$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa File: 3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa (raw, json) Hash identifier: dCVeeHidXvWrzoB/B5Vd6BfOXo+DCrJP8V1G4P161Gk= Subject key identifier: 4D:D7:2F:C3:8A:F3:1F:7E:AA:A6:19:6F:61:A3:AE:86:E0:98:FC:4F Certificate issuer: /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90 Certificate serial: 03D09F366A76E86050E7B3988CE4257F1C156B37 Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa Signing time: Wed 29 Oct 2025 16:03:17 +0000 ROA not before: Wed 29 Oct 2025 15:58:17 +0000 ROA not after: Wed 28 Oct 2026 16:03:17 +0000 asID: 63264 IP address blocks: 172.109.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 18:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d0:9f:36:6a:76:e8:60:50:e7:b3:98:8c:e4:25:7f:1c:15:6b:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90 Validity Not Before: Oct 29 15:58:17 2025 GMT Not After : Oct 28 16:03:17 2026 GMT Subject: CN=4DD72FC38AF31F7EAAA6196F61A3AE86E098FC4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:61:9d:d2:18:10:b2:9a:87:a9:4d:b1:19: b5:4e:a3:e8:dc:07:a3:71:fd:8b:0e:6c:a7:b9:fa: 4c:bd:51:ea:24:91:64:e9:79:81:cd:10:59:39:bf: a2:20:95:60:38:d6:0c:13:42:82:f3:2e:df:46:ea: f1:72:da:f7:09:96:12:36:f3:21:dc:de:42:0b:06: f0:51:1f:6f:73:0c:ac:c3:a8:4a:a2:cf:50:2d:44: 21:4f:56:c5:b4:4d:84:67:4a:7d:5f:f6:d1:02:ff: d0:e2:9d:1f:44:12:0c:05:7c:15:19:06:55:7f:bf: 06:f1:78:8a:d5:47:1a:a8:7d:2b:51:0a:9e:be:0a: e5:9e:13:58:72:3e:62:c7:e1:6e:1b:46:fa:ff:41: 7f:e8:7a:80:dd:ce:34:41:5b:f1:33:2d:2a:fe:1b: a2:fa:fd:de:3c:02:90:19:47:60:9f:7e:71:c2:39: 73:e9:87:81:a9:2e:3f:28:94:51:b9:d8:49:60:dc: b9:ec:ab:c9:23:63:87:1d:e3:25:51:cc:ce:e1:52: 03:05:4e:d6:e2:53:0a:e4:1d:15:76:ab:68:5e:f2: 55:f4:18:05:ad:33:e7:34:e2:eb:77:e3:b6:7e:10: 0d:4c:14:8c:0e:a2:ca:89:ee:02:9b:70:17:18:18: 5c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D7:2F:C3:8A:F3:1F:7E:AA:A6:19:6F:61:A3:AE:86:E0:98:FC:4F X509v3 Authority Key Identifier: keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3235332e302f32342d3234203d3e203633323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.109.253.0/24 Signature Algorithm: sha256WithRSAEncryption b0:8d:6d:e9:0f:a2:2c:4e:36:91:90:1f:fb:10:66:88:5a:ec: 11:c1:a2:74:e8:d1:a2:00:8a:1b:b6:d1:fa:60:03:d8:4c:7b: d9:13:26:76:30:2a:ee:db:6f:cf:4e:52:2b:a8:16:42:09:c3: a1:5e:14:0d:a3:a1:38:5e:3e:f9:1e:28:08:8d:06:4a:8d:04: 