$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32312d3234203d3e20383334.roa File: 3139322e302e31362e302f32312d3234203d3e20383334.roa (raw, json) Hash identifier: rB/58XQdlKxJEbjyepvlYSwZSg7hegVMORj4hhP1oAg= Subject key identifier: 3A:0B:44:32:65:E8:D5:5A:B7:DF:49:06:E8:1C:F5:E4:0A:C7:A2:36 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 1CE5AF61157EEAB5F310D6B12C27967124446E48 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32312d3234203d3e20383334.roa Signing time: Tue 08 Apr 2025 06:55:58 +0000 ROA not before: Tue 08 Apr 2025 06:50:58 +0000 ROA not after: Tue 07 Apr 2026 06:55:58 +0000 asID: 834 IP address blocks: 192.0.16.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Apr 2025 21:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e5:af:61:15:7e:ea:b5:f3:10:d6:b1:2c:27:96:71:24:44:6e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Apr 8 06:50:58 2025 GMT Not After : Apr 7 06:55:58 2026 GMT Subject: CN=3A0B443265E8D55AB7DF4906E81CF5E40AC7A236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2b:03:75:ed:54:85:e9:0f:22:cd:60:a5:6b: de:cd:ac:60:d7:1a:ce:b8:e0:dc:ab:f1:28:bc:48: 1a:27:a8:fc:36:f3:ab:ad:9b:f7:ab:4d:e1:57:fe: 3c:2f:b9:e3:00:34:6c:0a:54:d0:e2:61:1d:47:fe: 5b:4c:85:76:0e:40:29:4c:6c:86:94:1e:a0:5e:d9: ef:ec:93:39:36:13:db:cc:b4:5a:c6:28:23:a9:fb: 18:63:6a:0e:96:15:4b:3c:d7:a6:17:2c:d9:60:36: 13:9c:9d:fb:95:51:67:d3:c1:e4:d4:3e:03:57:ca: f2:61:57:c8:e8:14:cb:7c:a6:a4:1e:da:80:24:ee: a8:d8:ec:48:bb:15:c7:48:f3:8c:ed:79:6f:c3:79: e0:d4:66:91:6f:26:b0:6c:90:83:46:78:d9:73:cd: 9a:4e:26:2b:6f:fd:0d:a9:7d:b3:1a:11:5a:9d:55: dd:b4:22:3e:68:a9:3a:81:02:5a:c3:ed:9d:73:5d: 0d:cb:ff:f3:82:6c:e1:66:7e:97:f5:e6:3c:5c:cd: 29:85:13:02:0d:67:0c:fa:ad:4b:b4:85:95:af:0f: 37:00:87:37:bf:a8:be:81:0a:4a:39:dc:96:82:dd: 17:aa:c7:6e:bd:26:ae:ca:ad:21:48:b7:e6:3e:16: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0B:44:32:65:E8:D5:5A:B7:DF:49:06:E8:1C:F5:E4:0A:C7:A2:36 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32312d3234203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.16.0/21 Signature Algorithm: sha256WithRSAEncryption 9a:08:63:e0:44:41:19:cd:cb:82:98:7f:cc:7c:9f:8e:61:f4: 16:65:66:cb:a1:44:d4:51:28:21:45:38:04:f9:ea:e8:bc:0c: f0:4c:8e:1e:21:43:f4:a1:85:d5:55:c8:39:82:03:30:61:3c: 69:30:8f:7d:47:89:c7:c7:89:1c:9c:3e:1a:98:5c:d2:a6:d5: a0:7d:0a:d2:e9:b4:a8:dd:36:ff:48:b2:d0:6b:1a:6b:12:9f: ed:f7:67:07:48:89:96:cb:51:c8:da:ee:ab:aa:4b:1a:d5:6a: 74:7c:85:f1:70:7d:d6:28:e0:b4:4d:30:36:0a:e7:a4:54:f5: 85:08:b9:e6:bb:aa:da:64:18:80:54:38:8a:8a:b8:4c:5f:ef: 5c:77:55:29:d5:f9:74:62:76:4d:0d:9c:ed:b8:74:97:34:0d: 03:d4:3b:bd:3b:0a:05:5c:5d:0d:db:82:6f:0f:d9:93:f5:66: 9f:ef:d3:c7:cd:31:7f:07:1b:f1:14:67:d1:97:52:11:73:1e: 92:8c:14:33:60:7a:ae:ba:5f:20:5d:56:aa:14:e2:c4:29:91: 73:9e:e9:c3:58:7e:d8:95:55:e0:e4:6e:fc:c7:10:d6:8e:76: 88:f8:1b:a7:9c:d6:99:1b:da:11:05:ec:6e:50:89:83:93:d3: d7:02:96:ec -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUHOWvYRV+6rXzENaxLCeWcSREbkgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNDA4MDY1MDU4WhcNMjYwNDA3MDY1NTU4 WjAzMTEwLwYDVQQDEygzQTBCNDQzMjY1RThENTVBQjdERjQ5MDZFODFDRjVFNDBB QzdBMjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlysDde1UhekP Is1gpWvezaxg1xrOuODcq/EovEgaJ6j8NvOrrZv3q03hV/48L7njADRsClTQ4mEd R/5bTIV2DkApTGyGlB6gXtnv7JM5NhPbzLRaxigjqfsYY2oOlhVLPNemFyzZYDYT nJ37lVFn08Hk1D4DV8ryYVfI6BTLfKakHtqAJO6o2OxIuxXHSPOM7Xlvw3ng1GaR byawbJCDRnjZc82aTiYrb/0NqX2zGhFanVXdtCI+aKk6gQJaw+2dc10Ny//zgmzh Zn6X9eY8XM0phRMCDWcM+q1LtIWVrw83AIc3v6i+gQpKOdyWgt0XqsduvSauyq0h SLfmPhZoWwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFDoLRDJl6NVat99JBugc9eQK x6I2MB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzEzNjJlMzAyZjMyMzEyZDMyMzQyMDNk M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEA8AAEDANBgkqhkiG9w0BAQsFAAOCAQEAmghj 4ERBGc3Lgph/zHyfjmH0FmVmy6FE1FEoIUU4BPnq6LwM8EyOHiFD9KGF1VXIOYID MGE8aTCPfUeJx8eJHJw+Gphc0qbVoH0K0um0qN02/0iy0GsaaxKf7fdnB0iJlstR yNruq6pLGtVqdHyF8XB91ijgtE0wNgrnpFT1hQi55ruq2mQYgFQ4ioq4TF/vXHdV KdX5dGJ2TQ2c7bh0lzQNA9Q7vTsKBVxdDduCbw/Zk/Vmn+/Tx80xfwcb8RRn0ZdS EXMekowUM2B6rrpfIF1WqhTixCmRc57pw1h+2JVV4ORu/McQ1o52iPgbp5zWmRva EQXsblCJg5PT1wKW7A== -----END CERTIFICATE-----Generated at Sat Apr 26 12:53:49 2025 by rpki-client