$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e302e302f32322d3232203d3e20383334.roa File: 3134342e3136382e302e302f32322d3232203d3e20383334.roa (raw, json) Hash identifier: 4/uA5OCPQmbBApHZMi0dgh0mFnP1I9xbqI0T5QBpj5s= Subject key identifier: CC:59:A6:A1:2C:6F:4D:6C:AC:6D:85:75:AF:8D:68:B3:C5:51:04:66 Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 7A21FDAC2775FB6DDD8F4CA98BD3ACDD30E4889B Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e302e302f32322d3232203d3e20383334.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 834 IP address blocks: 144.168.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:21:fd:ac:27:75:fb:6d:dd:8f:4c:a9:8b:d3:ac:dd:30:e4:88:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=CC59A6A12C6F4D6CAC6D8575AF8D68B3C5510466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:75:77:5c:72:e0:84:67:ec:0e:a8:9f:ec:48: 7b:18:6b:43:a0:97:b0:fb:44:38:35:f8:71:03:c2: ec:96:4f:5a:32:4a:bc:b5:a1:63:8f:eb:6c:8f:7e: 37:c4:1a:63:d3:f3:5b:11:09:b8:f8:0f:64:bb:78: 76:61:e7:a8:d0:bb:7a:5e:bd:30:63:57:6c:0e:f4: e4:ba:55:72:db:a2:52:1b:ab:cc:b6:fd:76:3c:c8: 6a:12:42:24:ad:d0:14:95:3d:4e:dc:fd:7e:54:49: b2:0e:bc:2c:8f:3a:fd:0c:a4:2e:cb:15:d7:68:95: 01:77:34:bd:98:66:ee:92:12:c2:4b:ab:bd:18:6f: 41:06:78:0d:5f:5b:30:55:d4:52:ba:a5:ab:ad:fc: 6d:f8:45:eb:8b:b7:8c:df:fa:98:c3:4c:01:d7:fc: bb:b6:97:c1:b3:45:8f:bd:76:f3:9b:29:cd:6a:a9: 33:0d:54:01:eb:eb:24:70:1d:4e:d0:6e:89:ae:9f: 20:95:56:22:db:66:64:30:b0:28:3a:d9:a3:ba:2f: 61:e6:a4:2c:6d:bf:e1:27:05:d3:6f:87:19:22:cc: 3a:2b:34:4f:92:40:f0:47:35:eb:82:5c:19:db:13: 14:07:e3:2b:a1:96:c3:6a:a6:ef:8e:6e:0c:48:21: 0a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:59:A6:A1:2C:6F:4D:6C:AC:6D:85:75:AF:8D:68:B3:C5:51:04:66 X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e302e302f32322d3232203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.0.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:1b:8a:82:69:54:84:da:ab:fe:bf:58:8d:4e:15:9b:2a:65: 6d:98:7c:22:12:6c:ce:a0:94:6d:85:aa:3c:b0:09:ec:b7:12: 3e:14:6d:f6:b1:78:61:03:28:8c:b9:ed:ec:d7:c0:32:42:0a: 5b:e1:90:f8:f4:2b:28:91:43:a7:c4:98:a3:f0:a5:b4:dc:fe: d2:80:75:71:46:fd:4a:61:80:5e:1c:b7:cc:07:a1:bb:d9:28: 10:58:50:5f:5e:81:8c:5f:0e:cc:5e:40:1f:e9:56:b2:33:de: a2:ec:c3:99:8a:85:19:f8:24:97:cf:42:b1:a2:9f:86:bf:65: a3:32:9f:75:59:02:e0:a2:1e:10:93:23:71:0d:fe:a2:d0:c4: d0:32:c3:73:f0:d1:30:1d:33:53:cf:52:d1:f0:0f:0c:e1:81: b5:f3:ab:e5:7d:01:34:48:56:8f:c6:2c:c6:38:62:a9:a6:3a: c7:86:cf:a8:ed:d1:f9:7e:9e:ac:3b:02:58:77:55:99:f6:16: fa:a4:cd:19:4f:7c:c8:f4:bc:e6:07:b2:da:08:3b:6b:25:58: 57:4a:4c:1e:44:96:18:e7:eb:53:8d:a5:a1:d1:68:af:7d:de: 8b:66:4c:5d:16:13:77:49:51:95:16:a2:27:c8:cb:8c:ff:62: 99:a6:c8:7f -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgIUeiH9rCd1+23dj0ypi9Os3TDkiJswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEyhDQzU5QTZBMTJDNkY0RDZDQUM2RDg1NzVBRjhENjhCM0M1 NTEwNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHV3XHLghGfs Dqif7Eh7GGtDoJew+0Q4NfhxA8Lslk9aMkq8taFjj+tsj343xBpj0/NbEQm4+A9k u3h2Yeeo0Lt6Xr0wY1dsDvTkulVy26JSG6vMtv12PMhqEkIkrdAUlT1O3P1+VEmy Drwsjzr9DKQuyxXXaJUBdzS9mGbukhLCS6u9GG9BBngNX1swVdRSuqWrrfxt+EXr i7eM3/qYw0wB1/y7tpfBs0WPvXbzmynNaqkzDVQB6+skcB1O0G6Jrp8glVYi22Zk MLAoOtmjui9h5qQsbb/hJwXTb4cZIsw6KzRPkkDwRzXrglwZ2xMUB+MroZbDaqbv jm4MSCEKvQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFMxZpqEsb01srG2Fda+NaLPF UQRmMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgx NzU0ZjRlNjQ5LzAvMzEzNDM0MmUzMTM2MzgyZTMwMmUzMDJmMzIzMjJkMzIzMjIw M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkKgAMA0GCSqGSIb3DQEBCwUAA4IBAQAL G4qCaVSE2qv+v1iNThWbKmVtmHwiEmzOoJRthao8sAnstxI+FG32sXhhAyiMue3s 18AyQgpb4ZD49CsokUOnxJij8KW03P7SgHVxRv1KYYBeHLfMB6G72SgQWFBfXoGM Xw7MXkAf6VayM96i7MOZioUZ+CSXz0Kxop+Gv2WjMp91WQLgoh4QkyNxDf6i0MTQ MsNz8NEwHTNTz1LR8A8M4YG186vlfQE0SFaPxizGOGKppjrHhs+o7dH5fp6sOwJY d1WZ9hb6pM0ZT3zI9LzmB7LaCDtrJVhXSkweRJYY5+tTjaWh0Wivfd6LZkxdFhN3 SVGVFqInyMuM/2KZpsh/ -----END CERTIFICATE-----Generated at Tue Nov 18 08:56:59 2025 by rpki-client