$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e342e302f32342d3234203d3e203534303034.roa File: 3134342e3136382e342e302f32342d3234203d3e203534303034.roa (raw, json) Hash identifier: ftyr2y8fpvMAV1PU9qEDY5JTlKTf6MB94cVKKnLHhzg= Subject key identifier: 09:A2:C9:0C:94:3C:5E:B3:BE:A9:5B:EC:91:44:0D:7A:E7:50:C9:27 Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 2B71A6DEE56C2F477D64039A02F19EFC80183ADA Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e342e302f32342d3234203d3e203534303034.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 54004 IP address blocks: 144.168.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:a6:de:e5:6c:2f:47:7d:64:03:9a:02:f1:9e:fc:80:18:3a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=09A2C90C943C5EB3BEA95BEC91440D7AE750C927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:f3:70:90:12:64:cb:91:0c:cc:7d:0f:29: eb:33:ba:47:00:b8:2b:ed:5c:67:68:77:c5:1a:c1: 11:84:5f:ae:81:8f:25:5c:72:6b:2d:38:d6:fb:8e: bc:fb:29:24:a4:4a:25:ad:40:0a:4f:94:d3:49:9b: f8:10:67:b2:82:9c:be:ec:1d:cd:bb:b8:b2:2f:99: dd:9f:a4:92:50:b9:2c:17:c4:ab:a4:64:7c:48:64: 1e:97:32:48:a7:ac:c1:c1:18:2a:81:15:da:6d:9e: 56:13:29:fa:fb:92:15:7e:3b:09:15:80:7d:65:a8: 25:bb:52:01:3f:80:bb:d0:08:20:7f:e1:c8:7a:2a: f0:00:d7:21:f8:c8:c9:4d:bf:f4:3a:de:96:ff:e2: f9:b6:22:cf:fe:1a:66:60:3f:73:c1:be:ec:c6:1a: c3:33:70:8e:2b:45:0e:8e:8f:1a:8e:93:93:44:30: 13:45:39:33:21:5c:d0:3e:f8:17:31:26:24:31:0a: c2:4f:ad:19:52:92:2f:ab:0b:c5:72:dc:51:1a:92: e4:9b:1f:39:8a:86:7b:9f:5b:b4:37:d8:a0:43:81: 11:b1:a3:e5:a9:60:35:ae:4c:c9:94:0d:67:12:10: f4:a1:51:50:28:4e:09:dc:56:7f:8a:77:b8:b8:72: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A2:C9:0C:94:3C:5E:B3:BE:A9:5B:EC:91:44:0D:7A:E7:50:C9:27 X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e342e302f32342d3234203d3e203534303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.4.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:13:22:5e:48:d1:be:8a:4e:b9:c1:96:1f:c0:16:b7:83:f1: 3b:91:a0:2e:0d:68:1f:9b:70:ac:dd:1f:7b:63:8f:d7:9d:f3: b2:3b:43:41:3b:44:65:44:3d:d4:15:7a:3e:48:ec:36:cf:6f: ae:d6:4e:24:c4:46:9f:10:92:1a:47:5f:77:a0:78:cb:37:73: da:d4:8f:8d:25:5b:27:46:02:bb:55:a3:04:e6:23:06:96:df: 66:cd:ba:80:a9:e0:bf:f2:67:08:ac:e0:0d:1e:c9:d1:8d:c5: 2d:59:c4:56:a6:b1:76:b6:3b:71:f5:12:4d:b2:f1:df:2a:70: 9a:34:8b:2f:fe:1a:fb:7b:9a:bc:59:9b:ba:4f:d0:c8:fd:e0: 8f:eb:fd:62:a2:09:1c:44:c9:ae:1e:5f:05:4a:41:e5:70:a7: 2d:5d:19:31:00:5e:b9:af:cf:f6:1e:c3:1a:99:8a:1b:e7:72: f1:12:a1:53:27:1d:6b:48:2e:03:17:74:a7:b2:46:43:2f:08: 34:57:d9:4c:c9:43:b7:86:6f:ba:4c:c1:c2:4b:d9:e3:cf:8e: 5e:c4:a4:20:71:81:40:be:c3:c6:b5:8b:54:9a:36:9d:c3:9d: fb:46:2d:77:2c:fc:ae:aa:43:2a:9a:a3:c7:e8:3b:50:05:71: c2:69:62:c1 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUK3Gm3uVsL0d9ZAOaAvGe/IAYOtowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEygwOUEyQzkwQzk0M0M1RUIzQkVBOTVCRUM5MTQ0MEQ3QUU3 NTBDOTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr/zcJASZMuR DMx9DynrM7pHALgr7VxnaHfFGsERhF+ugY8lXHJrLTjW+468+ykkpEolrUAKT5TT SZv4EGeygpy+7B3Nu7iyL5ndn6SSULksF8SrpGR8SGQelzJIp6zBwRgqgRXabZ5W Eyn6+5IVfjsJFYB9Zaglu1IBP4C70Aggf+HIeirwANch+MjJTb/0Ot6W/+L5tiLP /hpmYD9zwb7sxhrDM3COK0UOjo8ajpOTRDATRTkzIVzQPvgXMSYkMQrCT60ZUpIv qwvFctxRGpLkmx85ioZ7n1u0N9igQ4ERsaPlqWA1rkzJlA1nEhD0oVFQKE4J3FZ/ ine4uHJFOQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAmiyQyUPF6zvqlb7JFEDXrn UMknMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4 MTc1NGY0ZTY0OS8wLzMxMzQzNDJlMzEzNjM4MmUzNDJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM1MzQzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACQqAQwDQYJKoZIhvcNAQELBQAD ggEBABwTIl5I0b6KTrnBlh/AFreD8TuRoC4NaB+bcKzdH3tjj9ed87I7Q0E7RGVE PdQVej5I7DbPb67WTiTERp8QkhpHX3egeMs3c9rUj40lWydGArtVowTmIwaW32bN uoCp4L/yZwis4A0eydGNxS1ZxFamsXa2O3H1Ek2y8d8qcJo0iy/+Gvt7mrxZm7pP 0Mj94I/r/WKiCRxEya4eXwVKQeVwpy1dGTEAXrmvz/YewxqZihvncvESoVMnHWtI LgMXdKeyRkMvCDRX2UzJQ7eGb7pMwcJL2ePPjl7EpCBxgUC+w8a1i1SaNp3DnftG LXcs/K6qQyqao8foO1AFccJpYsE= -----END CERTIFICATE-----Generated at Tue Nov 18 08:56:58 2025 by rpki-client