$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e203235313938.roa File: 3139322e302e31372e302f32342d3234203d3e203235313938.roa (raw, json) Hash identifier: lt9A9oAvRucseXEQYoV358XxdxGw46wF/dx2rL/z370= Subject key identifier: B3:00:D4:CC:09:B4:9A:AB:B2:C2:81:FC:4A:D3:D8:DF:44:DC:DA:49 Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 24E2A8CA72052731E53A802E1F8E498097C6A731 Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e203235313938.roa Signing time: Mon 28 Jul 2025 11:24:42 +0000 ROA not before: Mon 28 Jul 2025 11:19:42 +0000 ROA not after: Mon 27 Jul 2026 11:24:42 +0000 asID: 25198 IP address blocks: 192.0.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 06:16:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e2:a8:ca:72:05:27:31:e5:3a:80:2e:1f:8e:49:80:97:c6:a7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Jul 28 11:19:42 2025 GMT Not After : Jul 27 11:24:42 2026 GMT Subject: CN=B300D4CC09B49AABB2C281FC4AD3D8DF44DCDA49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:b3:10:36:45:ca:a8:9f:7b:d5:da:fd:ed: a9:4e:4d:12:94:96:85:d9:10:bb:5d:6a:ee:d9:a0: 1b:aa:4a:ce:de:16:0b:60:1e:c6:13:94:4a:86:0f: a4:a7:32:3d:d2:3d:f6:4f:a8:03:5d:b1:d5:6c:3b: 8f:b2:71:0e:17:d2:74:bb:17:16:3b:fe:59:d6:4c: d1:d6:8f:41:3a:1a:2a:0c:3d:d3:35:6d:d3:b0:0c: 06:65:b6:36:af:fe:bd:d8:b6:8d:88:eb:02:6b:ff: df:8c:be:78:5c:61:30:14:de:4c:9d:06:e1:04:dc: 83:69:18:77:98:a6:f6:5a:70:e0:97:10:dc:3d:be: b8:76:32:54:e3:6b:43:72:7f:2c:3a:92:62:65:6f: 6e:db:62:7d:8d:46:b2:66:65:73:86:e6:85:5e:99: 28:65:ac:a6:a3:ee:61:d5:5e:e5:45:9e:0c:7e:cf: 56:fb:44:45:67:dd:0e:be:fa:4a:0f:68:45:26:21: c0:17:dd:3b:a1:ad:4a:72:29:3f:3b:66:ba:f1:4a: 0c:f0:06:4f:40:75:ef:c1:f8:67:5b:b6:c7:39:91: 9d:15:21:b6:0f:94:ad:89:52:4d:9d:0a:b4:1a:d1: d1:88:37:e2:62:b6:02:e4:48:f0:34:86:a3:6b:eb: 50:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:00:D4:CC:09:B4:9A:AB:B2:C2:81:FC:4A:D3:D8:DF:44:DC:DA:49 X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e203235313938.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.17.0/24 Signature Algorithm: sha256WithRSAEncryption b2:d2:6a:06:3a:62:9c:d1:57:71:3e:ea:04:5d:89:d2:8e:18: cd:12:0e:ec:5e:6c:84:c2:7d:0e:d7:81:1e:50:c3:da:32:df: 4d:2c:51:53:7d:4c:c1:f0:43:80:8c:d0:80:be:35:67:ee:42: 81:ee:34:2f:a0:19:5c:29:56:55:60:b4:77:d8:d0:72:7f:b1: 9a:15:a9:b1:dc:60:97:9a:3b:72:90:fc:bf:cb:0a:e0:a7:82: 1e:83:45:06:ba:b1:34:60:d4:0f:c2:f0:61:a7:27:74:0f:3e: 2d:e7:a6:b3:82:4d:82:a3:51:1e:f3:57:48:8e:37:d0:0a:55: 55:93:27:8e:9d:71:5d:d4:74:01:fa:c7:9a:43:45:c9:b0:df: f6:80:ab:93:45:fd:02:d0:a7:7a:58:e9:dc:69:63:7b:62:db: 36:fc:34:b2:c4:16:53:24:85:40:87:95:ea:d5:fd:d2:b6:41: 2e:21:cf:22:db:84:3b:62:45:21:ec:2b:b6:b3:cb:82:a8:07: 66:27:5a:ce:8e:c1:60:2e:d4:fa:7e:5d:04:61:6c:a1:8f:76: 6e:34:e7:63:84:9e:ec:4d:76:ad:e9:4d:65:f9:1d:b5:a7:e4: f0:91:dd:0e:51:13:4a:5a:a7:8a:28:b6:a6:49:26:a8:b7:98: d2:fb:ca:70 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUJOKoynIFJzHlOoAuH45JgJfGpzEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNzI4MTExOTQyWhcNMjYwNzI3MTEyNDQy WjAzMTEwLwYDVQQDEyhCMzAwRDRDQzA5QjQ5QUFCQjJDMjgxRkM0QUQzRDhERjQ0 RENEQTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOOzEDZFyqif e9Xa/e2pTk0SlJaF2RC7XWru2aAbqkrO3hYLYB7GE5RKhg+kpzI90j32T6gDXbHV bDuPsnEOF9J0uxcWO/5Z1kzR1o9BOhoqDD3TNW3TsAwGZbY2r/692LaNiOsCa//f jL54XGEwFN5MnQbhBNyDaRh3mKb2WnDglxDcPb64djJU42tDcn8sOpJiZW9u22J9 jUayZmVzhuaFXpkoZaymo+5h1V7lRZ4Mfs9W+0RFZ90OvvpKD2hFJiHAF907oa1K cik/O2a68UoM8AZPQHXvwfhnW7bHOZGdFSG2D5StiVJNnQq0GtHRiDfiYrYC5Ejw NIaja+tQPQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFLMA1MwJtJqrssKB/ErT2N9E 3NpJMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzEzNzJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMyMzUzMTM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABEwDQYJKoZIhvcNAQELBQADggEB ALLSagY6YpzRV3E+6gRdidKOGM0SDuxebITCfQ7XgR5Qw9oy300sUVN9TMHwQ4CM 0IC+NWfuQoHuNC+gGVwpVlVgtHfY0HJ/sZoVqbHcYJeaO3KQ/L/LCuCngh6DRQa6 sTRg1A/C8GGnJ3QPPi3nprOCTYKjUR7zV0iON9AKVVWTJ46dcV3UdAH6x5pDRcmw 3/aAq5NF/QLQp3pY6dxpY3ti2zb8NLLEFlMkhUCHlerV/dK2QS4hzyLbhDtiRSHs K7azy4KoB2YnWs6OwWAu1Pp+XQRhbKGPdm4052OEnuxNdq3pTWX5HbWn5PCR3Q5R E0pap4ootqZJJqi3mNL7ynA= -----END CERTIFICATE-----Generated at Mon Aug 4 08:16:10 2025 by rpki-client