$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e322e302f32332d3233203d3e203139343337.roa File: 3137322e39362e322e302f32332d3233203d3e203139343337.roa (raw, json) Hash identifier: zu/8c9jFx0z9yYQ7IHwLwTV2WVFa/QFgMVxHe+oCv8Y= Subject key identifier: 95:08:B1:40:FD:8A:F2:4D:40:85:7F:DE:F0:58:B9:E1:F0:B6:B0:1C Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 7BC2DFF97D99C3D9909FD92E27D1D272FF775B35 Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e322e302f32332d3233203d3e203139343337.roa Signing time: Fri 14 Nov 2025 18:29:45 +0000 ROA not before: Fri 14 Nov 2025 18:24:45 +0000 ROA not after: Fri 13 Nov 2026 18:29:45 +0000 asID: 19437 IP address blocks: 172.96.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c2:df:f9:7d:99:c3:d9:90:9f:d9:2e:27:d1:d2:72:ff:77:5b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:45 2025 GMT Not After : Nov 13 18:29:45 2026 GMT Subject: CN=9508B140FD8AF24D40857FDEF058B9E1F0B6B01C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:2d:f3:c8:d0:d8:7c:9f:12:f9:f5:36:54: c9:42:a9:8f:3f:16:ce:b6:dd:44:f3:0f:c9:2a:1b: 3c:59:40:8e:3f:c3:57:ed:48:d3:dc:3a:d7:0a:51: 2e:e9:6d:0c:e0:99:aa:5c:f8:90:3a:1b:3a:55:19: 34:cb:c7:44:13:a9:4c:c8:48:0c:f2:5e:44:a5:6f: f6:f2:90:8a:16:bf:88:2a:20:c6:4f:a2:95:19:76: 83:4c:6f:3d:82:c5:b6:c2:d4:4f:5c:f1:bd:13:b2: 9b:30:50:11:66:52:e2:8c:2c:03:16:49:8a:94:31: 4f:a8:7d:31:32:a0:f2:de:26:6f:43:2d:06:63:1c: 0d:57:fd:8d:05:9e:18:d7:8d:28:3e:d4:90:54:32: e3:bb:f7:6b:6d:12:cf:05:ec:c8:79:ef:77:88:b8: 05:04:ed:4f:b1:b7:67:88:32:2a:f4:69:0b:d6:ed: 05:30:e1:f9:da:52:ea:08:09:96:c4:c7:be:47:0d: be:19:13:33:60:77:1b:93:34:ae:78:da:9a:a5:c5: ec:fa:be:7d:07:41:a4:1e:9e:b0:f0:e6:87:a4:2e: 37:00:e7:08:57:55:9e:1a:98:9b:e0:2a:2c:6e:68: a6:88:69:b5:bd:2a:8b:c5:43:f7:e5:09:3b:ea:fc: b8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:08:B1:40:FD:8A:F2:4D:40:85:7F:DE:F0:58:B9:E1:F0:B6:B0:1C X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e322e302f32332d3233203d3e203139343337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.2.0/23 Signature Algorithm: sha256WithRSAEncryption 8d:ca:74:6e:a8:af:a6:08:0a:48:93:45:d0:ed:04:3f:3e:30: e6:f3:97:73:dc:9e:c4:69:a6:0f:40:41:0f:6b:77:fc:47:64: eb:1d:a1:69:e8:d6:d7:65:68:95:c4:68:cc:69:85:cd:47:a1: 5e:21:21:31:9b:ea:ce:37:0e:48:fd:42:1a:c2:73:0d:9d:81: 76:a9:58:6e:e4:23:c5:28:2e:2f:bd:88:a1:b6:9e:81:e3:f6: 99:ab:29:c0:00:e3:5c:c2:02:e0:0c:6b:a8:93:91:9e:5e:02: cc:28:a5:4d:7d:28:1a:95:91:71:50:7d:13:2a:30:ed:bb:d9: ac:76:91:a1:e4:a2:57:92:a6:28:95:37:7b:b2:e8:49:6d:7a: 50:b7:35:e0:b9:2f:47:df:16:99:98:9c:50:20:fc:64:5e:04: 75:15:d3:0b:9e:d3:eb:6a:1c:9d:cc:2b:3f:68:d5:31:c8:26: d5:33:9b:e2:6d:75:5b:88:88:12:a8:2b:0c:14:b4:31:6d:ae: 9c:96:bb:b0:ce:d1:2e:86:dc:0c:e3:e2:d5:5a:6a:2c:ce:db: cf:cd:77:39:cc:12:05:65:62:2e:c0:24:26:59:4e:c7:56:93: a2:4d:79:e4:ba:76:3d:ee:76:8d:09:4f:54:fb:32:fe:3e:7e: 7d:32:92:74 -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUe8Lf+X2Zw9mQn9kuJ9HScv93WzUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ1WhcNMjYxMTEzMTgyOTQ1 WjAzMTEwLwYDVQQDEyg5NTA4QjE0MEZEOEFGMjRENDA4NTdGREVGMDU4QjlFMUYw QjZCMDFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbYt88jQ2Hyf Evn1NlTJQqmPPxbOtt1E8w/JKhs8WUCOP8NX7UjT3DrXClEu6W0M4JmqXPiQOhs6 VRk0y8dEE6lMyEgM8l5EpW/28pCKFr+IKiDGT6KVGXaDTG89gsW2wtRPXPG9E7Kb MFARZlLijCwDFkmKlDFPqH0xMqDy3iZvQy0GYxwNV/2NBZ4Y140oPtSQVDLju/dr bRLPBezIee93iLgFBO1PsbdniDIq9GkL1u0FMOH52lLqCAmWxMe+Rw2+GRMzYHcb kzSueNqapcXs+r59B0GkHp6w8OaHpC43AOcIV1WeGpib4CosbmimiGm1vSqLxUP3 5Qk76vy4nwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJUIsUD9ivJNQIV/3vBYueHw trAcMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgx NzU0ZjRlNjQ5LzAvMzEzNzMyMmUzOTM2MmUzMjJlMzAyZjMyMzMyZDMyMzMyMDNk M2UyMDMxMzkzNDMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAGsYAIwDQYJKoZIhvcNAQELBQADggEB AI3KdG6or6YICkiTRdDtBD8+MObzl3PcnsRppg9AQQ9rd/xHZOsdoWno1tdlaJXE aMxphc1HoV4hITGb6s43Dkj9QhrCcw2dgXapWG7kI8UoLi+9iKG2noHj9pmrKcAA 41zCAuAMa6iTkZ5eAswopU19KBqVkXFQfRMqMO272ax2kaHkoleSpiiVN3uy6Elt elC3NeC5L0ffFpmYnFAg/GReBHUV0wue0+tqHJ3MKz9o1THIJtUzm+JtdVuIiBKo KwwUtDFtrpyWu7DO0S6G3Azj4tVaaizO28/NdznMEgVlYi7AJCZZTsdWk6JNeeS6 dj3udo0JT1T7Mv4+fn0yknQ= -----END CERTIFICATE-----Generated at Tue Nov 18 08:58:36 2025 by rpki-client