$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa File: 3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa (raw, json) Hash identifier: QN/3v4XfLyzsM4O6nIfNjPzmEl8SpjYyHOrP3G55WfU= Subject key identifier: 88:17:AC:0F:DC:23:42:7E:8B:3E:4F:99:5A:C7:5A:09:9E:EC:81:A9 Certificate issuer: /CN=bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8 Certificate serial: 377976060EE3C2D5847D7BF472E246B0634FD2F7 Authority key identifier: 87:14:8D:1D:98:0A:25:7F:69:16:F2:DA:3A:30:5B:D7:51:78:97:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa Signing time: Tue 28 Apr 2026 21:36:00 +0000 ROA not before: Tue 28 Apr 2026 21:31:00 +0000 ROA not after: Tue 27 Apr 2027 21:36:00 +0000 asID: 205220 IP address blocks: 192.129.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/87148D1D980A257F6916F2DA3A305BD7517897DE.crl rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/87148D1D980A257F6916F2DA3A305BD7517897DE.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/7491ca97-4125-4dca-a20b-fe4fb458e1c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/7491ca97-4125-4dca-a20b-fe4fb458e1c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 13 May 2026 13:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:79:76:06:0e:e3:c2:d5:84:7d:7b:f4:72:e2:46:b0:63:4f:d2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8 Validity Not Before: Apr 28 21:31:00 2026 GMT Not After : Apr 27 21:36:00 2027 GMT Subject: CN=8817AC0FDC23427E8B3E4F995AC75A099EEC81A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:eb:d8:fe:3b:e9:cb:1d:16:b5:32:51:f7: 7e:cc:42:51:ea:de:7b:95:08:27:a1:dc:de:14:5f: 86:a0:2c:9b:c2:b9:ae:29:6c:29:60:d3:ce:6a:09: 6f:59:9e:a9:77:f8:3b:3d:ac:e3:3a:f7:1b:3b:04: 6e:0e:f1:a4:da:e4:a3:62:ee:c4:95:98:e8:1c:ea: 62:51:3b:96:f9:79:a8:1b:12:0c:c2:47:f2:a7:56: 0b:89:d4:53:f5:41:e4:76:18:56:c0:b8:65:12:93: ee:90:8c:27:95:96:20:5b:df:75:d5:e9:df:4a:d6: 46:10:24:ed:3a:ca:01:90:4d:38:7e:78:de:45:47: a3:81:e3:9c:23:7b:75:86:d3:09:33:6d:e5:e5:df: fe:86:e2:c1:b2:9c:2a:a6:4c:f0:66:ff:75:1c:a2: 61:d0:b9:18:40:b5:0a:3d:82:dc:b1:bb:c6:26:f8: 4c:5b:86:3e:2c:5a:92:92:43:d7:1b:ad:87:dc:46: 8f:b2:90:28:4e:33:b8:e0:c9:4f:5f:f8:55:79:fb: 51:c1:5b:34:29:60:79:11:da:95:d6:8d:d5:27:ab: c0:07:89:25:92:9e:dd:31:a3:71:ad:00:d1:f5:a1: d2:bc:ff:27:c0:ff:48:6e:4d:80:41:a3:e0:1d:fe: a9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:17:AC:0F:DC:23:42:7E:8B:3E:4F:99:5A:C7:5A:09:9E:EC:81:A9 X509v3 Authority Key Identifier: keyid:87:14:8D:1D:98:0A:25:7F:69:16:F2:DA:3A:30:5B:D7:51:78:97:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/87148D1D980A257F6916F2DA3A305BD7517897DE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.129.70.0/24 Signature