$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32312e302f32342d3234203d3e203239383032.roa File: 3139322e302e32312e302f32342d3234203d3e203239383032.roa (raw, json) Hash identifier: h9as1IQ9Fn1T51MI0wwKYXyebTLPoTGJUXaE11DTkFA= Subject key identifier: 2D:E2:3E:A0:2F:3E:20:C0:FF:09:11:9D:9F:F3:DB:5E:42:E9:40:CF Certificate issuer: /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Certificate serial: 407E3BD75944B071D45C8C328485791F15AEB7AD Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32312e302f32342d3234203d3e203239383032.roa Signing time: Mon 12 Oct 2026 09:36:20 +0000 ROA not before: Mon 12 Oct 2026 09:31:20 +0000 ROA not after: Mon 11 Oct 2027 09:36:20 +0000 asID: 29802 IP address blocks: 192.0.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 10:27:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:7e:3b:d7:59:44:b0:71:d4:5c:8c:32:84:85:79:1f:15:ae:b7:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575 Validity Not Before: Oct 12 09:31:20 2026 GMT Not After : Oct 11 09:36:20 2027 GMT Subject: CN=2DE23EA02F3E20C0FF09119D9FF3DB5E42E940CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:96:52:5b:b1:f8:20:9d:4d:61:d7:dc:96: 50:4f:95:a2:64:06:7b:61:a7:cd:44:c4:74:c5:d9: 31:ba:a4:05:19:8e:98:9b:b8:b9:92:76:7d:ed:e7: 34:74:c9:89:96:38:6e:8d:ab:16:3e:f5:8d:8c:b2: 12:96:cd:07:2e:ee:5d:f9:41:5d:7d:17:0b:8b:2a: e6:a4:1c:61:ac:03:ef:e4:8b:05:ca:34:5e:a7:e5: b7:e2:6d:e7:9a:4a:bb:df:ea:09:53:01:48:15:87: c3:e3:8b:3c:20:79:b9:1a:fd:15:11:61:cf:db:68: ef:86:d3:2f:58:b4:ed:18:19:ca:ef:97:36:72:f3: 4f:15:6b:c2:bd:ea:6a:90:a1:16:62:e0:72:ba:e3: 2e:f5:58:a6:8a:50:00:97:75:ac:2b:d4:43:9d:97: 30:04:c7:cb:ba:6a:0d:92:a4:26:65:48:ef:02:4c: 72:d8:0c:3b:36:65:72:48:86:c1:41:da:81:ff:a4: c1:57:5b:cb:46:8c:b8:36:83:a4:17:0f:07:74:df: a6:ac:bf:14:04:17:38:93:ba:46:7b:c7:40:5a:06: 10:a4:53:00:6f:54:61:99:28:4d:8c:ab:b5:7c:94: 1c:6f:ac:10:bd:32:fd:f9:d7:b5:61:d7:04:61:c9: 3b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E2:3E:A0:2F:3E:20:C0:FF:09:11:9D:9F:F3:DB:5E:42:E9:40:CF X509v3 Authority Key Identifier: keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32312e302f32342d3234203d3e203239383032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.0.21.0/24 Signature Algorithm: sha256WithRSAEncryption 66:e8:a7:e0:b6:df:c6:db:ca:e0:df:bb:90:71:45:20:79:f2: 76:ec:44:65:2c:69:eb:c4:9d:0d:08:7a:81:92:b0:bd:7e:8c: 7d:a7:9b:99:e4:01:e6:32:0c:b4:bc:20:a8:16:a8:d4:bc:6b: 88:ab:32:31:b1:1f:96:d4:b6:0b:76:fa:7e:0d:9c:6e:bc:5c: ce:ee:4c:5f:fe:93:3f:36:02:21:a4:92:65:6f:d0:6c:a7:5f: d0:28:2a:26:e2:ed:f1:df:97:3f:1d:04:16:6c:b4:57:14:31: 89:57:0b:44:5f:bf:e2:f0:5b:a9:65:cc:5f:32:27:d5:f6:f6: 52:29:56:3c:31:1d:69:10:9e:51:da:bf:69:40:ac:84:01:ef: 46:41:cd:04:06:c8:f7:fe:48:9c:28:8b:b3:e7:86:19:b8:3f: 4b:6d:87:d4:5a:20:b5:bc:7c:ce:4d:77:c0:3d:63:61:51:86: 9a:fb:a2:21:27:36:8e:76:c5:0b:34:02:19:01:4c:13:34:07: f4:9a:f5:f0:3f:50:20:47:be:8b:dd:6f:a6:43:e5:3e:50:5d: 60:cd:4d:66:12:93:0d:88:e6:e0:1a:91:4f:ab:bd:81:d0:9e: 72:77:eb:9f:a7:f6:90:a6:d1:94:7f:22:7c:1e:17:a5:e4:6c: 9a:c1:c7:77 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUQH4711lEsHHUXIwyhIV5HxWut60wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYxMDEyMDkzMTIwWhcNMjcxMDExMDkzNjIw WjAzMTEwLwYDVQQDEygyREUyM0VBMDJGM0UyMEMwRkYwOTExOUQ5RkYzREI1RTQy RTk0MENGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskCWUlux+CCd TWHX3JZQT5WiZAZ7YafNRMR0xdkxuqQFGY6Ym7i5knZ97ec0dMmJljhujasWPvWN jLISls0HLu5d+UFdfRcLiyrmpBxhrAPv5IsFyjRep+W34m3nmkq73+oJUwFIFYfD 44s8IHm5Gv0VEWHP22jvhtMvWLTtGBnK75c2cvNPFWvCvepqkKEWYuByuuMu9Vim ilAAl3WsK9RDnZcwBMfLumoNkqQmZUjvAkxy2Aw7NmVySIbBQdqB/6TBV1vLRoy4 NoOkFw8HdN+mrL8UBBc4k7pGe8dAWgYQpFMAb1RhmShNjKu1fJQcb6wQvTL9+de1 YdcEYck7sQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFC3iPqAvPiDA/wkRnZ/z215C 6UDPMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5 ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzIzMTJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABUwDQYJKoZIhvcNAQELBQADggEB AGbop+C238bbyuDfu5BxRSB58nbsRGUsaevEnQ0IeoGSsL1+jH2nm5nkAeYyDLS8 IKgWqNS8a4irMjGxH5bUtgt2+n4NnG68XM7uTF/+kz82AiGkkmVv0GynX9AoKibi 7fHflz8dBBZstFcUMYlXC0Rfv+LwW6llzF8yJ9X29lIpVjwxHWkQnlHav2lArIQB 70ZBzQQGyPf+SJwoi7Pnhhm4P0tth9RaILW8fM5Nd8A9Y2FRhpr7oiEnNo52xQs0 AhkBTBM0B/Sa9fA/UCBHvovdb6ZD5T5QXWDNTWYSkw2I5uAakU+rvYHQnnJ365+n 9pCm0ZR/InweF6XkbJrBx3c= -----END CERTIFICATE-----Generated at Thu Nov 5 12:22:46 2026 by rpki-client