$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3230382e302f32312d3234203d3e203230303031.roa File: 3139382e31352e3230382e302f32312d3234203d3e203230303031.roa (raw, json) Hash identifier: asGYy17RFN/8iwKEC/nGOFZlm/Rbd7LlNDRYRjaGQhk= Subject key identifier: DD:60:01:B1:D3:1E:E1:7B:35:CE:0E:7A:E3:D2:5D:EF:31:98:7A:F1 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 7B92AE43A2B05C052B3A751B3C138408C5098EC1 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3230382e302f32312d3234203d3e203230303031.roa Signing time: Fri 20 Mar 2026 06:35:54 +0000 ROA not before: Fri 20 Mar 2026 06:30:54 +0000 ROA not after: Fri 19 Mar 2027 06:35:54 +0000 asID: 20001 IP address blocks: 198.15.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 10:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:92:ae:43:a2:b0:5c:05:2b:3a:75:1b:3c:13:84:08:c5:09:8e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Mar 20 06:30:54 2026 GMT Not After : Mar 19 06:35:54 2027 GMT Subject: CN=DD6001B1D31EE17B35CE0E7AE3D25DEF31987AF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:87:91:3b:dd:6c:2d:6b:eb:f3:0d:ab:b9:19: 75:88:28:56:00:e3:c7:ac:d4:c6:70:6f:a2:e4:04: a3:90:b3:75:7b:37:b9:4f:15:55:58:54:be:7c:e0: fe:35:b8:87:93:22:6a:61:b4:d6:b0:12:4c:56:61: 02:d9:36:a8:23:1c:5e:0a:91:d3:0f:4d:bf:fd:1d: 12:a8:6b:49:b5:f0:87:d1:a0:12:e1:6d:ac:a6:a4: 2d:58:33:61:34:fd:23:6f:e4:ab:07:e9:8c:82:7a: 18:3a:7c:cb:04:db:97:c2:98:31:20:9c:b6:0a:e7: b9:46:d4:74:36:ea:4c:bc:49:13:ea:80:72:cd:c6: 10:37:5c:3f:da:72:f8:91:a2:fb:f6:c5:d2:28:69: 19:f7:a4:94:19:75:22:36:c4:ca:89:86:81:8e:22: 1a:c2:9c:d3:63:39:71:f6:23:ac:3a:8f:1d:8c:d1: 31:aa:ff:34:80:b8:a4:a9:f6:52:b7:0e:f1:fb:37: 6b:e2:d6:f0:97:ba:b0:b6:6d:b2:0d:48:85:2c:7d: 0f:3c:aa:24:44:61:46:ec:3d:7c:fd:3c:b4:7f:61: 95:a0:7b:1f:01:90:1c:fe:a5:99:57:a2:54:3c:65: f0:d8:12:6a:c2:a6:97:fe:b1:b2:fe:61:93:4f:e8: 6b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:01:B1:D3:1E:E1:7B:35:CE:0E:7A:E3:D2:5D:EF:31:98:7A:F1 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3230382e302f32312d3234203d3e203230303031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.15.208.0/21 Signature Algorithm: sha256WithRSAEncryption 78:83:10:12:1a:76:37:72:c7:81:f8:5e:37:ab:1e:f3:e7:0a: ce:01:7e:90:b6:a2:62:1d:42:bf:92:3f:3e:4f:f7:15:bc:db: 22:e5:7e:54:fc:09:ae:bb:21:79:a4:8c:5d:fa:0f:c2:0a:9f: 99:84:12:76:31:29:f3:a1:83:4a:08:03:53:91:6d:77:24:cf: 1b:3f:a7:f5:03:eb:cf:56:99:53:c6:7f:c2:af:e7:a1:d9:64: 0b:e3:91:5a:76:94:82:83:0a:a1:4f:64:cb:c2:01:2d:dc:90: 08:f0:f9:16:61:b6:00:bd:95:72:ad:e4:5a:69:3d:8f:12:b5: 41:db:79:59:a3:03:02:f9:bd:1b:3d:e4:bf:bb:63:a6:d3:da: eb:2e:52:d5:f0:d4:0e:c0:c9:21:b9:38:38:eb:e1:c4:3c:c0: 5b:0f:5e:44:00:00:ff:b0:3f:49:4e:e0:d4:4c:e4:b7:93:48: c0:2e:a1:f8:50:a2:22:17:30:d0:79:d9:5d:3f:e3:75:b0:0f: 75:ce:37:73:4c:f9:53:9e:fc:c7:a0:80:35:d8:cc:2d:df:14: f4:1b:33:6a:b5:01:e1:aa:ed:f0:96:f9:da:0a:65:2b:b5:57: 7d:1b:23:a6:c9:1f:8d:da:bb:ca:5f:91:19:61:d9:ed:e4:5a: 5d:bc:04:0a -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUe5KuQ6KwXAUrOnUbPBOECMUJjsEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwMzIwMDYzMDU0WhcNMjcwMzE5MDYzNTU0 WjAzMTEwLwYDVQQDEyhERDYwMDFCMUQzMUVFMTdCMzVDRTBFN0FFM0QyNURFRjMx OTg3QUYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoeRO91sLWvr 8w2ruRl1iChWAOPHrNTGcG+i5ASjkLN1eze5TxVVWFS+fOD+NbiHkyJqYbTWsBJM VmEC2TaoIxxeCpHTD02//R0SqGtJtfCH0aAS4W2spqQtWDNhNP0jb+SrB+mMgnoY OnzLBNuXwpgxIJy2Cue5RtR0NupMvEkT6oByzcYQN1w/2nL4kaL79sXSKGkZ96SU GXUiNsTKiYaBjiIawpzTYzlx9iOsOo8djNExqv80gLikqfZStw7x+zdr4tbwl7qw tm2yDUiFLH0PPKokRGFG7D18/Ty0f2GVoHsfAZAc/qWZV6JUPGXw2BJqwqaX/rGy /mGTT+hrBwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFN1gAbHTHuF7Nc4OeuPSXe8x mHrxMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0 MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzNTJlMzIzMDM4MmUzMDJmMzIzMTJkMzIz NDIwM2QzZTIwMzIzMDMwMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8YP0DANBgkqhkiG9w0BAQsF AAOCAQEAeIMQEhp2N3LHgfheN6se8+cKzgF+kLaiYh1Cv5I/Pk/3FbzbIuV+VPwJ rrsheaSMXfoPwgqfmYQSdjEp86GDSggDU5FtdyTPGz+n9QPrz1aZU8Z/wq/nodlk C+ORWnaUgoMKoU9ky8IBLdyQCPD5FmG2AL2Vcq3kWmk9jxK1Qdt5WaMDAvm9Gz3k v7tjptPa6y5S1fDUDsDJIbk4OOvhxDzAWw9eRAAA/7A/SU7g1Ezkt5NIwC6h+FCi Ihcw0HnZXT/jdbAPdc43c0z5U578x6CANdjMLd8U9BszarUB4art8Jb52gplK7VX fRsjpskfjdq7yl+RGWHZ7eRaXbwECg== -----END CERTIFICATE-----Generated at Thu Mar 26 14:11:04 2026 by rpki-client