$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e382e302f32322d3232203d3e203131343236.roa File: 3134342e3136382e382e302f32322d3232203d3e203131343236.roa (raw, json) Hash identifier: DmM1OF8bs1CY+UCbEutfS+BjMIr3JEN8qu0Ve1Q1VG4= Subject key identifier: 75:97:82:98:E2:B5:13:1E:8D:69:9A:05:24:0C:93:26:52:FE:4A:3C Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 3759772CDC3B143A785FF5200F6053904662F3C2 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e382e302f32322d3232203d3e203131343236.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 11426 IP address blocks: 144.168.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:59:77:2c:dc:3b:14:3a:78:5f:f5:20:0f:60:53:90:46:62:f3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=75978298E2B5131E8D699A05240C932652FE4A3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:ca:02:75:97:c5:34:f5:7a:9b:7c:12:66: bd:e7:33:86:75:b2:42:71:5d:8c:6d:26:57:4b:aa: 95:72:ff:1a:e7:d3:ea:5d:d1:0f:5a:ab:0b:c3:07: ca:27:bb:56:9d:dc:f1:8a:02:86:d5:17:03:08:b2: ed:8c:36:20:9a:08:a4:39:d0:d5:78:8d:0d:9f:2f: af:47:81:c4:ec:d2:09:64:40:8a:ca:a2:9a:7b:d5: 07:ad:92:fa:15:f0:bb:62:ff:50:90:fd:f2:86:08: 45:10:81:ac:ac:33:94:a0:ee:a2:d3:26:e1:b2:34: 1f:76:83:06:d9:cb:00:7a:cc:39:bf:51:b7:53:f7: 99:1c:b8:89:f5:23:0d:62:bc:f2:3e:bf:85:86:d5: 88:9d:d6:64:a4:e2:54:8d:97:5a:a8:9a:b4:93:c5: 46:18:0b:c8:c3:f6:80:a9:96:eb:3b:45:35:09:58: 91:30:7a:47:f6:23:4b:5b:33:d8:81:c0:90:a9:77: 47:d3:94:e6:58:b3:e7:d7:0a:33:b9:79:83:3b:3a: 49:72:5c:81:a1:b0:e4:d3:f1:4a:c9:c7:2e:37:a4: 6e:f7:ca:ee:02:33:49:60:93:ce:6e:f2:04:49:9d: 42:93:d0:94:6c:17:d3:83:32:f1:1f:08:00:e3:e1: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:97:82:98:E2:B5:13:1E:8D:69:9A:05:24:0C:93:26:52:FE:4A:3C X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3134342e3136382e382e302f32322d3232203d3e203131343236.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.168.8.0/22 Signature Algorithm: sha256WithRSAEncryption a1:40:38:56:4f:7f:ba:ac:e7:2f:76:5d:9b:8e:36:28:26:be: bb:64:4a:a4:14:ee:0a:9f:ac:f5:46:b3:df:d0:47:08:3c:2d: 34:3a:3a:e1:ab:0e:05:a1:be:0d:3d:e7:ee:8a:fb:de:e5:52: e6:26:8e:c1:86:a5:33:5e:e5:ad:bf:a4:75:89:9a:24:b2:9b: 4b:03:59:3a:a9:a6:48:83:51:7d:e3:b0:52:58:09:b8:f2:63: 30:d0:eb:88:5b:b3:e8:89:2f:67:36:53:b0:78:6a:db:3e:43: 45:be:a4:20:5f:5c:14:17:ee:76:39:5b:27:37:c4:a7:8f:d8: db:3f:34:de:33:95:9f:de:ea:fd:88:2c:98:b5:a0:a6:1a:7b: 3d:42:bb:19:e8:cb:50:ee:d8:19:be:2c:e0:b5:ba:bd:3d:e0: 8c:d0:a0:42:1e:85:81:01:ba:0f:be:77:2c:32:1c:ce:9e:07: a7:93:0e:42:22:db:82:d5:b8:7e:73:22:ff:35:fc:34:b7:90: 34:30:1b:57:26:a0:3b:79:16:26:19:cb:43:9e:57:f6:c6:df: 48:ac:0c:95:9b:33:2d:bb:f7:4a:94:87:dd:ac:bb:39:11:0f: 7e:79:2a:ba:8b:70:0b:92:c2:d5:c3:e9:58:f3:15:29:ab:59: 41:0c:e5:03 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIUN1l3LNw7FDp4X/UgD2BTkEZi88IwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEyg3NTk3ODI5OEUyQjUxMzFFOEQ2OTlBMDUyNDBDOTMyNjUy RkU0QTNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNTKAnWXxTT1 ept8Ema95zOGdbJCcV2MbSZXS6qVcv8a59PqXdEPWqsLwwfKJ7tWndzxigKG1RcD CLLtjDYgmgikOdDVeI0Nny+vR4HE7NIJZECKyqKae9UHrZL6FfC7Yv9QkP3yhghF EIGsrDOUoO6i0ybhsjQfdoMG2csAesw5v1G3U/eZHLiJ9SMNYrzyPr+FhtWIndZk pOJUjZdaqJq0k8VGGAvIw/aAqZbrO0U1CViRMHpH9iNLWzPYgcCQqXdH05TmWLPn 1wozuXmDOzpJclyBobDk0/FKyccuN6Ru98ruAjNJYJPObvIESZ1Ck9CUbBfTgzLx HwgA4+GrUQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHWXgpjitRMejWmaBSQMkyZS /ko8MB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9mY2EyMjE0OTM5YjA0NTdlYTNhNzA4 MTc1NGY0ZTY0OS8wLzMxMzQzNDJlMzEzNjM4MmUzODJlMzAyZjMyMzIyZDMyMzIy MDNkM2UyMDMxMzEzNDMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKQqAgwDQYJKoZIhvcNAQELBQAD ggEBAKFAOFZPf7qs5y92XZuONigmvrtkSqQU7gqfrPVGs9/QRwg8LTQ6OuGrDgWh vg095+6K+97lUuYmjsGGpTNe5a2/pHWJmiSym0sDWTqppkiDUX3jsFJYCbjyYzDQ 64hbs+iJL2c2U7B4ats+Q0W+pCBfXBQX7nY5Wyc3xKeP2Ns/NN4zlZ/e6v2ILJi1 oKYaez1Cuxnoy1Du2Bm+LOC1ur094IzQoEIehYEBug++dywyHM6eB6eTDkIi24LV uH5zIv81/DS3kDQwG1cmoDt5FiYZy0OeV/bG30isDJWbMy2790qUh92suzkRD355 KrqLcAuSwtXD6VjzFSmrWUEM5QM= -----END CERTIFICATE-----Generated at Tue Nov 18 09:00:01 2025 by rpki-client