$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e203239383032.roa File: 3139322e302e32332e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: yV+lWI9wfp+EFjyFjA2nMwyhqY0rbsXa1hgQK7YgxJI= Subject key identifier: 04:89:F7:C8:00:C5:DC:A2:C5:F1:2F:51:24:1E:86:8C:71:D1:62:9B Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 0B619045ECFBF4AE1F10662C8D2878110B0129A2 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e203239383032.roa Signing time: Thu 18 Sep 2025 16:02:34 +0000 ROA not before: Thu 18 Sep 2025 15:57:34 +0000 ROA not after: Thu 17 Sep 2026 16:02:34 +0000 asID: 29802 IP address blocks: 192.0.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 02:14:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:61:90:45:ec:fb:f4:ae:1f:10:66:2c:8d:28:78:11:0b:01:29:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Sep 18 15:57:34 2025 GMT Not After : Sep 17 16:02:34 2026 GMT Subject: CN=0489F7C800C5DCA2C5F12F51241E868C71D1629B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2d:d9:4a:15:6f:c6:12:e6:eb:5c:1e:d5:08: f3:03:6b:23:e6:e9:f2:6c:b2:cd:ea:ca:08:2b:7c: dc:d6:cd:c1:08:c9:81:cf:f6:50:e8:a9:0b:2b:cb: 3f:85:7c:3f:89:b3:f7:e0:35:a0:10:e3:63:fa:81: d5:e2:4f:ea:ee:ac:5a:79:ea:19:18:ca:59:e1:7d: e3:94:a0:9c:7b:41:04:37:6d:e9:77:61:e4:90:7d: 7f:b1:36:6b:0c:a1:fd:9d:6c:21:6a:f1:98:e5:9e: 5b:0a:9a:7f:ad:12:b5:d1:17:8d:29:bc:ab:b1:05: 61:78:c4:58:e0:f1:34:e7:25:43:7b:4c:d2:3b:be: 8a:02:d0:06:5c:24:a0:49:37:ff:9e:a3:99:65:31: 96:20:ee:9b:46:01:dc:18:95:db:ed:f3:b2:88:30: 8c:e6:e2:11:1a:53:f1:22:56:b8:5f:44:03:13:4e: 7c:25:99:18:3c:0a:2d:73:fa:fe:da:a3:36:76:70: 56:e9:04:aa:59:d7:b8:00:4a:38:51:4e:7f:82:c4: 88:db:24:8e:20:f9:93:d2:a1:df:bd:b2:76:95:f8: 7b:bc:ab:05:97:58:29:05:02:6c:6c:88:6e:e1:ec: e4:af:6c:61:be:64:0f:f6:40:1f:17:75:1a:b2:b2: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:89:F7:C8:00:C5:DC:A2:C5:F1:2F:51:24:1E:86:8C:71:D1:62:9B X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.23.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:a2:0c:0e:46:94:ae:36:be:35:b9:a0:12:02:1b:be:59:b4: d2:3b:de:97:aa:42:a4:2c:11:40:61:03:46:d5:a4:af:59:28: 3d:8d:72:14:b3:e5:ec:cd:6a:24:dc:3f:47:70:3c:75:ae:51: 35:ee:72:5d:9b:4d:5d:e4:a1:28:32:a2:c2:00:b8:bc:1d:fb: 0e:f1:0f:54:bc:d8:99:81:26:8b:fa:18:83:58:4f:58:06:df: 36:74:24:09:d5:cd:89:a2:1c:ba:d3:04:3f:5c:d0:7e:95:58: 94:51:f4:2d:12:90:d2:20:82:53:5a:7d:b7:8b:f8:5f:d0:ad: ba:be:bd:a8:42:19:c7:94:b9:51:78:05:76:cf:3c:77:6b:04: 58:63:ce:90:51:6b:ec:d3:b6:45:34:af:2e:df:f5:4c:c7:5f: de:6b:c9:2b:30:1b:e8:07:6f:68:1f:04:a9:73:29:74:8f:02: 3f:83:00:dd:d3:ab:79:2c:20:3a:0b:92:bc:b4:3a:64:48:9c: 2b:96:fc:15:40:0a:0e:3a:28:ef:d5:b7:03:db:4f:fc:b2:4e: 60:58:d9:9b:9b:3e:26:a5:34:e1:9a:36:08:b4:6e:ae:3f:ac: 5a:55:c8:6c:8e:d9:3c:a7:4a:2d:09:f1:06:c7:e5:c0:40:86: 11:52:3e:1d -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUC2GQRez79K4fEGYsjSh4EQsBKaIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwOTE4MTU1NzM0WhcNMjYwOTE3MTYwMjM0 WjAzMTEwLwYDVQQDEygwNDg5RjdDODAwQzVEQ0EyQzVGMTJGNTEyNDFFODY4Qzcx RDE2MjlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwi3ZShVvxhLm 61we1QjzA2sj5unybLLN6soIK3zc1s3BCMmBz/ZQ6KkLK8s/hXw/ibP34DWgEONj +oHV4k/q7qxaeeoZGMpZ4X3jlKCce0EEN23pd2HkkH1/sTZrDKH9nWwhavGY5Z5b Cpp/rRK10ReNKbyrsQVheMRY4PE05yVDe0zSO76KAtAGXCSgSTf/nqOZZTGWIO6b RgHcGJXb7fOyiDCM5uIRGlPxIla4X0QDE058JZkYPAotc/r+2qM2dnBW6QSqWde4 AEo4UU5/gsSI2ySOIPmT0qHfvbJ2lfh7vKsFl1gpBQJsbIhu4ezkr2xhvmQP9kAf F3UasrLjlwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFASJ98gAxdyixfEvUSQehoxx 0WKbMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABcwDQYJKoZIhvcNAQELBQADggEB AJ6iDA5GlK42vjW5oBICG75ZtNI73peqQqQsEUBhA0bVpK9ZKD2NchSz5ezNaiTc P0dwPHWuUTXucl2bTV3koSgyosIAuLwd+w7xD1S82JmBJov6GINYT1gG3zZ0JAnV zYmiHLrTBD9c0H6VWJRR9C0SkNIgglNafbeL+F/Qrbq+vahCGceUuVF4BXbPPHdr BFhjzpBRa+zTtkU0ry7f9UzHX95rySswG+gHb2gfBKlzKXSPAj+DAN3Tq3ksIDoL kry0OmRInCuW/BVACg46KO/VtwPbT/yyTmBY2ZubPialNOGaNgi0bq4/rFpVyGyO 2TynSi0J8QbH5cBAhhFSPh0= -----END CERTIFICATE-----Generated at Tue Oct 21 04:43:49 2025 by rpki-client