$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e20383334.roa File: 3139322e302e31372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: ccYJTU8rhj77uVTM+IGcBIIUpzzVbHwefYfGokF57gk= Subject key identifier: F0:31:43:16:1D:48:AD:B1:29:35:C7:15:3B:DB:0A:6F:8D:79:61:88 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 1F4E0B40961908EEFC24CB25FC9A9E9B9E67260C Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e20383334.roa Signing time: Mon 16 Jun 2025 04:56:45 +0000 ROA not before: Mon 16 Jun 2025 04:51:45 +0000 ROA not after: Mon 15 Jun 2026 04:56:45 +0000 asID: 834 IP address blocks: 192.0.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Jun 2025 23:13:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:4e:0b:40:96:19:08:ee:fc:24:cb:25:fc:9a:9e:9b:9e:67:26:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Jun 16 04:51:45 2025 GMT Not After : Jun 15 04:56:45 2026 GMT Subject: CN=F03143161D48ADB12935C7153BDB0A6F8D796188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8e:c4:21:1d:14:c0:0e:ed:53:72:13:42:e7: 97:da:87:9d:d6:33:95:e6:2a:8d:c0:82:85:40:0b: 52:36:3f:7d:b8:1d:4a:3f:bd:aa:61:aa:91:a1:c8: fd:f6:ae:9a:90:7b:35:96:63:99:36:a0:7f:48:bc: 06:e3:7e:d7:57:f6:62:89:22:49:a7:f5:ce:15:d0: e5:14:60:fc:e0:08:63:a3:5d:68:22:42:05:9b:cc: ae:bb:5f:0a:d6:0f:f1:41:bc:3a:c7:b5:d4:26:32: 25:55:5d:d1:e4:2c:50:84:84:7a:bd:61:4b:fb:1d: 21:c6:e1:e0:87:91:20:96:82:0d:6d:86:25:1b:d4: 81:a8:96:87:db:f1:4e:a2:51:c5:5c:04:de:8c:a3: 7e:e5:d6:06:b6:bd:fc:37:12:84:a4:f7:63:8c:70: ca:b5:49:99:f2:8a:7f:a2:76:e4:b9:90:47:d5:86: 6d:bf:6c:bb:d8:ae:36:a5:fe:1e:23:e7:e0:d3:23: f4:fe:95:39:69:09:af:98:da:d6:c3:f2:42:5f:0d: 35:1d:1b:48:6a:e2:fd:5e:c6:4c:51:70:9d:01:de: b7:2e:9b:6b:43:ef:fb:79:54:9d:0f:f4:fa:4c:0a: 06:b8:e4:e0:a8:3f:c2:9c:7a:e5:ad:8d:ee:3d:b7: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:31:43:16:1D:48:AD:B1:29:35:C7:15:3B:DB:0A:6F:8D:79:61:88 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.17.0/24 Signature Algorithm: sha256WithRSAEncryption ba:ff:90:f8:d0:ba:fb:71:07:ed:21:14:3d:37:d8:b4:fe:34: 94:56:33:b9:44:1a:9e:9e:c0:5e:de:4c:42:c6:a0:cf:06:a3: 00:0b:b4:34:99:e5:75:b8:29:65:ca:a2:f2:c7:95:ab:e6:1d: 87:b8:d8:f3:2f:a1:88:65:45:cd:24:a1:e4:24:07:88:2f:18: b7:c0:f6:fe:dc:13:5d:cc:ec:69:a9:29:03:55:0b:2e:3b:f6: 6b:5e:2f:b8:0e:85:2a:55:cf:62:26:e8:45:ac:f9:89:c0:c8: ac:bd:60:a2:c7:f5:1b:c5:0a:c8:f7:2b:14:6b:0e:b0:79:91: 3d:c2:e1:15:5a:50:2f:d9:75:18:ed:28:67:e4:0e:6d:9d:48: 09:83:71:7e:6b:e3:20:a6:36:1f:8f:ca:a4:2a:6d:ed:33:9b: 8f:b0:89:a1:30:29:a2:a0:bb:ee:f3:e3:f2:c4:01:e8:6a:ad: 60:80:dc:aa:3a:36:9d:f0:db:ff:b2:ee:20:c8:eb:59:ee:96: 7e:c2:6b:fe:a9:7e:2d:90:db:7c:03:5c:d6:26:6c:e4:ac:14: 33:14:cb:a3:c7:4a:c8:9a:30:b3:ea:00:05:79:73:7e:e1:f4: a7:8f:19:63:f1:0a:20:83:e1:60:95:99:a0:71:ad:e4:cb:61: e2:93:d5:24 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUH04LQJYZCO78JMsl/Jqem55nJgwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNjE2MDQ1MTQ1WhcNMjYwNjE1MDQ1NjQ1 WjAzMTEwLwYDVQQDEyhGMDMxNDMxNjFENDhBREIxMjkzNUM3MTUzQkRCMEE2RjhE Nzk2MTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9I7EIR0UwA7t U3ITQueX2oed1jOV5iqNwIKFQAtSNj99uB1KP72qYaqRocj99q6akHs1lmOZNqB/ SLwG437XV/ZiiSJJp/XOFdDlFGD84Ahjo11oIkIFm8yuu18K1g/xQbw6x7XUJjIl VV3R5CxQhIR6vWFL+x0hxuHgh5EgloINbYYlG9SBqJaH2/FOolHFXATejKN+5dYG tr38NxKEpPdjjHDKtUmZ8op/onbkuZBH1YZtv2y72K42pf4eI+fg0yP0/pU5aQmv mNrWw/JCXw01HRtIauL9XsZMUXCdAd63LptrQ+/7eVSdD/T6TAoGuOTgqD/CnHrl rY3uPbfp9wIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFPAxQxYdSK2xKTXHFTvbCm+N eWGIMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMAAETANBgkqhkiG9w0BAQsFAAOCAQEAuv+Q +NC6+3EH7SEUPTfYtP40lFYzuUQanp7AXt5MQsagzwajAAu0NJnldbgpZcqi8seV q+Ydh7jY8y+hiGVFzSSh5CQHiC8Yt8D2/twTXczsaakpA1ULLjv2a14vuA6FKlXP YiboRaz5icDIrL1gosf1G8UKyPcrFGsOsHmRPcLhFVpQL9l1GO0oZ+QObZ1ICYNx fmvjIKY2H4/KpCpt7TObj7CJoTApoqC77vPj8sQB6GqtYIDcqjo2nfDb/7LuIMjr We6WfsJr/ql+LZDbfANc1iZs5KwUMxTLo8dKyJows+oABXlzfuH0p48ZY/EKIIPh YJWZoHGt5Mth4pPVJA== -----END CERTIFICATE-----Generated at Sun Jun 29 04:31:44 2025 by rpki-client