9f:3e:e2:57:7e:c9:58:fa:f5:66:48:21:41:2e:7f:87:81:b4: db:98:07:f2:21:2b:4a:38:bb:a2:01:77:65:85:a3:cd:e7:9d: 0b:8c:81:53:22:d3:15:74:1f:11:e8:bf:38:10:8a:7a:8c:12: 21:e2:8b:10:30:32:42:30:10:fe:d6:42:f0:5f:75:31:a0:79: c1:b2:bb:00:c3:5b:37:44:e1:f9:3d:12:a6:08:82:cc:d0:57: 88:af:d1:fd:4e:94:c2:92:62:f7:a7:46:59:02:7a:e1:21:8e: 69:ed:cf:c7:82:57:d5:15:80:cf:6c:68:c9:d5:1d:cf:86:25: 95:2f:53:dd:73:f0:f2:90:32:d5:ba:2f:f9:59:30:73:20:b6: 3f:13:61:2c:ea:09:11:bc:71:f1:16:2d:90:8b:05:2d:92:60: a0:a8:12:9d:2d:8c:7f:f1:46:b6:ac:0e:a2:c9:a4:0f:11:3c: 6a:31:59:31 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUA9CfNmp26GBQ57OYjOQlfxwVazcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWNiMDAyMzQzNTlmY2I3OGVlZTUxZTIwMGIwZTFlMGEx N2I3MjY5NjIwM2RjODNhOTAwHhcNMjUxMDI5MTU1ODE3WhcNMjYxMDI4MTYwMzE3 WjAzMTEwLwYDVQQDEyg0REQ3MkZDMzhBRjMxRjdFQUFBNjE5NkY2MUEzQUU4NkUw OThGQzRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb1hndIYELKa h6lNsRm1TqPo3Aejcf2LDmynufpMvVHqJJFk6XmBzRBZOb+iIJVgONYME0KC8y7f Rurxctr3CZYSNvMh3N5CCwbwUR9vcwysw6hKos9QLUQhT1bFtE2EZ0p9X/bRAv/Q 4p0fRBIMBXwVGQZVf78G8XiK1UcaqH0rUQqevgrlnhNYcj5ix+FuG0b6/0F/6HqA 3c40QVvxMy0q/hui+v3ePAKQGUdgn35xwjlz6YeBqS4/KJRRudhJYNy57KvJI2OH HeMlUczO4VIDBU7W4lMK5B0VdqtoXvJV9BgFrTPnNOLrd+O2fhANTBSMDqLKie4C m3AXGBhcVQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFE3XL8OK8x9+qqYZb2Gjrobg mPxPMB8GA1UdIwQYMBaAFIKpFjoumUhLrKB4IOxPecaGZkmLMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzAv ODJBOTE2M0EyRTk5NDg0QkFDQTA3ODIwRUM0Rjc5QzY4NjY2NDk4Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1Lzg2ZTBiMTM4LWJlZjQtNDlmZS05ZGQxLWZhNTEzODNkYmZjZS85Y2Iw MDIzNDM1OWZjYjc4ZWVlNTFlMjAwYjBlMWUwYTE3YjcyNjk2MjAzZGM4M2E5MC5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy YTkwYTJmMDk3Zi8wLzMxMzczMjJlMzEzMDM5MmUzMjM1MzMyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzNjMzMzIzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG39MA0GCSqGSIb3DQEB CwUAA4IBAQCwjW3pD6IsTjaRkB/7EGaIWuwRwaJ06NGiAIobttH6YAPYTHvZEyZ2 MCru22/PTlIrqBZCCcOhXhQNo6E4Xj75HigIjQZKjQSfPuJXfslY+vVmSCFBLn+H gbTbmAfyIStKOLuiAXdlhaPN550LjIFTItMVdB8R6L84EIp6jBIh4osQMDJCMBD+ 1kLwX3UxoHnBsrsAw1s3ROH5PRKmCILM0FeIr9H9TpTCkmL3p0ZZAnrhIY5p7c/H glfVFYDPbGjJ1R3PhiWVL1Pdc/DykDLVui/5WTBzILY/E2Es6gkRvHHxFi2QiwUt kmCgqBKdLYx/8Ua2rA6iyaQPETxqMVkx -----END CERTIFICATE-----Generated at Wed Nov 5 07:35:50 2025 by rpki-client