$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20383334.roa File: 3230342e36392e3231372e302f32342d3234203d3e20383334.roa (raw, json) Hash identifier: BC1ybUN53TpcYGwbW2MpR+P0iwIX2dEN3F1iv3p2PWk= Subject key identifier: 5C:CF:2A:42:AE:7F:9E:35:71:FE:4C:F0:34:18:26:FF:A7:8D:1D:64 Certificate issuer: /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220 Certificate serial: 407ECE5BD7460AF306873B4B268C0900F61D047B Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20383334.roa Signing time: Mon 21 Apr 2025 10:23:35 +0000 ROA not before: Mon 21 Apr 2025 10:18:35 +0000 ROA not after: Mon 20 Apr 2026 10:23:35 +0000 asID: 834 IP address blocks: 204.69.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:ce:5b:d7:46:0a:f3:06:87:3b:4b:26:8c:09:00:f6:1d:04:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220 Validity Not Before: Apr 21 10:18:35 2025 GMT Not After : Apr 20 10:23:35 2026 GMT Subject: CN=5CCF2A42AE7F9E3571FE4CF0341826FFA78D1D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:c2:41:4a:d9:e9:ce:b4:c3:21:cc:38:90: d4:94:9e:aa:6b:c2:81:c8:00:00:19:9c:e3:82:79: a1:18:8f:19:4f:96:f8:0d:ac:24:1b:3e:c2:7f:56: 12:85:13:e3:0d:d4:ea:fe:b4:29:ae:2f:ec:50:0d: 21:e2:57:5e:9e:ab:2f:8e:ca:7b:61:1c:7a:e6:1e: 5c:71:b9:c8:7a:53:55:17:c4:1f:89:f3:15:ab:cb: 13:45:9d:f7:2d:e3:1f:44:22:52:d3:f8:5f:40:c5: 92:1e:90:69:8f:f1:8c:11:0f:b9:c0:88:ca:52:d5: 47:47:59:52:47:f6:d8:63:b4:40:21:6c:ee:8c:86: ba:9f:b5:f2:42:cd:3d:d5:c2:5e:7c:ab:e3:2b:64: 80:e7:01:ac:10:e6:d5:a5:7b:36:6f:57:af:0d:e4: c0:2a:65:ba:74:50:f9:44:66:ca:0e:4f:f1:fc:fd: 10:40:c4:42:c0:ee:79:7d:df:61:d3:11:76:c7:c2: 24:02:56:9a:60:5f:23:42:1a:eb:1c:d0:ba:ff:6a: 6d:00:41:c2:e8:a4:bc:ef:6b:89:f7:96:9a:76:66: 9f:31:df:7b:89:cf:2e:38:85:cc:3b:81:97:d2:e1: a5:3e:91:10:a9:3a:51:05:d5:8b:1f:4a:cb:f1:18: 19:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:CF:2A:42:AE:7F:9E:35:71:FE:4C:F0:34:18:26:FF:A7:8D:1D:64 X509v3 Authority Key Identifier: keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 204.69.217.0/24 Signature Algorithm: sha256WithRSAEncryption 27:7d:e5:6f:d0:be:be:d9:af:5d:47:59:fe:11:01:b0:2a:2b: 25:d3:f7:36:64:fa:79:38:49:6c:c3:a5:44:66:07:32:a1:8e: ef:35:10:54:3a:44:ee:c7:5c:80:d4:ff:1f:cd:84:bf:9d:fb: 0f:a4:d0:de:04:f7:34:bc:5f:a9:12:68:b3:b8:93:7e:e8:a3: b9:30:f2:00:66:c4:0f:3f:28:ff:f7:6f:d9:e4:8b:86:6f:09: 