$ rpki-client -vvvf rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32302e302f32342d3234203d3e20333936393933.roa File: 3134322e3234382e32302e302f32342d3234203d3e20333936393933.roa (raw, json) Hash identifier: vC6UAMkqJ4U1t0JDRpEhKRQyc7eaS3KttDNnxafeQtc= Subject key identifier: 2F:31:70:4D:81:9E:50:51:10:B7:C8:5C:6B:BD:AB:1C:08:8A:D4:99 Certificate issuer: /CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3 Certificate serial: 3E56AE9DB0BE5658BDC10423F63DACCFEAB36882 Authority key identifier: 30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer Subject info access: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32302e302f32342d3234203d3e20333936393933.roa Signing time: Tue 08 Sep 2026 09:37:14 +0000 ROA not before: Tue 08 Sep 2026 09:32:14 +0000 ROA not after: Tue 07 Sep 2027 09:37:14 +0000 asID: 396993 IP address blocks: 142.248.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/565f5435-5cd1-48e4-9cfc-844fcd06efe1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 04:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:56:ae:9d:b0:be:56:58:bd:c1:04:23:f6:3d:ac:cf:ea:b3:68:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43721594da9424b949d7c695f02dead7abff40ba426a2e41f3 Validity Not Before: Sep 8 09:32:14 2026 GMT Not After : Sep 7 09:37:14 2027 GMT Subject: CN=2F31704D819E505110B7C85C6BBDAB1C088AD499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:61:d5:93:ae:d4:38:ce:f1:dc:5a:2a:76:d8: 24:fd:a7:c5:00:7b:c4:29:0f:d0:fe:66:12:5b:cd: 8b:f1:1b:e2:ba:20:c8:9d:6c:0c:c7:1f:4a:11:53: a0:69:e1:a7:c2:bb:5b:83:25:c6:7e:f3:0c:2d:57: 97:55:e2:18:c3:ad:78:c4:8f:95:85:7a:7a:2e:b4: 88:8a:be:a4:6f:13:af:24:a1:ac:3b:de:80:87:e8: b7:7c:34:94:da:9f:df:50:57:4f:cd:1a:a0:69:01: fe:0d:fd:93:d2:f5:e0:7d:d8:4a:7a:68:f2:6f:6f: 48:3f:17:e2:1f:70:6f:c9:93:4a:63:82:e0:dd:0e: 61:f8:fd:5d:9d:07:38:61:2f:34:60:08:81:17:24: 08:d8:e4:3a:77:44:db:8b:93:3e:d6:7c:5a:e2:3e: 35:bc:f5:1d:63:49:c7:9c:2c:57:be:3d:f8:86:cd: 75:a6:27:40:fb:83:e1:32:00:5e:0d:9b:45:35:7d: e0:d6:72:14:24:7b:55:7f:76:a4:65:87:96:e7:54: 19:ea:6f:07:a3:fa:07:4d:d6:d5:2a:1d:25:a0:3b: 6a:19:cb:57:ea:f6:97:10:b5:a7:a4:36:81:ed:32: 2b:5b:fd:49:99:28:1b:ad:71:79:df:74:8f:66:0c: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:31:70:4D:81:9E:50:51:10:B7:C8:5C:6B:BD:AB:1C:08:8A:D4:99 X509v3 Authority Key Identifier: keyid:30:6B:74:1A:4B:32:A2:BD:EB:CC:B4:C7:3D:B2:52:C5:2C:CF:3F:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/306B741A4B32A2BDEBCCB4C73DB252C52CCF3F51.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/565f5435-5cd1-48e4-9cfc-844fcd06efe1/43721594da9424b949d7c695f02dead7abff40ba426a2e41f3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/25886bc592de4b059659bb79ec08bacb/0/3134322e3234382e32302e302f32342d3234203d3e20333936393933.