$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e342e302f32322d3232203d3e20383334.roa File: 3137322e39362e342e302f32322d3232203d3e20383334.roa (raw, json) Hash identifier: HjAlFPZRMVeIdzj5az7Xjd/8Mb4rQHAuZFgDYuC42qQ= Subject key identifier: A0:93:11:B3:82:53:23:35:9A:E7:13:F2:FD:76:F1:AC:5A:DB:3E:15 Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 7EEAA82E09B15C8668C24818BA1BAC449867951A Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e342e302f32322d3232203d3e20383334.roa Signing time: Fri 14 Nov 2025 18:29:45 +0000 ROA not before: Fri 14 Nov 2025 18:24:45 +0000 ROA not after: Fri 13 Nov 2026 18:29:45 +0000 asID: 834 IP address blocks: 172.96.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 17:13:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ea:a8:2e:09:b1:5c:86:68:c2:48:18:ba:1b:ac:44:98:67:95:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Nov 14 18:24:45 2025 GMT Not After : Nov 13 18:29:45 2026 GMT Subject: CN=A09311B3825323359AE713F2FD76F1AC5ADB3E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e5:43:48:6f:68:be:0c:62:63:1d:2c:e1:42: 8c:31:ed:80:15:12:20:da:a3:3d:e6:40:f8:a6:85: de:ff:b0:98:09:43:48:18:9e:96:74:88:fb:f1:73: 70:ab:28:4d:b3:a9:9c:1d:da:c6:6b:11:c9:90:2d: 53:10:ca:3a:95:58:cb:2d:01:eb:58:72:0b:f7:f8: 37:e2:cc:0d:0f:89:62:21:e1:28:6c:10:15:4e:b9: a0:2b:91:d4:b9:45:bd:7e:89:c3:96:0c:e7:95:41: ed:91:4f:e6:a9:2d:7a:85:75:61:f7:05:1b:e6:a7: be:10:87:2c:84:58:f3:1f:d1:94:3a:b9:ac:c9:85: 6a:32:11:d5:cc:52:76:55:d4:98:80:bc:25:46:d5: 37:44:e8:23:60:6c:bd:9e:c5:f8:db:6f:cb:d1:4e: c1:7d:67:a0:36:db:84:73:ca:9a:23:18:f6:fe:e2: 97:0b:ca:f5:48:3d:6d:e5:e0:10:fa:dc:c2:43:84: 98:df:c8:8d:74:0b:6f:d7:93:14:ee:fa:1c:dd:fe: 53:f4:7e:e9:f6:45:9f:d8:42:80:bb:68:30:b7:76: 5d:51:77:b7:52:89:06:4f:40:54:8c:cd:ef:a6:2f: 2d:5b:26:63:5d:3e:e6:2f:53:82:d5:89:04:06:7a: 83:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:93:11:B3:82:53:23:35:9A:E7:13:F2:FD:76:F1:AC:5A:DB:3E:15 X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e342e302f32322d3232203d3e20383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.4.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:ec:a2:6d:09:12:9a:d4:27:93:fe:36:28:3a:f7:08:be:84: 8e:2c:de:95:77:c9:0a:4f:0d:ed:e3:c4:48:49:f8:8c:93:9c: c7:27:9e:7e:b8:b3:94:f5:0d:ce:95:22:ce:b5:f1:c8:bc:eb: ab:79:eb:45:25:f8:b2:e0:1b:9b:06:b8:48:9d:44:cc:79:d6: ea:5a:c0:07:40:2f:c1:73:f4:45:f7:e5:3c:d2:3d:8c:cb:74: ce:6a:1c:9b:31:66:a8:44:d8:ae:45:54:3b:91:80:6f:81:f8: b4:8d:8b:7f:03:87:c7:dd:f8:70:4f:05:39:af:6f:4c:7c:ca: 79:95:f0:d1:d4:9a:d9:a8:c2:83:5a:82:ea:dd:7e:83:24:0d: d3:af:2c:68:f8:5b:89:db:c4:75:bc:72:05:2d:b4:dd:5f:8f: fe:02:87:46:20:fe:47:47:23:bb:3c:9a:12:44:f7:a2:04:93: a1:69:8d:8d:b8:35:c6:e6:53:ab:86:96:50:a2:2e:ac:2e:57: cc:f3:32:2b:c2:31:4b:3c:eb:81:d5:96:e0:ca:9d:4b:b8:02: 70:e8:55:c7:fb:51:a1:ac:73:17:a4:f3:32:6f:7a:90:6c:eb: 2d:5e:61:21:23:23:a7:d2:66:e5:fb:18:33:19:72:3e:7c:ff: 02:90:bf:f0 -----BEGIN CERTIFICATE----- MIIFqTCCBJGgAwIBAgIUfuqoLgmxXIZowkgYuhusRJhnlRowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjUxMTE0MTgyNDQ1WhcNMjYxMTEzMTgyOTQ1 WjAzMTEwLwYDVQQDEyhBMDkzMTFCMzgyNTMyMzM1OUFFNzEzRjJGRDc2RjFBQzVB REIzRTE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuVDSG9ovgxi Yx0s4UKMMe2AFRIg2qM95kD4poXe/7CYCUNIGJ6WdIj78XNwqyhNs6mcHdrGaxHJ kC1TEMo6lVjLLQHrWHIL9/g34swND4liIeEobBAVTrmgK5HUuUW9fonDlgznlUHt kU/mqS16hXVh9wUb5qe+EIcshFjzH9GUOrmsyYVqMhHVzFJ2VdSYgLwlRtU3ROgj YGy9nsX422/L0U7BfWegNtuEc8qaIxj2/uKXC8r1SD1t5eAQ+tzCQ4SY38iNdAtv 15MU7voc3f5T9H7p9kWf2EKAu2gwt3ZdUXe3UokGT0BUjM3vpi8tWyZjXT7mL1OC 1YkEBnqDRwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFKCTEbOCUyM1mucT8v128axa 2z4VMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgx NzU0ZjRlNjQ5LzAvMzEzNzMyMmUzOTM2MmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNk M2UyMDM4MzMzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAqxgBDANBgkqhkiG9w0BAQsFAAOCAQEASuyi bQkSmtQnk/42KDr3CL6EjizelXfJCk8N7ePESEn4jJOcxyeefrizlPUNzpUizrXx yLzrq3nrRSX4suAbmwa4SJ1EzHnW6lrAB0AvwXP0RfflPNI9jMt0zmocmzFmqETY rkVUO5GAb4H4tI2LfwOHx934cE8FOa9vTHzKeZXw0dSa2ajCg1qC6t1+gyQN068s aPhbidvEdbxyBS203V+P/gKHRiD+R0cjuzyaEkT3ogSToWmNjbg1xuZTq4aWUKIu rC5XzPMyK8IxSzzrgdWW4MqdS7gCcOhVx/tRoaxzF6TzMm96kGzrLV5hISMjp9Jm 5fsYMxlyPnz/ApC/8A== -----END CERTIFICATE-----Generated at Tue Nov 18 08:56:59 2025 by rpki-client