:86:10:2A Certificate issuer: /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Certificate serial: 3A097B235DCC203C52B03F70E43AFECE69703BEF Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e2039333034.roa Signing time: Sun 17 Aug 2025 16:26:50 +0000 ROA not before: Sun 17 Aug 2025 16:21:50 +0000 ROA not after: Sun 16 Aug 2026 16:26:50 +0000 asID: 9304 IP address blocks: 209.87.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Aug 2025 21:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:09:7b:23:5d:cc:20:3c:52:b0:3f:70:e4:3a:fe:ce:69:70:3b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051 Validity Not Before: Aug 17 16:21:50 2025 GMT Not After : Aug 16 16:26:50 2026 GMT Subject: CN=C2DB898EBBC10721E718764191DF297FF986102A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:48:62:f9:a7:7e:ff:75:e2:74:57:cd:c3:d7: a6:87:02:81:48:93:c8:4a:6b:b2:4e:a8:81:a1:fe: ae:53:67:04:9a:71:e9:9a:0a:a6:ba:b9:49:d3:b1: 4b:8f:30:bd:7c:ea:58:1f:9a:b9:fa:99:1a:99:a7: c0:42:da:13:8d:2d:95:f1:7d:74:86:29:18:5e:73: 63:6c:e5:31:97:1d:16:dd:01:57:8e:4e:bd:66:04: e0:32:4d:b9:0b:f0:36:eb:46:4a:ef:75:a8:83:e7: 89:93:7d:d1:ff:96:92:92:f9:8d:e9:46:44:03:0e: be:ad:aa:fa:85:71:2e:82:f0:b1:ac:53:82:83:ed: 9b:4d:c4:fe:b0:60:de:e4:22:93:5a:98:4b:4b:38: ed:3e:8a:24:5f:fb:70:5d:54:93:7e:d3:ed:03:60: dc:1c:c0:44:a5:52:39:0d:d4:6c:50:f7:93:bf:0e: 66:32:eb:ad:6a:63:df:65:59:d7:42:c7:07:f2:33: 8c:9f:fe:5a:b1:aa:bc:07:62:b1:48:b6:b8:aa:ee: d9:fd:9c:6a:cb:7d:d7:e5:ed:9c:51:ba:76:7b:3e: e6:37:26:9e:46:87:7d:68:6e:93:b7:11:d8:2c:81: d4:d2:87:aa:6e:99:d5:51:ac:32:b0:49:81:73:f3: 63:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DB:89:8E:BB:C1:07:21:E7:18:76:41:91:DF:29:7F:F9:86:10:2A X509v3 Authority Key Identifier: keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 209.87.172.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:d5:9c:c7:1a:34:4d:7c:02:48:f9:d1:0b:7a:d6:35:50:7f: 6e:d1:96:4d:9e:ec:72:cf:11:4f:b4:73:8b:5f:9c:ac:83:98: 82:8f:72:4a:a7:10:f9:97:f3:c7:e8:f5:5c:83:16:54:d1:d0: 7a:f5:ee:e1:22:79:20:f4:5d:ae:aa:42:98:b6:df:83:74:c0: 1c:8d:48:df:96:c2:90:04:08:ed:8e:8e:8c:0b:45:da:9c:c5: 4e:47:c5:13:54:7c:d2:eb:18:ee:89:86:1f:4a:f5:5d:4f:8c: b3:e7:3e:e0:00:25:cf:04:f9:39:2b:1e:9a:24:5c:46:ee:5e: 68:07:99:15:02:0d:4c:c6:3c:e8:35:68:75:86:a0:15:13:28: ef:76:2e:92:96:9f:24:be:90:7e:38:41:b9:54:ed:1b:9f:a1: fe:ab:7a:75:07:62:95:37:8a:9d:e7:59:72:21:a6:17:f5:86: 34:33:82:c1:f7:61:f2:9b:c5:0a:f2:c4:ca:e9:8f:c5:78:c6: e3:38:e2:e3:74:99:08:84:03:61:41:20:88:21:0c:7c:9a:2e: 3d:56:ae:66:b0:fe:bf:6c:a6:60:63:be:e3:7b:2d:8d:49:22: 92:56:81:6d:38:2d:bc:43:d5:52:da:fd:a0:de:12:02:6c:3e: 69:84:5a:c4 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUOgl7I13MIDxSsD9w5Dr+zmlwO+8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwODE3MTYyMTUwWhcNMjYwODE2MTYyNjUw WjAzMTEwLwYDVQQDEyhDMkRCODk4RUJCQzEwNzIxRTcxODc2NDE5MURGMjk3RkY5 ODYxMDJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10hi+ad+/3Xi dFfNw9emhwKBSJPISmuyTqiBof6uU2cEmnHpmgqmurlJ07FLjzC9fOpYH5q5+pka mafAQtoTjS2V8X10hikYXnNjbOUxlx0W3QFXjk69ZgTgMk25C/A260ZK73Wog+eJ k33R/5aSkvmN6UZEAw6+rar6hXEugvCxrFOCg+2bTcT+sGDe5CKTWphLSzjtPook X/twXVSTftPtA2DcHMBEpVI5DdRsUPeTvw5mMuutamPfZVnXQscH8jOMn/5asaq8 B2KxSLa4qu7Z/Zxqy33X5e2cUbp2ez7mNyaeRod9aG6TtxHYLIHU0oeqbpnVUawy sEmBc/NjuQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMLbiY67wQch5xh2QZHfKX/5 hhAqMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1 OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNzMyMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADRV6wwDQYJKoZIhvcNAQELBQAD ggEBABrVnMcaNE18Akj50Qt61jVQf27Rlk2e7HLPEU+0c4tfnKyDmIKPckqnEPmX 88fo9VyDFlTR0Hr17uEieSD0Xa6qQpi234N0wByNSN+WwpAECO2OjowLRdqcxU5H xRNUfNLrGO6Jhh9K9V1PjLPnPuAAJc8E+TkrHpokXEbuXmgHmRUCDUzGPOg1aHWG oBUTKO92LpKWnyS+kH44QblU7Rufof6renUHYpU3ip3nWXIhphf1hjQzgsH3YfKb xQryxMrpj8V4xuM44uN0mQiEA2FBIIghDHyaLj1Wrmaw/r9spmBjvuN7LY1JIpJW gW04LbxD1VLa/aDeEgJsPmmEWsQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:37:12 2025 by rpki-client