$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e203134333135.roa File: 3230382e39312e3138392e302f32342d3234203d3e203134333135.roa (raw, json) Hash identifier: Drus8KC1DUPrvEw7vVoArsBWhNIO0AwFK9O3LwWwi64= Subject key identifier: 3B:98:B5:41:F5:AF:DA:B6:EA:FE:53:CB:14:06:CA:DC:38:D9:E0:76 Certificate issuer: /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845 Certificate serial: 42592C0B34ED8E252F55CEC7AF94DF30E13C767A Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e203134333135.roa Signing time: Tue 03 Jun 2025 08:29:01 +0000 ROA not before: Tue 03 Jun 2025 08:24:01 +0000 ROA not after: Tue 02 Jun 2026 08:29:01 +0000 asID: 14315 IP address blocks: 208.91.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:59:2c:0b:34:ed:8e:25:2f:55:ce:c7:af:94:df:30:e1:3c:76:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845 Validity Not Before: Jun 3 08:24:01 2025 GMT Not After : Jun 2 08:29:01 2026 GMT Subject: CN=3B98B541F5AFDAB6EAFE53CB1406CADC38D9E076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:60:0c:43:23:bd:74:fd:09:78:6a:9b:fb:fb: 1e:63:46:34:c8:78:a2:b9:d3:bd:c3:93:e1:4c:f2: eb:67:b4:46:f7:2f:c1:ab:9a:ff:f2:6c:76:67:00: ca:6b:5f:00:2c:6b:6f:be:38:97:77:f1:ac:19:bd: 8c:54:dd:ce:0a:3e:33:19:86:be:a8:16:25:c5:81: 22:76:ac:22:59:32:11:aa:72:27:79:20:95:7c:ef: 34:2d:78:5c:da:bf:25:8e:2b:8b:13:fb:b5:0e:33: 57:86:c4:68:b6:d2:ef:96:0a:15:a4:54:6a:2e:77: d5:2b:01:9c:c7:a0:2c:e1:d4:c4:b8:a2:5f:ce:5a: a7:50:1d:00:29:25:6b:e8:65:a5:6d:69:bf:09:49: 77:74:b6:ee:76:f1:e7:d0:42:04:36:74:ea:58:df: 23:bd:85:9c:37:72:5a:91:81:b9:68:8c:00:e7:bf: 82:09:a5:b9:28:91:ba:0f:8f:cb:48:eb:55:7f:51: 03:41:01:ed:4d:92:73:fd:b4:10:ef:02:e8:7c:1d: ea:39:50:f8:6b:60:80:cf:a2:d1:a7:a2:7e:c3:8d: 3a:1c:cd:d6:63:6d:15:4b:78:6c:13:24:a7:e2:12: a4:79:3f:b9:fe:b0:15:3f:e2:83:76:ad:6d:f4:2f: b6:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:98:B5:41:F5:AF:DA:B6:EA:FE:53:CB:14:06:CA:DC:38:D9:E0:76 X509v3 Authority Key Identifier: keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e203134333135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 208.91.189.0/24 Signature Algorithm: sha256WithRSAEncryption 52:41:ce:86:c7:4a:44:af:1a:49:9c:ed:48:32:18:22:1b:02: 6e:dc:62:c9:00:0b:da:e2:24:aa:22:55:f0:04:3e:e9:39:f9: 8a:38:d2:0f:6f:12:cc:8e:dd:8f:b3:d2:1a:77:80:3f:7b:16: 3c:da:09:f3:56:52:18:c2:08:75:d9:b2:33:ef:4b:42:da:8a: 