57:f2:d3:24:84:eb:68:94:8a:33:20:32:69:b6:6e:fa:3c:c7: 62:65:be:d6:e0:7f:1c:15:97:4f:d3:f8:42:62:07:5d:10:d0: 29:d7:9e:18:39:1b:5f:25:23:52:5b:f4:b5:98:ab:f0:92:4c: c5:ba:e7:32:9d:e4:4e:80:f2:f6:89:fb:05:3f:4b:f1:21:b4: f6:e7:c3:a5:e0:40:67:9a:61:85:16:6f:dd:b6:8e:98:b3:26: fe:a0:ab:5e:e5:ff:6e:a8:7d:1d:7d:8e:16:92:d9:61:91:ee: 65:e7:a5:4d:fd:b1:2f:f2:20:85:9c:96:23:b5:24:b6:c5:f2: b2:c8:4d:7d:70:88:8b:81:b2:7b:d3:6f:c0:81:7e:84:a0:4b: ba:a7:ba:b5:4f:d0:4f:66:dc:31:da:70:f8:3b:d7:f3:cb:60: 59:be:e1:3d -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUQH7OW9dGCvMGhztLJowJAPYdBHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmYyZGIxNDRhZTFjOGFlNWI4NjE5YTVlMDliNGQ5YjU3 OTRkMzdlOTA2MTIwODcyMjAwHhcNMjUwNDIxMTAxODM1WhcNMjYwNDIwMTAyMzM1 WjAzMTEwLwYDVQQDEyg1Q0NGMkE0MkFFN0Y5RTM1NzFGRTRDRjAzNDE4MjZGRkE3 OEQxRDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobbCQUrZ6c60 wyHMOJDUlJ6qa8KByAAAGZzjgnmhGI8ZT5b4DawkGz7Cf1YShRPjDdTq/rQpri/s UA0h4ldenqsvjsp7YRx65h5ccbnIelNVF8QfifMVq8sTRZ33LeMfRCJS0/hfQMWS HpBpj/GMEQ+5wIjKUtVHR1lSR/bYY7RAIWzujIa6n7XyQs091cJefKvjK2SA5wGs EObVpXs2b1evDeTAKmW6dFD5RGbKDk/x/P0QQMRCwO55fd9h0xF2x8IkAlaaYF8j QhrrHNC6/2ptAEHC6KS872uJ95aadmafMd97ic8uOIXMO4GX0uGlPpEQqTpRBdWL H0rL8RgZjQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFzPKkKuf541cf5M8DQYJv+n jR1kMB8GA1UdIwQYMBaAFKKNJzMJyfx2VUJJVF0p04gGgOp/MA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3YTg4MzE0MmUwLzEv QTI4RDI3MzMwOUM5RkM3NjU1NDI0OTU0NUQyOUQzODgwNjgwRUE3Ri5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1L2Q5NmRmMmM0LTJiYmEtNDBlMi04NDFkLThjN2MwYThkZWUxMy82ZjJk YjE0NGFlMWM4YWU1Yjg2MTlhNWUwOWI0ZDliNTc5NGQzN2U5MDYxMjA4NzIyMC5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3 YTg4MzE0MmUwLzEvMzIzMDM0MmUzNjM5MmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0 MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMRdkwDQYJKoZIhvcNAQELBQADggEB ACd95W/Qvr7Zr11HWf4RAbAqKyXT9zZk+nk4SWzDpURmBzKhju81EFQ6RO7HXIDU /x/NhL+d+w+k0N4E9zS8X6kSaLO4k37oo7kw8gBmxA8/KP/3b9nki4ZvCVfy0ySE 62iUijMgMmm2bvo8x2JlvtbgfxwVl0/T+EJiB10Q0CnXnhg5G18lI1Jb9LWYq/CS TMW65zKd5E6A8vaJ+wU/S/EhtPbnw6XgQGeaYYUWb922jpizJv6gq17l/26ofR19 jhaS2WGR7mXnpU39sS/yIIWcliO1JLbF8rLITX1wiIuBsnvTb8CBfoSgS7qnurVP 0E9m3DHacPg71/PLYFm+4T0= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:24 2025 by rpki-client