Algorithm: sha256WithRSAEncryption 77:50:f4:10:25:b7:61:c7:96:fb:a4:9c:0b:e1:79:98:26:9e: 2e:90:59:4f:79:8d:bd:b6:72:5d:ac:ef:2f:76:e7:b5:29:82: 8c:94:a0:22:03:1a:4d:a2:38:67:55:7b:a2:07:39:3a:cd:39: 72:df:18:6f:b7:28:b6:8b:45:79:61:9b:46:39:c0:65:e0:c0: 80:71:1c:9b:e9:3a:c9:4c:77:9a:62:f9:0b:9a:f5:93:a9:82: 1a:cf:2c:64:02:07:79:ee:0d:5c:71:77:0a:1e:3b:24:e1:05: c5:24:01:a5:21:5d:8d:00:ea:8d:f6:b3:4b:f6:15:b2:b2:6e: d9:b8:4d:95:bd:b7:ae:f3:a8:fd:5b:41:c3:d1:2a:e3:52:c1: 10:2f:4d:0c:2f:82:39:a9:1c:cf:e3:18:03:93:78:fc:f7:9e: ef:83:f6:93:ba:41:57:1e:24:80:89:2e:3e:33:d8:c2:3c:e3: d7:0f:d5:97:b6:fa:4c:e9:3c:b7:fd:d9:2d:6f:b9:00:27:7c: 0f:85:d3:85:97:9e:e7:8a:53:fe:45:8d:55:15:41:ff:0c:b1: 00:48:f7:73:26:25:01:30:12:d1:ce:9c:43:c1:2d:b0:09:9f: 49:33:3c:4d:05:d9:0f:50:2a:61:4a:90:a4:b4:51:b7:a0:4e: 96:cf:de:4c -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUN3l2Bg7jwtWEfXv0cuJGsGNP0vcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYmYwZjkwZDdlODIyOGJmNmJkNWEzMjQ1YTJjMDU0ODNi ODRhYjcwNzVlMWUwMjRkZjgwHhcNMjYwNDI4MjEzMTAwWhcNMjcwNDI3MjEzNjAw WjAzMTEwLwYDVQQDEyg4ODE3QUMwRkRDMjM0MjdFOEIzRTRGOTk1QUM3NUEwOTlF RUM4MUE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNHr2P476csd FrUyUfd+zEJR6t57lQgnodzeFF+GoCybwrmuKWwpYNPOaglvWZ6pd/g7PazjOvcb OwRuDvGk2uSjYu7ElZjoHOpiUTuW+XmoGxIMwkfyp1YLidRT9UHkdhhWwLhlEpPu kIwnlZYgW9911enfStZGECTtOsoBkE04fnjeRUejgeOcI3t1htMJM23l5d/+huLB spwqpkzwZv91HKJh0LkYQLUKPYLcsbvGJvhMW4Y+LFqSkkPXG62H3EaPspAoTjO4 4MlPX/hVeftRwVs0KWB5EdqV1o3VJ6vAB4klkp7dMaNxrQDR9aHSvP8nwP9Ibk2A QaPgHf6peQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIgXrA/cI0J+iz5PmVrHWgme 7IGpMB8GA1UdIwQYMBaAFIcUjR2YCiV/aRby2jowW9dReJfeMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTFmYjRjOTcwMTkyNDZhZjBjZjczZWU4LzAv ODcxNDhEMUQ5ODBBMjU3RjY5MTZGMkRBM0EzMDVCRDc1MTc4OTdERS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy ODZmMTk1Lzc0OTFjYTk3LTQxMjUtNGRjYS1hMjBiLWZlNGZiNDU4ZTFjNS9iZjBm OTBkN2U4MjI4YmY2YmQ1YTMyNDVhMmMwNTQ4M2I4NGFiNzA3NWUxZTAyNGRmOC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxZmI0Yzk3MDE5MjQ2 YWYwY2Y3M2VlOC8wLzMxMzkzMjJlMzEzMjM5MmUzNzMwMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzIzMDM1MzIzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIFGMA0GCSqGSIb3DQEB CwUAA4IBAQB3UPQQJbdhx5b7pJwL4XmYJp4ukFlPeY29tnJdrO8vdue1KYKMlKAi AxpNojhnVXuiBzk6zTly3xhvtyi2i0V5YZtGOcBl4MCAcRyb6TrJTHeaYvkLmvWT qYIazyxkAgd57g1ccXcKHjsk4QXFJAGlIV2NAOqN9rNL9hWysm7ZuE2Vvbeu86j9 W0HD0SrjUsEQL00ML4I5qRzP4xgDk3j8957vg/aTukFXHiSAiS4+M9jCPOPXD9WX tvpM6Ty3/dktb7kAJ3wPhdOFl57nilP+RY1VFUH/DLEASPdzJiUBMBLRzpxDwS2w CZ9JMzxNBdkPUCphSpCktFG3oE6Wz95M -----END CERTIFICATE-----Generated at Wed May 13 03:45:42 2026 by rpki-client