$ rpki-client -vvvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e322e302f32332d3233203d3e203139343337.roa File: 3137322e39362e322e302f32332d3233203d3e203139343337.roa (raw, json) Hash identifier: vO5g2dGwXFuiTdnbvELawfPLvCmS4T0XLdkisydQdzk= Subject key identifier: 1C:4C:DE:E6:A9:7D:EB:9B:96:2E:A5:76:E6:16:07:46:F7:C9:93:9B Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 7AEFAE25BDA35F830A9520ABEE05969584230CD1 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e322e302f32332d3233203d3e203139343337.roa Signing time: Fri 16 Oct 2026 18:36:20 +0000 ROA not before: Fri 16 Oct 2026 18:31:20 +0000 ROA not after: Fri 15 Oct 2027 18:36:20 +0000 asID: 19437 IP address blocks: 172.96.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 13:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ef:ae:25:bd:a3:5f:83:0a:95:20:ab:ee:05:96:95:84:23:0c:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Oct 16 18:31:20 2026 GMT Not After : Oct 15 18:36:20 2027 GMT Subject: CN=1C4CDEE6A97DEB9B962EA576E6160746F7C9939B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:d3:62:9a:42:3f:96:38:7f:60:40:76:dd: 04:6d:02:ba:49:9b:10:3a:d6:aa:19:ec:d7:e3:54: 96:71:de:6d:8a:4a:5d:96:9b:55:10:3c:2b:cf:8e: 91:01:ae:62:2d:08:ea:26:f4:a8:4d:22:91:d7:ff: 21:51:34:99:fe:c1:35:df:20:b6:71:56:a4:8b:20: dc:c0:ec:d3:72:ab:69:5f:1e:cb:97:25:9c:e1:1f: a9:6d:16:60:91:85:77:c6:08:49:6b:78:de:b7:dd: e6:28:bd:d3:19:57:4f:83:65:3f:79:55:4c:80:12: 62:4a:ed:1a:59:c5:49:43:05:e5:bc:93:e4:06:e3: e1:07:f1:f2:9c:d3:79:c7:f4:7a:a4:a3:96:ee:65: 86:5d:8b:3a:70:47:fc:11:8c:5a:aa:58:45:6c:d2: 7e:14:a1:25:2e:3c:8c:50:4a:37:9c:1b:ed:0e:66: 10:fb:ae:23:fc:7f:48:55:e4:89:cc:f0:0d:ed:7f: d2:e0:87:58:a1:30:68:d4:19:5d:53:76:ab:a9:ee: ed:7a:60:56:00:65:a7:2e:d5:38:1a:0b:47:13:29: b6:c2:49:2e:89:2b:ce:01:c3:73:b6:85:bb:95:0b: e0:e1:f0:e3:97:f7:dc:b5:8c:29:a5:c8:9e:ad:03: d4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4C:DE:E6:A9:7D:EB:9B:96:2E:A5:76:E6:16:07:46:F7:C9:93:9B X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e322e302f32332d3233203d3e203139343337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.2.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:db:da:49:c2:c1:fb:2a:34:c5:ae:8a:55:02:3b:c9:d1:30: ba:cb:1c:90:e9:7e:79:05:70:82:ea:70:de:eb:a7:8b:4e:cd: db:07:a9:c6:1c:ed:33:52:25:1e:ff:b9:24:e4:97:21:05:d8: 62:62:0b:0b:4d:06:11:d4:06:6c:ad:b7:8c:28:ab:6a:a4:83: 75:aa:c1:e4:0f:1b:1b:20:f5:75:f7:56:0b:12:9d:5c:eb:97: 8a:5c:86:08:68:e3:bd:33:86:44:59:ce:b1:3e:fa:40:82:3b: 7c:43:fc:15:9e:ea:64:4b:3e:55:ec:c4:67:c1:c1:84:a9:51: 86:5b:3e:b0:4b:00:58:f1:e1:88:4b:2c:39:85:e2:51:af:32: 66:bf:9f:ea:dd:7f:ba:c9:53:d3:54:2c:43:aa:61:83:b1:94: 40:09:39:32:69:47:22:95:be:41:f0:ad:0c:3e:d4:ed:1c:d9: 60:4a:3c:56:cf:14:78:8e:d7:9b:17:f6:65:b1:ad:c6:c0:5f: b7:ff:58:b8:28:8d:4c:cd:16:bc:67:62:b9:fc:4c:83:32:0f: 69:e4:19:1c:62:40:70:a1:93:5d:12:b4:f6:78:c9:d6:11:a0: f4:73:33:f2:a4:3a:bc:9d:32:62:2a:56:c7:83:3d:01:fe:59: fb:ac:5e:d0 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUeu+uJb2jX4MKlSCr7gWWlYQjDNEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjYxMDE2MTgzMTIwWhcNMjcxMDE1MTgzNjIw WjAzMTEwLwYDVQQDEygxQzRDREVFNkE5N0RFQjlCOTYyRUE1NzZFNjE2MDc0NkY3 Qzk5MzlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUTTYppCP5Y4 f2BAdt0EbQK6SZsQOtaqGezX41SWcd5tikpdlptVEDwrz46RAa5iLQjqJvSoTSKR 1/8hUTSZ/sE13yC2cVakiyDcwOzTcqtpXx7LlyWc4R+pbRZgkYV3xghJa3jet93m KL3TGVdPg2U/eVVMgBJiSu0aWcVJQwXlvJPkBuPhB/HynNN5x/R6pKOW7mWGXYs6 cEf8EYxaqlhFbNJ+FKElLjyMUEo3nBvtDmYQ+64j/H9IVeSJzPAN7X/S4IdYoTBo 1BldU3arqe7temBWAGWnLtU4GgtHEym2wkkuiSvOAcNztoW7lQvg4fDjl/fctYwp pcierQPUKQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBxM3uapfeubli6lduYWB0b3 yZObMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgx NzU0ZjRlNjQ5LzAvMzEzNzMyMmUzOTM2MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNk M2UyMDMxMzkzNDMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGsYAIwDQYJKoZIhvcNAQELBQADggEB AI/b2knCwfsqNMWuilUCO8nRMLrLHJDpfnkFcILqcN7rp4tOzdsHqcYc7TNSJR7/ uSTklyEF2GJiCwtNBhHUBmytt4woq2qkg3WqweQPGxsg9XX3VgsSnVzrl4pchgho 470zhkRZzrE++kCCO3xD/BWe6mRLPlXsxGfBwYSpUYZbPrBLAFjx4YhLLDmF4lGv Mma/n+rdf7rJU9NULEOqYYOxlEAJOTJpRyKVvkHwrQw+1O0c2WBKPFbPFHiO15sX 9mWxrcbAX7f/WLgojUzNFrxnYrn8TIMyD2nkGRxiQHChk10StPZ4ydYRoPRzM/Kk OrydMmIqVseDPQH+WfusXtA= -----END CERTIFICATE-----Generated at Tue Oct 20 19:12:50 2026 by rpki-client