$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e372e302f32342d3234203d3e203534303034.roa File: 3134342e3136382e372e302f32342d3234203d3e203534303034.roa (raw, json) Hash identifier: aGvj9nu53Bk1Cd3RMDz31HaXVmxnK0Uh94MPG4UNdP8= Subject key identifier: A9:E9:60:ED:81:B7:B8:5F:8D:1B:64:DA:6D:0A:5A:D8:98:A7:0D:C0 Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 61728CDDED8EB59EC9E1F1377DE8457E90882BC7 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e372e302f32342d3234203d3e203534303034.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 54004 IP address blocks: 144.168.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:72:8c:dd:ed:8e:b5:9e:c9:e1:f1:37:7d:e8:45:7e:90:88:2b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=A9E960ED81B7B85F8D1B64DA6D0A5AD898A70DC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:40:70:e6:45:94:a3:b8:8f:ee:22:fa:a4: 04:3d:a5:d0:60:e7:15:e5:fb:d3:23:ad:2c:66:c9: 3a:8e:49:16:57:32:f2:fd:ff:94:b4:dc:a8:fe:be: e5:d8:7f:af:98:ef:f0:bb:21:34:b4:c0:21:0e:e2: be:36:97:12:be:cc:42:a2:5f:fb:e7:11:1f:29:94: 6c:d0:9d:1f:1a:f2:c3:23:f8:9a:90:03:7f:1c:56: 46:45:e1:3a:49:bf:14:9f:c0:75:48:15:da:c3:14: 28:38:d3:bd:14:66:c2:e4:71:7d:3b:cd:bb:ad:0c: 19:78:af:fe:ff:77:89:9b:e6:6d:44:1f:51:12:47: 45:e7:f9:8a:a9:96:29:e0:fa:71:5e:28:07:a2:94: ff:fb:a1:54:36:58:34:26:46:c6:7a:da:76:d3:39: b0:3b:85:cf:f1:df:8c:d8:17:8f:c0:d1:72:b6:a5: a8:63:6c:3b:e5:83:6f:04:a6:52:e6:1b:d0:f2:78: 3c:17:7a:35:51:cf:02:ec:1e:48:4b:0e:67:37:ea: e0:65:29:61:17:60:3e:f3:99:99:46:7d:c2:85:0a: 30:51:5d:7e:f3:41:61:5f:ac:00:3c:e7:db:58:a3: da:28:77:8b:db:12:24:30:58:24:d0:90:77:56:30: fc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E9:60:ED:81:B7:B8:5F:8D:1B:64:DA:6D:0A:5A:D8:98:A7:0D:C0 X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e372e302f32342d3234203d3e203534303034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.7.0/24 Signature Algorithm: sha256WithRSAEncryption 93:1f:a6:8f:c1:11:3d:2a:41:31:7c:65:56:51:e3:7f:ba:e7: 5f:f8:39:b9:2b:d6:45:c7:37:9d:c1:9c:20:bc:b9:b3:67:f4: c3:7f:74:89:b1:97:5a:8c:4c:e3:37:72:65:1d:69:56:c0:07: 22:37:f3:63:90:fb:d9:b8:4f:a6:26:d4:a4:24:4b:5c:ee:94: 82:ec:e7:39:4e:6c:b5:3a:3c:bb:58:27:ee:37:66:f9:eb:3b: 33:8e:91:0f:b1:0e:32:a1:0b:9d:c1:d4:e3:56:04:85:82:76: cd:d8:b6:86:25:01:0d:63:46:2e:8d:e5:e0:06:31:da:76:e2: a9:16:d0:ac:c8:d8:b9:1b:37:2c:f9:ea:a1:c0:65:9f:66:60: 32:e8:cd:6a:83:43:3f:4b:8d:05:86:a3:51:9a:5f:8f:74:de: da:c1:2f:77:57:4c:61:5e:ad:03:34:7d:61:d9:a3:10:f5:aa: d9:99:f3:20:0a:e4:f4:45:d0:cd:aa:e7:fa:b9:fd:b3:27:85: b1:66:91:a8:da:a5:84:57:e9:f0:4a:7f:3a:2f:71:d1:f4:24: db:24:33:d8:13:76:14:10:9c:1b:ef:a3:97:77:1c:c2:b8:6e: 82:08:60:4a:5c:b2:b9:cc:02:df:fc:b0:10:37:32:92:7c:a9: 9d:05:0c:d2 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUYXKM3e2OtZ7J4fE3fehFfpCIK8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEyhBOUU5NjBFRDgxQjdCODVGOEQxQjY0REE2RDBBNUFEODk4 QTcwREMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhtAcOZFlKO4 j+4i+qQEPaXQYOcV5fvTI60sZsk6jkkWVzLy/f+UtNyo/r7l2H+vmO/wuyE0tMAh DuK+NpcSvsxCol/75xEfKZRs0J0fGvLDI/iakAN/HFZGReE6Sb8Un8B1SBXawxQo ONO9FGbC5HF9O827rQwZeK/+/3eJm+ZtRB9REkdF5/mKqZYp4PpxXigHopT/+6FU Nlg0JkbGetp20zmwO4XP8d+M2BePwNFytqWoY2w75YNvBKZS5hvQ8ng8F3o1Uc8C 7B5ISw5nN+rgZSlhF2A+85mZRn3ChQowUV1+80FhX6wAPOfbWKPaKHeL2xIkMFgk 0JB3VjD8rwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKnpYO2Bt7hfjRtk2m0KWtiY pw3AMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4 MTc1NGY0ZTY0OS8wLzMxMzQzNDJlMzEzNjM4MmUzNzJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM1MzQzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACQqAcwDQYJKoZIhvcNAQELBQAD ggEBAJMfpo/BET0qQTF8ZVZR43+651/4Obkr1kXHN53BnCC8ubNn9MN/dImxl1qM TOM3cmUdaVbAByI382OQ+9m4T6Ym1KQkS1zulILs5zlObLU6PLtYJ+43ZvnrOzOO kQ+xDjKhC53B1ONWBIWCds3YtoYlAQ1jRi6N5eAGMdp24qkW0KzI2LkbNyz56qHA ZZ9mYDLozWqDQz9LjQWGo1GaX4903trBL3dXTGFerQM0fWHZoxD1qtmZ8yAK5PRF 0M2q5/q5/bMnhbFmkajapYRX6fBKfzovcdH0JNskM9gTdhQQnBvvo5d3HMK4boII YEpcsrnMAt/8sBA3MpJ8qZ0FDNI= -----END CERTIFICATE-----Generated at Tue Nov 18 08:56:58 2025 by rpki-client