96:5a:e5:7c:35:ca:0b:a1:0a:89:2e:73:6a:8e:fd:d8:26:9a: 1e:6a:5f:ce:f6:11:d4:2e:b9:07:ff:8e:55:a8:f9:24:70:78: d5:6c:bb:60:92:9f:09:8a:1a:41:05:2c:58:d5:ee:95:0e:ed: ad:1e:a9:fd:5c:82:74:77:82:85:e7:0b:ac:b8:38:9a:55:2c: dc:e6:83:0f:23:12:84:71:99:73:19:c7:6c:68:cc:b2:ea:9b: f3:3d:dd:de:2a:83:93:05:32:11:4d:9d:bb:30:84:5c:84:0b: 2a:0f:2d:a9:74:8d:3a:a2:49:f2:c2:46:7b:4d:02:c2:0b:7c: 11:7b:70:09:da:15:ff:fa:10:4f:a5:50:46:72:89:00:e9:79: 60:ae:7e:23:f5:7b:34:d0:a4:ce:2e:55:b8:42:f2:60:37:b0: 3a:ac:d3:55:74:28:56:d3:88:d0:55:c0:aa:00:87:65:53:16: 90:91:a1:b6 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUQlksCzTtjiUvVc7Hr5TfMOE8dnowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNThmNzIxNzRhMGE5ZTNkMDdhMzdjYWQ4N2MyMjM1YTc2 MmVmYTZhOWI2MjAzNzI4NDUwHhcNMjUwNjAzMDgyNDAxWhcNMjYwNjAyMDgyOTAx WjAzMTEwLwYDVQQDEygzQjk4QjU0MUY1QUZEQUI2RUFGRTUzQ0IxNDA2Q0FEQzM4 RDlFMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2AMQyO9dP0J eGqb+/seY0Y0yHiiudO9w5PhTPLrZ7RG9y/Bq5r/8mx2ZwDKa18ALGtvvjiXd/Gs Gb2MVN3OCj4zGYa+qBYlxYEidqwiWTIRqnIneSCVfO80LXhc2r8ljiuLE/u1DjNX hsRottLvlgoVpFRqLnfVKwGcx6As4dTEuKJfzlqnUB0AKSVr6GWlbWm/CUl3dLbu dvHn0EIENnTqWN8jvYWcN3JakYG5aIwA57+CCaW5KJG6D4/LSOtVf1EDQQHtTZJz /bQQ7wLofB3qOVD4a2CAz6LRp6J+w406HM3WY20VS3hsEySn4hKkeT+5/rAVP+KD dq1t9C+27wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDuYtUH1r9q26v5TyxQGytw4 2eB2MB8GA1UdIwQYMBaAFOmrgtTZv0wW6m58+vPuFM/sWkqKMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2OTk4NjYzZDgwNzAyLzAv RTlBQjgyRDREOUJGNEMxNkVBNkU3Q0ZBRjNFRTE0Q0ZFQzVBNEE4QS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1L2FlODVkMjRhLTc3ZDQtNGNmNy04MGFhLWMwNzExOTljMjg4OS81OGY3 MjE3NGEwYTllM2QwN2EzN2NhZDg3YzIyMzVhNzYyZWZhNmE5YjYyMDM3Mjg0NS5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4Njk5 ODY2M2Q4MDcwMi8wLzMyMzAzODJlMzkzMTJlMzEzODM5MmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzEzNDMzMzEzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANBbvTANBgkqhkiG9w0BAQsF AAOCAQEAUkHOhsdKRK8aSZztSDIYIhsCbtxiyQAL2uIkqiJV8AQ+6Tn5ijjSD28S zI7dj7PSGneAP3sWPNoJ81ZSGMIIddmyM+9LQtqKllrlfDXKC6EKiS5zao792Caa HmpfzvYR1C65B/+OVaj5JHB41Wy7YJKfCYoaQQUsWNXulQ7trR6p/VyCdHeChecL rLg4mlUs3OaDDyMShHGZcxnHbGjMsuqb8z3d3iqDkwUyEU2duzCEXIQLKg8tqXSN OqJJ8sJGe00Cwgt8EXtwCdoV//oQT6VQRnKJAOl5YK5+I/V7NNCkzi5VuELyYDew OqzTVXQoVtOI0FXAqgCHZVMWkJGhtg== -----END CERTIFICATE-----Generated at Wed Nov 5 01:59:11 2025 by rpki-client