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 142.248.20.0/24 Signature Algorithm: sha256WithRSAEncryption 20:97:19:21:7a:5b:25:c2:c0:e2:d0:60:3b:8d:b1:eb:1f:18: 78:a6:95:58:a1:d8:5a:39:e1:b8:c1:e6:c9:1e:b5:b8:d7:44: 72:11:df:9a:b2:5c:5e:97:c4:8d:df:c5:84:42:88:98:3f:75: d8:aa:2a:6a:70:1e:b9:72:f4:8e:97:40:4f:cc:04:7b:24:44: 10:51:35:9d:d4:14:fd:90:fd:5c:98:f3:00:3d:a9:5c:8f:98: 9d:d1:d4:a1:61:86:73:f9:ac:d4:4d:42:b0:e6:6a:30:08:93: eb:d6:f5:c8:97:2c:20:64:c7:98:2d:5c:5b:70:5a:f2:6b:07: 6c:6e:9d:60:08:49:8f:29:c4:e8:ae:7c:9b:d8:2d:f1:df:82: ad:6f:f1:c4:d3:4b:3d:3b:0d:30:ef:a0:99:4f:1c:91:45:b5: f5:d8:11:8c:3f:ff:06:c4:1a:36:b4:2a:d0:cf:2f:2a:a9:9a: 09:3b:47:f9:10:48:15:b4:3b:26:60:c5:d9:90:05:6f:be:11: 4a:f1:3e:6b:b9:1e:9b:2a:69:32:7c:de:e1:01:d0:8c:1c:53: d2:f9:d8:3e:1c:b9:87:ac:0e:d4:19:5f:42:59:b5:81:d5:d0: d6:67:bf:c5:bc:f5:a8:cf:a4:2e:c0:e2:f6:c9:5d:48:9f:07: 70:14:ad:46 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIUPlaunbC+Vli9wQQj9j2sz+qzaIIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNDM3MjE1OTRkYTk0MjRiOTQ5ZDdjNjk1ZjAyZGVhZDdh YmZmNDBiYTQyNmEyZTQxZjMwHhcNMjYwOTA4MDkzMjE0WhcNMjcwOTA3MDkzNzE0 WjAzMTEwLwYDVQQDEygyRjMxNzA0RDgxOUU1MDUxMTBCN0M4NUM2QkJEQUIxQzA4 OEFENDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2HVk67UOM7x 3Foqdtgk/afFAHvEKQ/Q/mYSW82L8RviuiDInWwMxx9KEVOgaeGnwrtbgyXGfvMM LVeXVeIYw614xI+VhXp6LrSIir6kbxOvJKGsO96Ah+i3fDSU2p/fUFdPzRqgaQH+ Df2T0vXgfdhKemjyb29IPxfiH3BvyZNKY4Lg3Q5h+P1dnQc4YS80YAiBFyQI2OQ6 d0Tbi5M+1nxa4j41vPUdY0nHnCxXvj34hs11pidA+4PhMgBeDZtFNX3g1nIUJHtV f3akZYeW51QZ6m8Ho/oHTdbVKh0loDtqGctX6vaXELWnpDaB7TIrW/1JmSgbrXF5 33SPZgyx4wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFC8xcE2BnlBRELfIXGu9qxwI itSZMB8GA1UdIwQYMBaAFDBrdBpLMqK968y0xz2yUsUszz9RMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzI1ODg2YmM1OTJkZTRiMDU5NjU5YmI3OWVjMDhiYWNiLzAv MzA2Qjc0MUE0QjMyQTJCREVCQ0NCNEM3M0RCMjUyQzUyQ0NGM0Y1MS5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvZDZiNWFkMjgtMWNiYy00N2FiLTkwNGUtNDUzNjFh NTQ4N2MzLzU2NWY1NDM1LTVjZDEtNDhlNC05Y2ZjLTg0NGZjZDA2ZWZlMS80Mzcy MTU5NGRhOTQyNGI5NDlkN2M2OTVmMDJkZWFkN2FiZmY0MGJhNDI2YTJlNDFmMy5j ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yNTg4NmJjNTkyZGU0YjA1OTY1OWJi NzllYzA4YmFjYi8wLzMxMzQzMjJlMzIzNDM4MmUzMjMwMmUzMDJmMzIzNDJkMzIz NDIwM2QzZTIwMzMzOTM2MzkzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgUMA0GCSqGSIb3DQEB CwUAA4IBAQAglxkhelslwsDi0GA7jbHrHxh4ppVYodhaOeG4webJHrW410RyEd+a slxel8SN38WEQoiYP3XYqipqcB65cvSOl0BPzAR7JEQQUTWd1BT9kP1cmPMAPalc j5id0dShYYZz+azUTUKw5mowCJPr1vXIlywgZMeYLVxbcFryawdsbp1gCEmPKcTo rnyb2C3x34Ktb/HE00s9Ow0w76CZTxyRRbX12BGMP/8GxBo2tCrQzy8qqZoJO0f5 EEgVtDsmYMXZkAVvvhFK8T5ruR6bKmkyfN7hAdCMHFPS+dg+HLmHrA7UGV9CWbWB 1dDWZ7/FvPWoz6QuwOL2yV1InwdwFK1G -----END CERTIFICATE-----Generated at Sat Sep 19 06:36:14 2026 by rpki-client