$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e302e302f32342d3234203d3e203431303935.roa File: 3137322e39362e302e302f32342d3234203d3e203431303935.roa (raw, json) Hash identifier: QH8TrjQ0e62B10nM7KXhEnU+BbWI0D90IupE98YPHq0= Subject key identifier: A9:F8:07:9E:2D:92:C4:1A:AD:62:63:F7:16:04:35:46:11:C4:D1:3D Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 46EE7866324E1E02C4286AD149DB4A564FE1A2B8 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e302e302f32342d3234203d3e203431303935.roa Signing time: Fri 14 Nov 2025 18:29:44 +0000 ROA not before: Fri 14 Nov 2025 18:24:44 +0000 ROA not after: Fri 13 Nov 2026 18:29:44 +0000 asID: 41095 IP address blocks: 172.96.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ee:78:66:32:4e:1e:02:c4:28:6a:d1:49:db:4a:56:4f:e1:a2:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:44 2025 GMT Not After : Nov 13 18:29:44 2026 GMT Subject: CN=A9F8079E2D92C41AAD6263F71604354611C4D13D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:46:22:bd:4a:dd:f1:64:93:a5:55:25:fc: 39:d8:78:2a:f0:8f:e1:06:03:80:fd:db:e9:4b:72: 6a:75:f6:d5:0a:c6:7f:88:9d:ce:65:4e:8e:6e:b3: 6a:ff:fa:ed:7d:2e:87:86:b6:b0:65:a5:da:7e:36: e7:b3:f1:1e:d4:9a:09:df:4c:5f:7b:c4:62:b1:23: 82:b9:3e:d3:ee:fe:33:e3:05:b1:31:e4:c5:dc:aa: e0:65:32:27:38:6b:3d:fd:54:a2:3a:f9:2f:33:20: e5:ca:3b:1a:fa:ce:7e:c7:a4:7b:3a:e9:70:84:6a: 3c:ed:5d:e6:3b:6d:7e:16:2e:10:2b:0e:ce:bd:62: a4:39:d2:8f:2a:a6:0c:77:81:65:95:c0:15:2b:44: 4f:47:d9:f2:04:db:b4:71:e9:9f:67:6f:94:6c:5a: 07:51:d7:64:1f:40:da:42:67:d0:d1:32:57:02:4c: e6:73:7a:20:bd:9e:2b:aa:d7:9a:35:10:19:b4:f6: 18:97:ba:0b:0f:22:51:3d:bb:7d:43:b3:2e:ed:72: a2:55:98:29:5a:12:54:bc:8d:c4:a1:18:fe:11:34: ca:34:1e:3d:a6:72:72:bc:ae:7d:3d:09:bc:6e:e7: 2a:95:be:e7:08:a8:63:e3:bd:ad:5f:50:d8:f4:8a: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:F8:07:9E:2D:92:C4:1A:AD:62:63:F7:16:04:35:46:11:C4:D1:3D X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e302e302f32342d3234203d3e203431303935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.0.0/24 Signature Algorithm: sha256WithRSAEncryption 84:98:e4:cb:73:d6:ea:24:7c:47:40:60:81:cd:e9:4c:f5:d4: f8:97:2b:7b:d3:f4:92:68:35:a1:20:44:6b:03:93:6b:65:e2: b9:e5:24:26:1f:ad:39:07:ca:14:71:d8:f0:28:2d:6b:ca:a5: 9e:9f:99:6d:5f:b8:5e:4c:13:e7:7f:69:90:cc:9d:73:3a:5e: b2:49:30:10:7c:04:66:da:d5:b0:69:b0:b0:6a:2f:86:f2:19: 7c:bf:48:cf:bf:03:fd:a4:a7:a9:d6:4d:94:6a:4d:13:c8:af: c6:2b:1e:3d:4e:0c:f0:91:f0:40:e5:9c:2e:94:7a:27:23:d9: a4:d2:0d:f2:a0:0a:e3:8e:83:d1:1d:c3:04:ff:fb:3b:da:41: 19:72:5a:a2:ed:da:52:fa:c7:54:75:cd:31:e1:c8:81:ea:3d: dc:58:e9:89:8a:11:68:b5:5e:13:8e:b9:9d:6c:04:5e:f7:68: 2f:1f:db:9e:b1:ab:47:31:a5:49:13:f2:f6:62:41:7b:6a:cb: 19:90:70:51:3e:40:a2:1a:6b:09:e0:2c:93:0e:39:9e:a2:05: b7:ce:f6:14:32:56:e8:53:93:e2:c8:62:89:33:f8:37:0d:9f: cc:f2:00:df:28:8a:4f:8d:43:c0:ad:97:a6:b3:17:16:45:42: dd:ca:3e:44 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIURu54ZjJOHgLEKGrRSdtKVk/horgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ0WhcNMjYxMTEzMTgyOTQ0 WjAzMTEwLwYDVQQDEyhBOUY4MDc5RTJEOTJDNDFBQUQ2MjYzRjcxNjA0MzU0NjEx QzREMTNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFBGIr1K3fFk k6VVJfw52Hgq8I/hBgOA/dvpS3JqdfbVCsZ/iJ3OZU6ObrNq//rtfS6HhrawZaXa fjbns/Ee1JoJ30xfe8RisSOCuT7T7v4z4wWxMeTF3KrgZTInOGs9/VSiOvkvMyDl yjsa+s5+x6R7OulwhGo87V3mO21+Fi4QKw7OvWKkOdKPKqYMd4FllcAVK0RPR9ny BNu0cemfZ2+UbFoHUddkH0DaQmfQ0TJXAkzmc3ogvZ4rqteaNRAZtPYYl7oLDyJR Pbt9Q7Mu7XKiVZgpWhJUvI3EoRj+ETTKNB49pnJyvK59PQm8bucqlb7nCKhj472t X1DY9IrO5wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKn4B54tksQarWJj9xYENUYR xNE9MB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgx NzU0ZjRlNjQ5LzAvMzEzNzMyMmUzOTM2MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDM0MzEzMDM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYAAwDQYJKoZIhvcNAQELBQADggEB AISY5Mtz1uokfEdAYIHN6Uz11PiXK3vT9JJoNaEgRGsDk2tl4rnlJCYfrTkHyhRx 2PAoLWvKpZ6fmW1fuF5ME+d/aZDMnXM6XrJJMBB8BGba1bBpsLBqL4byGXy/SM+/ A/2kp6nWTZRqTRPIr8YrHj1ODPCR8EDlnC6Ueicj2aTSDfKgCuOOg9EdwwT/+zva QRlyWqLt2lL6x1R1zTHhyIHqPdxY6YmKEWi1XhOOuZ1sBF73aC8f256xq0cxpUkT 8vZiQXtqyxmQcFE+QKIaawngLJMOOZ6iBbfO9hQyVuhTk+LIYokz+DcNn8zyAN8o ik+NQ8Ctl6azFxZFQt3KPkQ= -----END CERTIFICATE-----Generated at Tue Nov 18 08:58:34 2025 by rpki-client