$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31362e302f32312d3231203d3e203430323634.roa File: 3134342e3136382e31362e302f32312d3231203d3e203430323634.roa (raw, json) Hash identifier: dhFF/Ty5XvpUF53HoiXJQNifp/HjwIO6CkeTyaW4ueI= Subject key identifier: 43:2B:3A:44:C1:3E:C0:6C:BA:84:B3:9D:D8:23:E1:8C:4C:2D:41:8F Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 0A14323A0BB9C9693327A8E7E12C79197219FE17 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31362e302f32312d3231203d3e203430323634.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 40264 IP address blocks: 144.168.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:14:32:3a:0b:b9:c9:69:33:27:a8:e7:e1:2c:79:19:72:19:fe:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=432B3A44C13EC06CBA84B39DD823E18C4C2D418F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:aa:4e:c0:e0:59:42:fe:14:0f:67:36:44: 1e:5b:10:2d:12:7f:93:51:9b:67:d3:1e:4f:6d:11: dc:0e:1d:35:05:92:4d:a6:a1:af:87:25:e9:53:8b: d9:20:d3:d3:2b:55:4b:95:c0:87:13:67:21:9a:d0: 8c:89:6c:58:3c:05:71:b5:09:70:95:fc:e8:3d:be: cc:b3:f6:02:b8:32:1c:b4:6a:95:19:15:28:52:3a: bd:d2:bf:3f:08:c0:41:f0:cc:14:f6:61:44:ca:8b: 39:a3:9a:e7:3a:6b:72:a8:b6:05:29:af:d2:79:e7: 17:2d:a0:f9:b6:10:20:ff:28:79:55:81:c5:5d:77: 73:2f:5c:d8:a4:84:ab:04:8f:24:78:11:d9:12:ef: a2:b0:b0:dd:96:3f:d1:6a:01:dd:36:2d:aa:0c:87: 14:89:cc:88:45:06:21:a3:d6:cb:7b:55:7a:10:a5: f1:d8:cd:3d:0a:e1:cd:ee:38:df:42:7c:c9:c2:33: af:18:b2:e0:f1:9b:37:2c:07:f0:b2:5d:24:1a:d4: 49:cd:3d:19:ef:b0:2d:9f:d1:8a:91:d0:a2:8c:e5: 48:36:b7:e8:cd:3a:40:26:60:58:68:49:8d:4c:16: f5:f8:84:e1:7f:3e:07:b6:52:73:b6:e0:12:95:e7: a8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2B:3A:44:C1:3E:C0:6C:BA:84:B3:9D:D8:23:E1:8C:4C:2D:41:8F X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e31362e302f32312d3231203d3e203430323634.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.16.0/21 Signature Algorithm: sha256WithRSAEncryption 37:ce:2f:1d:5b:a7:e9:bb:34:45:bb:f4:6d:77:b6:e1:1a:ff: 90:cb:4b:f6:a8:07:ed:10:d2:bc:85:5f:af:21:7b:66:2d:01: f6:30:32:da:43:a5:94:44:49:2c:55:0e:76:c4:8e:50:d8:4f: 57:5e:59:31:0b:8e:1b:7d:90:d4:40:0c:9d:63:68:ff:45:5b: 39:6a:93:45:87:b9:cc:d3:69:2a:3e:ca:f4:8c:cd:66:60:9b: bc:92:75:65:1e:e5:85:df:52:d6:81:f7:ed:e8:7a:d4:ce:6e: 91:bb:98:b4:26:d2:06:c3:59:df:4e:9c:91:46:14:8e:2a:6f: ff:56:33:57:fb:fe:97:dd:ac:9d:ef:8d:90:d8:38:90:78:c9: b6:92:5e:bf:98:23:7f:68:dc:d9:a3:7b:c8:99:9c:1c:cd:48: 99:10:16:18:f1:4f:2d:1b:84:e4:1e:72:ed:28:2d:39:ba:a8: 8b:96:b8:9e:d2:d7:d5:a0:4b:5f:77:f0:ce:2a:aa:e2:e8:65: 9e:30:84:92:50:fb:00:05:81:72:2e:55:7a:77:c8:32:db:cb: ba:ee:73:92:ad:42:20:c0:35:a0:92:f2:f0:99:1b:a8:e6:e7: e5:6b:0e:14:44:62:c9:f0:b0:7c:66:e2:78:59:b3:db:26:99: e3:d8:57:1f -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIUChQyOgu5yWkzJ6jn4Sx5GXIZ/hcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEyg0MzJCM0E0NEMxM0VDMDZDQkE4NEIzOUREODIzRTE4QzRD MkQ0MThGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj2qTsDgWUL+ FA9nNkQeWxAtEn+TUZtn0x5PbRHcDh01BZJNpqGvhyXpU4vZINPTK1VLlcCHE2ch mtCMiWxYPAVxtQlwlfzoPb7Ms/YCuDIctGqVGRUoUjq90r8/CMBB8MwU9mFEyos5 o5rnOmtyqLYFKa/SeecXLaD5thAg/yh5VYHFXXdzL1zYpISrBI8keBHZEu+isLDd lj/RagHdNi2qDIcUicyIRQYho9bLe1V6EKXx2M09CuHN7jjfQnzJwjOvGLLg8Zs3 LAfwsl0kGtRJzT0Z77Atn9GKkdCijOVINrfozTpAJmBYaEmNTBb1+IThfz4HtlJz tuASleeoLQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEMrOkTBPsBsuoSzndgj4YxM LUGPMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4 MTc1NGY0ZTY0OS8wLzMxMzQzNDJlMzEzNjM4MmUzMTM2MmUzMDJmMzIzMTJkMzIz MTIwM2QzZTIwMzQzMDMyMzYzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA5CoEDANBgkqhkiG9w0BAQsF AAOCAQEAN84vHVun6bs0Rbv0bXe24Rr/kMtL9qgH7RDSvIVfryF7Zi0B9jAy2kOl lERJLFUOdsSOUNhPV15ZMQuOG32Q1EAMnWNo/0VbOWqTRYe5zNNpKj7K9IzNZmCb vJJ1ZR7lhd9S1oH37eh61M5ukbuYtCbSBsNZ306ckUYUjipv/1YzV/v+l92sne+N kNg4kHjJtpJev5gjf2jc2aN7yJmcHM1ImRAWGPFPLRuE5B5y7SgtObqoi5a4ntLX 1aBLX3fwziqq4uhlnjCEklD7AAWBci5VenfIMtvLuu5zkq1CIMA1oJLy8JkbqObn 5WsOFERiyfCwfGbieFmz2yaZ49hXHw== -----END CERTIFICATE-----Generated at Tue Nov 18 08:56:59 2025 by rpki-client