$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa File: 3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa (raw, json) Hash identifier: uLZDGlXg3KvufPKwdXmGZ+Gz66BxfHgEKYxeqVuh8X8= Subject key identifier: DF:FA:CE:14:F0:F2:22:2E:F9:D0:C9:A3:7B:9B:8A:98:D9:68:C7:AB Certificate issuer: /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Certificate serial: 028E2A3E23DAF0CB044C6BFE9ABC2295B4CA53A7 Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa Signing time: Mon 01 Sep 2025 13:29:45 +0000 ROA not before: Mon 01 Sep 2025 13:24:45 +0000 ROA not after: Mon 31 Aug 2026 13:29:45 +0000 asID: 212238 IP address blocks: 192.109.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 22:58:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:8e:2a:3e:23:da:f0:cb:04:4c:6b:fe:9a:bc:22:95:b4:ca:53:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4 Validity Not Before: Sep 1 13:24:45 2025 GMT Not After : Aug 31 13:29:45 2026 GMT Subject: CN=DFFACE14F0F2222EF9D0C9A37B9B8A98D968C7AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:02:08:bf:ce:02:77:94:3a:33:e0:30:f9:56: 40:6d:89:33:a3:dc:8b:b6:72:ae:60:5b:3a:cb:69: 28:33:c3:2a:e1:77:2d:d1:ed:27:23:19:e4:ee:5f: f0:26:ce:5d:87:e3:38:6d:a2:4f:c8:38:43:7f:51: c9:0b:8b:69:e9:94:eb:d4:14:1e:ac:66:2a:ca:d3: 43:1b:5b:9b:bc:92:63:ea:2c:3c:fb:08:45:5f:3f: f1:1d:96:0b:67:18:f0:01:73:5d:58:ec:b4:9e:5c: c4:8e:91:44:0f:b3:98:05:29:e5:d8:ec:3b:9f:df: 28:04:d6:d1:1d:c2:95:6c:f6:b2:6d:1b:47:75:99: 16:d0:47:62:8e:8c:96:5e:e7:6b:23:62:44:e3:cb: de:cb:aa:29:1c:ca:60:cc:21:98:cc:a9:76:8d:a0: 3e:b9:c0:a5:8c:a4:71:0e:61:28:81:85:4f:80:66: ca:71:6e:06:47:1d:44:17:98:96:e1:01:26:2c:74: 69:d8:95:ca:90:3c:c6:c8:01:70:7b:07:0d:e1:9e: 94:45:fe:43:eb:12:12:cd:3e:7e:83:d5:f1:7c:4d: a2:f9:92:4d:1e:37:ed:6d:aa:49:d5:6c:69:a6:4a: 73:e8:98:a3:26:70:4b:74:09:0d:2a:f9:37:eb:33: 67:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FA:CE:14:F0:F2:22:2E:F9:D0:C9:A3:7B:9B:8A:98:D9:68:C7:AB X509v3 Authority Key Identifier: keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3135392e302f32342d3234203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.109.159.0/24 Signature Algorithm: sha256WithRSAEncryption 50:21:61:29:ec:20:9c:3f:d5:bd:70:ac:fc:ee:1a:27:a4:5a: 11:5d:50:b9:9c:c8:44:12:97:40:42:2c:04:db:6b:22:60:ce: 44:75:b7:d5:d2:b6:68:7b:96:05:b7:18:17:d7:1b:44:f0:22: 79:42:6d:6b:cf:60:c2:b9:1c:6d:a5:a0:01:16:c0:d2:1b:87: 2e:11:27:fd:be:16:46:c7:ed:68:48:19:13:9e:b2:4a:4d:15: 99:e3:ce:81:65:3d:04:62:7f:7a:cf:73:7c:2f:52:04:45:86: 35:a9:6b:78:35:f3:d3:d0:ed:09:46:d9:a0:96:35:56:e0:31: 88:4c:55:f5:9f:ba:d9:ca:b6:93:d3:e9:3d:d1:b4:cd:0e:9a: c6:71:98:54:e6:fe:b1:8e:e1:00:87:7a:e0:2a:da:6f:4d:cb: ab:29:3b:59:8f:91:58:4a:21:e8:fd:66:c1:e4:40:a5:38:d2: 4e:60:d0:48:c8:7e:c1:ae:9c:c5:eb:bd:d9:55:1a:a8:1c:18: 10:df:7f:8a:c8:b3:4d:f3:e6:c7:9b:ef:f5:61:c0:f1:3f:9a: 44:17:f0:42:0f:55:91:d4:75:89:08:f1:19:7e:4a:eb:11:95: 1c:a7:fd:6e:ca:21:52:75:df:b9:4c:a3:05:f6:21:c5:8e:7e: 49:b6:7c:2d -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUAo4qPiPa8MsETGv+mrwilbTKU6cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5 N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwOTAxMTMyNDQ1WhcNMjYwODMxMTMyOTQ1 WjAzMTEwLwYDVQQDEyhERkZBQ0UxNEYwRjIyMjJFRjlEMEM5QTM3QjlCOEE5OEQ5 NjhDN0FCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gIIv84Cd5Q6 M+Aw+VZAbYkzo9yLtnKuYFs6y2koM8Mq4Xct0e0nIxnk7l/wJs5dh+M4baJPyDhD f1HJC4tp6ZTr1BQerGYqytNDG1ubvJJj6iw8+whFXz/xHZYLZxjwAXNdWOy0nlzE jpFED7OYBSnl2Ow7n98oBNbRHcKVbPaybRtHdZkW0EdijoyWXudrI2JE48vey6op HMpgzCGYzKl2jaA+ucCljKRxDmEogYVPgGbKcW4GRx1EF5iW4QEmLHRp2JXKkDzG yAFwewcN4Z6URf5D6xISzT5+g9XxfE2i+ZJNHjftbapJ1Wxppkpz6JijJnBLdAkN Kvk36zNn4wIDAQABo4ICtjCCArIwHQYDVR0OBBYEFN/6zhTw8iIu+dDJo3ubipjZ aMerMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTM1MzkyZTMwMmYzMjM0MmQz MjM0MjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAbZ8wDQYJKoZIhvcN AQELBQADggEBAFAhYSnsIJw/1b1wrPzuGiekWhFdULmcyEQSl0BCLATbayJgzkR1 t9XStmh7lgW3GBfXG0TwInlCbWvPYMK5HG2loAEWwNIbhy4RJ/2+FkbH7WhIGROe skpNFZnjzoFlPQRif3rPc3wvUgRFhjWpa3g189PQ7QlG2aCWNVbgMYhMVfWfutnK tpPT6T3RtM0OmsZxmFTm/rGO4QCHeuAq2m9Ny6spO1mPkVhKIej9ZsHkQKU40k5g 0EjIfsGunMXrvdlVGqgcGBDff4rIs03z5seb7/VhwPE/mkQX8EIPVZHUdYkI8Rl+ SusRlRyn/W7KIVJ137lMowX2IcWOfkm2fC0= -----END CERTIFICATE-----Generated at Wed Nov 5 09:52:54 2025 by rpki-client