$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3137302e302f32332d3233203d3e20323132323338.roa File: 3130342e3231392e3137302e302f32332d3233203d3e20323132323338.roa (raw, json) Hash identifier: mUNHoVBQFDhouR7Y0cThFFD4Eij4t0i86kNzczlJQAU= Subject key identifier: E1:5E:D9:22:F3:DB:7B:DB:EC:5F:3E:96:4D:B8:09:2E:1F:DF:43:B8 Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 12ABAABA43C0DEDD262E0CBC43D4A69D2ED05560 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3137302e302f32332d3233203d3e20323132323338.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 212238 IP address blocks: 104.219.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:ab:aa:ba:43:c0:de:dd:26:2e:0c:bc:43:d4:a6:9d:2e:d0:55:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=E15ED922F3DB7BDBEC5F3E964DB8092E1FDF43B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:19:50:b2:b9:1d:ee:0b:c9:2c:fc:b9:33:46: 46:7d:41:42:82:bc:f0:c5:2c:31:1c:b5:1e:14:56: d9:7f:bf:f0:b2:cb:04:77:7c:63:06:c5:67:35:16: d8:ad:80:be:06:d8:72:f5:2b:18:8e:8e:35:3a:18: 21:1f:96:b9:e0:73:4f:61:c0:22:7d:de:f7:71:81: fb:86:3d:77:c4:a3:13:88:c0:ad:05:0d:d7:cc:3a: e8:20:14:6f:84:ef:87:60:34:d4:f0:c3:8b:9e:e4: d2:48:7c:e4:95:86:6b:5a:eb:0b:e1:6c:73:71:5e: ca:ef:5f:f1:fb:81:8e:bb:63:8d:e5:49:68:2c:ff: d8:90:67:c5:da:80:9d:9b:63:a8:e4:b9:fb:fa:be: 83:25:fc:83:be:76:cd:b3:fa:e4:7d:6b:dc:50:be: 2f:3d:4e:6e:c4:73:14:5b:ec:c3:d8:a5:cc:aa:36: fb:b1:3e:4f:1b:fd:fc:ba:5a:1b:fb:a6:82:aa:04: a1:31:b4:43:af:c5:7d:ff:05:31:80:b6:d7:fb:9c: 9c:8c:27:a2:8c:d5:12:fc:21:cc:13:8c:92:98:d7: 5a:3a:46:97:ef:c7:cb:73:e2:f4:49:27:cf:46:b2: 37:bd:06:7e:1d:b6:7c:5e:67:c2:ec:15:05:08:b1: 22:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:5E:D9:22:F3:DB:7B:DB:EC:5F:3E:96:4D:B8:09:2E:1F:DF:43:B8 X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3130342e3231392e3137302e302f32332d3233203d3e20323132323338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.219.170.0/23 Signature Algorithm: sha256WithRSAEncryption 99:08:ba:50:13:5d:4a:1f:e4:5d:59:dc:92:12:18:a9:5f:69: 5c:61:f7:eb:ed:bc:f9:dc:a1:34:64:e7:57:44:16:d1:9d:3a: 13:2b:d3:84:e5:83:e1:a0:ab:8d:c3:50:d5:f1:0f:51:f7:3b: ba:13:53:d9:0b:6e:57:f9:16:34:4e:13:9a:02:3f:34:7a:2a: 50:32:55:01:a3:ee:29:70:30:6c:ff:d9:b5:66:d8:11:88:e5: bb:44:52:cc:58:af:f0:f5:9d:11:71:57:73:69:97:3e:8e:cb: 3b:53:3d:d9:6d:d2:0e:67:0d:65:af:5f:73:82:fc:be:be:c2: e2:20:04:a6:d5:b0:c1:30:8a:c6:f6:e9:06:c5:a4:6e:4d:58: e3:0e:c9:e8:c2:e2:da:fc:4b:e7:36:9c:0f:d6:7f:21:eb:72: fd:ab:93:94:f2:d8:c0:ee:fb:ae:e6:1f:16:60:61:e2:74:3a: f1:c2:43:2e:65:bc:67:01:75:bb:aa:f1:fa:f5:e0:3e:16:cb: 33:8b:7c:e0:4a:5f:1d:1f:27:3d:8b:ca:c6:59:63:f2:cb:30: da:54:24:0f:bc:47:0f:33:cc:d0:76:c4:8a:8b:b6:5f:44:9c: d5:86:47:7a:d4:a0:27:b2:1f:84:6a:05:38:8f:b9:46:6d:6d: dd:cd:a8:6c -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIUEququkPA3t0mLgy8Q9SmnS7QVWAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEyhFMTVFRDkyMkYzREI3QkRCRUM1RjNFOTY0REI4MDkyRTFG REY0M0I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxlQsrkd7gvJ LPy5M0ZGfUFCgrzwxSwxHLUeFFbZf7/wsssEd3xjBsVnNRbYrYC+Bthy9SsYjo41 OhghH5a54HNPYcAifd73cYH7hj13xKMTiMCtBQ3XzDroIBRvhO+HYDTU8MOLnuTS SHzklYZrWusL4WxzcV7K71/x+4GOu2ON5UloLP/YkGfF2oCdm2Oo5Ln7+r6DJfyD vnbNs/rkfWvcUL4vPU5uxHMUW+zD2KXMqjb7sT5PG/38ulob+6aCqgShMbRDr8V9 /wUxgLbX+5ycjCeijNUS/CHME4ySmNdaOkaX78fLc+L0SSfPRrI3vQZ+HbZ8XmfC 7BUFCLEiXwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFOFe2SLz23vb7F8+lk24CS4f 30O4MB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4 MTc1NGY0ZTY0OS8wLzMxMzAzNDJlMzIzMTM5MmUzMTM3MzAyZTMwMmYzMjMzMmQz MjMzMjAzZDNlMjAzMjMxMzIzMjMzMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFo26owDQYJKoZIhvcN AQELBQADggEBAJkIulATXUof5F1Z3JISGKlfaVxh9+vtvPncoTRk51dEFtGdOhMr 04Tlg+Ggq43DUNXxD1H3O7oTU9kLblf5FjROE5oCPzR6KlAyVQGj7ilwMGz/2bVm 2BGI5btEUsxYr/D1nRFxV3Nplz6OyztTPdlt0g5nDWWvX3OC/L6+wuIgBKbVsMEw isb26QbFpG5NWOMOyejC4tr8S+c2nA/WfyHrcv2rk5Ty2MDu+67mHxZgYeJ0OvHC Qy5lvGcBdbuq8fr14D4WyzOLfOBKXx0fJz2LysZZY/LLMNpUJA+8Rw8zzNB2xIqL tl9EnNWGR3rUoCeyH4RqBTiPuUZtbd3NqGw= -----END CERTIFICATE-----Generated at Tue Nov 18 08:58:37 2025 by rpki-client