$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa File: 3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa (raw, json) Hash identifier: eKoIN10j/2Hon83T63WZTzSYurwOdnvqjMCuwgUsj2k= Subject key identifier: CA:81:4A:A7:F6:3B:3E:06:A8:22:CA:8C:9F:B3:63:67:71:34:1A:F2 Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 67654DEAF89A998055FCE58BF613FC4AFEE4E19B Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa Signing time: Tue 22 Apr 2025 08:28:30 +0000 ROA not before: Tue 22 Apr 2025 08:23:30 +0000 ROA not after: Tue 21 Apr 2026 08:28:30 +0000 asID: 9009 IP address blocks: 192.109.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 17:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:65:4d:ea:f8:9a:99:80:55:fc:e5:8b:f6:13:fc:4a:fe:e4:e1:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Apr 22 08:23:30 2025 GMT Not After : Apr 21 08:28:30 2026 GMT Subject: CN=CA814AA7F63B3E06A822CA8C9FB3636771341AF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:0a:59:ef:f5:9c:24:ce:fe:3f:75:78:60: 72:c7:ed:66:97:dc:58:8b:55:a0:2f:27:fa:ec:87: fd:a9:47:bb:fc:ce:20:0f:b8:69:26:57:05:60:7f: a3:18:30:a6:96:97:97:fe:a3:45:4a:1f:9e:5f:60: 6a:20:16:c2:ad:40:b2:0b:cf:e1:7e:51:fe:c2:b1: ff:b8:29:0e:94:eb:7b:c9:87:d4:0b:a9:aa:f1:d3: ee:fe:d1:9d:da:c0:74:e4:b2:cc:62:a9:42:ba:6f: 1a:a1:74:16:43:89:08:b9:06:42:3c:fb:98:79:6a: f1:4e:a0:7d:71:7d:aa:d9:0f:6c:f5:d2:87:94:ba: c4:c8:4b:84:11:97:a6:10:0a:39:2f:12:11:fb:6d: 8b:2a:90:d7:83:8e:5a:1d:97:0f:62:32:e0:2a:15: 6f:45:e9:e0:c3:4b:53:57:82:40:72:14:92:45:95: 1f:9c:4a:ef:29:c5:a0:11:87:f4:2b:50:73:2c:a9: d0:49:6f:bc:15:07:ff:b6:a6:b4:b9:38:31:28:dc: 0b:f7:7e:f6:da:cf:79:f4:6a:c2:8a:fa:a4:a8:ae: 61:fb:9d:42:5f:aa:30:34:37:cc:56:9e:f8:5b:67: 66:08:aa:f5:cd:d7:26:0b:ce:34:38:7d:e7:a6:72: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:81:4A:A7:F6:3B:3E:06:A8:22:CA:8C:9F:B3:63:67:71:34:1A:F2 X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132352e302f32342d3234203d3e2039303039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.125.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:b8:64:23:b4:10:58:81:ee:8b:18:69:8c:e8:41:93:aa:3c: 38:cb:32:56:ab:56:be:4e:2e:97:f3:f6:1b:81:c0:6f:82:78: aa:17:b8:a6:c5:f8:e0:ae:b4:a2:e5:dc:60:0d:ae:55:bc:6c: e2:3a:83:bf:da:1c:d4:d9:2d:66:35:43:11:45:c7:1f:b9:2f: 2e:c4:65:fe:5d:4a:c2:bc:27:3e:56:5f:5a:c3:e8:b0:4e:bf: f4:ca:eb:07:13:87:81:3b:02:b7:bc:57:94:7d:e8:a1:18:03: f8:5f:0a:70:c0:e8:0a:40:c2:10:f7:a1:5f:fc:a4:91:25:d9: 5b:04:e9:ae:ca:9c:a1:7c:28:11:0a:d2:f5:59:79:f0:6a:c9: dd:e0:95:c3:b0:6b:82:bc:88:a6:72:35:72:7d:bc:6a:7d:5b: c2:ba:af:00:28:13:f0:2e:03:40:71:f7:fb:e3:27:6a:f8:50: 68:07:75:dc:40:bc:c0:8f:65:4a:0b:32:1a:f2:d4:79:ad:1a: f6:86:5d:19:90:38:54:de:39:50:e9:ab:e8:ce:7e:d3:ea:7f: 70:88:4e:04:c5:5e:2a:86:33:52:e2:cb:e3:10:a2:68:f4:50: 4a:00:88:d5:ed:54:24:a2:9e:a3:9d:f8:54:d1:89:de:d0:99: ff:3b:86:0e -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUZ2VN6viamYBV/OWL9hP8Sv7k4ZswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNDIyMDgyMzMwWhcNMjYwNDIxMDgyODMw WjAzMTEwLwYDVQQDEyhDQTgxNEFBN0Y2M0IzRTA2QTgyMkNBOEM5RkIzNjM2Nzcx MzQxQUYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzMKWe/1nCTO /j91eGByx+1ml9xYi1WgLyf67If9qUe7/M4gD7hpJlcFYH+jGDCmlpeX/qNFSh+e X2BqIBbCrUCyC8/hflH+wrH/uCkOlOt7yYfUC6mq8dPu/tGd2sB05LLMYqlCum8a oXQWQ4kIuQZCPPuYeWrxTqB9cX2q2Q9s9dKHlLrEyEuEEZemEAo5LxIR+22LKpDX g45aHZcPYjLgKhVvRengw0tTV4JAchSSRZUfnErvKcWgEYf0K1BzLKnQSW+8FQf/ tqa0uTgxKNwL93722s959GrCivqkqK5h+51CX6owNDfMVp74W2dmCKr1zdcmC840 OH3npnIqZwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMqBSqf2Oz4GqCLKjJ+zY2dx NBryMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMyMzUyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBtfTANBgkqhkiG9w0BAQsF AAOCAQEASrhkI7QQWIHuixhpjOhBk6o8OMsyVqtWvk4ul/P2G4HAb4J4qhe4psX4 4K60ouXcYA2uVbxs4jqDv9oc1NktZjVDEUXHH7kvLsRl/l1KwrwnPlZfWsPosE6/ 9MrrBxOHgTsCt7xXlH3ooRgD+F8KcMDoCkDCEPehX/ykkSXZWwTprsqcoXwoEQrS 9Vl58GrJ3eCVw7BrgryIpnI1cn28an1bwrqvACgT8C4DQHH3++MnavhQaAd13EC8 wI9lSgsyGvLUea0a9oZdGZA4VN45UOmr6M5+0+p/cIhOBMVeKoYzUuLL4xCiaPRQ SgCI1e1UJKKeo534VNGJ3tCZ/zuGDg== -----END CERTIFICATE-----Generated at Mon Apr 28 00:59:54 2025 by rpki-client