$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa File: 3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa (raw, json) Hash identifier: 4x4Op1BQad7crb63Zp7pR7NSYCw+SCMeSSbrlbSV1N8= Subject key identifier: 8F:2D:2A:52:66:B1:82:51:35:95:21:9B:18:55:53:67:73:03:AA:6B Certificate issuer: /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Certificate serial: 6A5E56648FF4C5FD17CEAC0FC3E8CE82EAEA8346 Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa Signing time: Wed 22 Jan 2025 16:28:26 +0000 ROA not before: Wed 22 Jan 2025 16:23:26 +0000 ROA not after: Wed 21 Jan 2026 16:28:26 +0000 asID: 20473 IP address blocks: 173.249.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5e:56:64:8f:f4:c5:fd:17:ce:ac:0f:c3:e8:ce:82:ea:ea:83:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b Validity Not Before: Jan 22 16:23:26 2025 GMT Not After : Jan 21 16:28:26 2026 GMT Subject: CN=8F2D2A5266B182513595219B185553677303AA6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b5:07:92:93:e0:dd:3f:a4:ef:e3:3f:eb:39: 7a:f3:80:e0:de:f2:fa:20:b5:e5:2d:c4:fa:00:f7: 19:03:dd:f2:51:cc:5a:c9:0a:8e:05:4e:0c:40:42: 3b:c6:bf:73:e6:eb:6b:bc:69:ff:da:61:0a:14:95: 9d:00:ef:9a:9f:49:11:db:6d:51:ae:0b:5c:1a:fa: bd:23:fc:ed:60:b5:82:2b:f8:d5:87:2b:40:ea:04: 9d:3c:b1:1d:0a:04:9d:4a:6e:41:eb:a9:b0:66:36: 27:c2:d5:47:68:21:f2:61:70:29:a9:34:4c:c2:c0: 68:06:fb:ca:90:5f:cc:43:47:70:d3:06:de:5a:24: b8:ac:e9:d9:83:8b:39:5c:47:cc:54:c5:c7:60:32: 9b:c4:3c:54:86:6f:dc:6d:b4:12:2f:fd:4c:34:5c: b8:0a:86:5a:01:2a:e6:b5:55:e9:e2:6f:ff:b2:75: 78:29:b2:3a:be:c0:14:17:21:83:e8:b5:53:1e:f7: fc:a3:48:06:f1:84:ee:e9:7c:ec:9a:13:27:53:47: 0d:ac:27:69:e7:17:d4:30:7e:3f:60:98:34:e8:a0: 60:4f:97:4e:43:1b:42:c0:87:b6:b6:1a:12:88:52: 13:0e:4d:6c:71:9c:08:ec:d2:62:f2:d9:2b:3c:dc: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:2A:52:66:B1:82:51:35:95:21:9B:18:55:53:67:73:03:AA:6B X509v3 Authority Key Identifier: keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137332e3234392e3138382e302f32322d3234203d3e203230343733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 173.249.188.0/22 Signature Algorithm: sha256WithRSAEncryption a1:8d:87:e9:a2:e3:49:a8:fa:88:a5:72:b0:7e:4c:a7:82:1e: 15:14:44:22:6d:c2:53:c4:65:30:35:1a:bf:37:14:ba:1d:4a: fe:8c:c2:69:70:7e:17:82:e7:97:4f:39:ab:84:e8:5b:52:10: 33:a1:51:97:94:66:af:46:42:19:11:57:94:d0:c8:99:ba:9a: 67:8d:13:f0:25:0d:2c:b8:72:01:e4:9f:2f:08:86:43:49:2e: 3b:e8:b7:d6:14:0e:30:12:e6:b0:52:01:fa:98:d1:f8:d7:6e: 77:5b:83:4b:b0:1e:6b:00:35:6d:90:7f:16:38:ac:9a:96:12: 77:0b:bb:85:0e:cc:34:b8:a8:9c:09:52:03:f8:f9:0b:61:21: d7:9d:8e:21:5e:32:67:c0:09:95:3e:1a:f4:15:92:ae:53:41: b2:35:59:99:89:a1:da:26:7e:08:1a:17:8f:af:ef:ef:db:18: f4:61:8b:77:3c:ef:d7:cc:00:79:53:f9:f6:ff:49:82:85:04: 5d:ee:7b:8a:da:2a:3c:2c:23:e1:a1:f1:ba:5d:0b:fe:e0:4f: 60:72:c2:00:b2:95:4f:2d:31:46:fe:59:3f:33:74:12:1f:06: d6:ed:26:cc:b4:a1:8f:14:36:92:70:3a:c9:93:61:35:d9:c1: 4d:5a:85:76 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUal5WZI/0xf0XzqwPw+jOgurqg0YwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjUwMTIyMTYyMzI2WhcNMjYwMTIxMTYyODI2 WjAzMTEwLwYDVQQDEyg4RjJEMkE1MjY2QjE4MjUxMzU5NTIxOUIxODU1NTM2Nzcz MDNBQTZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LUHkpPg3T+k 7+M/6zl684Dg3vL6ILXlLcT6APcZA93yUcxayQqOBU4MQEI7xr9z5utrvGn/2mEK FJWdAO+an0kR221RrgtcGvq9I/ztYLWCK/jVhytA6gSdPLEdCgSdSm5B66mwZjYn wtVHaCHyYXApqTRMwsBoBvvKkF/MQ0dw0wbeWiS4rOnZg4s5XEfMVMXHYDKbxDxU hm/cbbQSL/1MNFy4CoZaASrmtVXp4m//snV4KbI6vsAUFyGD6LVTHvf8o0gG8YTu 6XzsmhMnU0cNrCdp5xfUMH4/YJg06KBgT5dOQxtCwIe2thoSiFITDk1scZwI7NJi 8tkrPNx8QQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFI8tKlJmsYJRNZUhmxhVU2dz A6prMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1 ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj NjFiNDI2NTFkNi8wLzMxMzczMzJlMzIzNDM5MmUzMTM4MzgyZTMwMmYzMjMyMmQz MjM0MjAzZDNlMjAzMjMwMzQzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrfm8MA0GCSqGSIb3DQEB CwUAA4IBAQChjYfpouNJqPqIpXKwfkyngh4VFEQibcJTxGUwNRq/NxS6HUr+jMJp cH4XgueXTzmrhOhbUhAzoVGXlGavRkIZEVeU0MiZuppnjRPwJQ0suHIB5J8vCIZD SS476LfWFA4wEuawUgH6mNH41253W4NLsB5rADVtkH8WOKyalhJ3C7uFDsw0uKic CVID+PkLYSHXnY4hXjJnwAmVPhr0FZKuU0GyNVmZiaHaJn4IGhePr+/v2xj0YYt3 PO/XzAB5U/n2/0mChQRd7nuK2io8LCPhofG6XQv+4E9gcsIAspVPLTFG/lk/M3QS HwbW7SbMtKGPFDaScDrJk2E12cFNWoV2 -----END CERTIFICATE-----Generated at Sun Apr 27 11:18:18 2025 by rpki-client