$ rpki-client -vvf rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e312e302f32342d3234203d3e203134363138.roa File: 3137322e39362e312e302f32342d3234203d3e203134363138.roa (raw, json) Hash identifier: D6MvPgA5C3jtD/65q53/zYLfUWdYErHrlwYC3nCeZa4= Subject key identifier: D5:64:A7:4B:47:48:2A:89:A0:4D:B1:7B:29:C9:1E:F0:A9:9F:12:47 Certificate issuer: /CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Certificate serial: 5DAA7C6CE3FADC359C13025E7E2BC4E7395307CD Authority key identifier: F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject info access: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e312e302f32342d3234203d3e203134363138.roa Signing time: Wed 08 Jul 2026 20:48:04 +0000 ROA not before: Wed 08 Jul 2026 20:43:04 +0000 ROA not after: Wed 07 Jul 2027 20:48:04 +0000 asID: 14618 IP address blocks: 172.96.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 21:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:aa:7c:6c:e3:fa:dc:35:9c:13:02:5e:7e:2b:c4:e7:39:53:07:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889 Validity Not Before: Jul 8 20:43:04 2026 GMT Not After : Jul 7 20:48:04 2027 GMT Subject: CN=D564A74B47482A89A04DB17B29C91EF0A99F1247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d3:e5:5f:de:ea:c4:f9:c6:52:f5:02:3e:63: 41:6f:a9:73:7c:33:c2:79:3f:15:d1:e3:04:8c:10: e3:47:ac:3c:26:b3:6a:73:a1:4a:21:d2:f3:86:b5: 02:cf:24:1c:b7:11:da:ef:b9:1f:9f:de:fd:c7:48: 14:5e:de:6f:4c:b1:74:3a:a1:3b:8a:58:7f:2b:2a: 4e:3d:e1:f4:a4:04:2a:a7:27:be:a0:a6:c7:df:ef: 43:74:28:89:d4:69:48:df:a6:16:23:12:b9:f8:16: ad:02:9a:4c:0f:40:33:1c:14:47:4f:e4:79:d1:35: 71:92:09:82:67:65:1e:7a:4f:19:37:96:39:3b:b0: 47:ef:e2:62:60:ed:43:76:fd:ca:d1:49:3e:a0:25: 94:94:2d:13:e5:9e:e8:ea:b9:ea:5c:3b:48:54:cc: 08:65:68:b7:10:42:d7:35:a4:2d:8a:f0:3c:2c:b2: d5:64:83:03:28:dc:95:18:65:a0:43:63:c8:50:76: 49:44:d0:a3:e9:27:e7:e6:4e:2d:37:28:59:a6:17: 08:d0:7b:f6:fe:47:44:8b:08:99:af:93:9d:dd:28: 22:fb:45:4f:a0:da:ce:c9:67:45:b6:ec:e6:82:fb: 78:bd:b5:bf:99:e1:53:ef:0c:b5:05:21:2c:9e:f0: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:64:A7:4B:47:48:2A:89:A0:4D:B1:7B:29:C9:1E:F0:A9:9F:12:47 X509v3 Authority Key Identifier: keyid:F3:F2:5E:86:23:02:A3:A7:65:AA:A8:06:A8:3D:B9:F8:E7:20:EE:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/F3F25E862302A3A765AAA806A83DB9F8E720EE32.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/78e28dc6-5afe-42b3-92af-6ace9c2d5bd8/20c116d1fb618a3c8032a880b3484430d06dedcb27ad207889.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/fca2214939b0457ea3a7081754f4e649/0/3137322e39362e312e302f32342d3234203d3e203134363138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 172.96.1.0/24 Signature Algorithm: sha256WithRSAEncryption a8:54:4b:90:2e:79:1f:86:83:ed:47:05:c1:0f:3f:85:0a:52: 46:48:36:bd:0f:b4:50:5b:8c:2c:3e:ec:3e:0f:0c:70:c5:6a: 87:86:27:6e:cf:4c:fc:29:ac:34:39:3c:d2:25:29:6c:28:2b: ce:d6:13:7a:37:d7:5c:9b:00:43:4f:02:29:69:e5:04:46:be: e2:75:e2:92:7d:4e:b3:8b:67:05:e0:d9:75:3a:28:fa:85:bf: 9f:50:e9:b0:a7:48:91:c4:52:9f:23:fb:cc:39:1c:4f:ca:db: 20:ea:3a:f7:b2:1b:9a:67:94:65:91:a9:65:74:d1:44:6c:b1: 2e:6a:1a:c6:b2:19:73:60:2b:46:5a:64:f5:bd:7d:03:ce:b3: 17:80:30:3f:06:56:6a:e4:1a:a4:81:27:5d:29:37:56:2f:7d: b0:e2:9a:e6:8c:3e:0a:1e:e8:9e:0f:90:d6:27:e7:5d:62:30: 78:dd:f2:31:75:07:68:5c:34:ac:40:1b:e5:2f:ea:7b:db:8d: 78:f9:1b:22:c6:8d:70:5e:c7:f9:fd:2d:f3:5e:1f:14:0e:11: 80:19:4f:a7:d2:e7:c0:ce:1b:9b:6d:ce:9e:fa:c7:27:88:f6: 19:51:f7:4e:94:98:3a:02:75:d7:45:aa:ea:91:6d:0f:1d:02: 04:09:b5:ee -----BEGIN CERTIFICATE----- MIIFrTCCBJWgAwIBAgIUXap8bOP63DWcEwJefivE5zlTB80wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMjBjMTE2ZDFmYjYxOGEzYzgwMzJhODgwYjM0ODQ0MzBk MDZkZWRjYjI3YWQyMDc4ODkwHhcNMjYwNzA4MjA0MzA0WhcNMjcwNzA3MjA0ODA0 WjAzMTEwLwYDVQQDEyhENTY0QTc0QjQ3NDgyQTg5QTA0REIxN0IyOUM5MUVGMEE5 OUYxMjQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdPlX97qxPnG UvUCPmNBb6lzfDPCeT8V0eMEjBDjR6w8JrNqc6FKIdLzhrUCzyQctxHa77kfn979 x0gUXt5vTLF0OqE7ilh/KypOPeH0pAQqpye+oKbH3+9DdCiJ1GlI36YWIxK5+Bat AppMD0AzHBRHT+R50TVxkgmCZ2Ueek8ZN5Y5O7BH7+JiYO1Ddv3K0Uk+oCWUlC0T 5Z7o6rnqXDtIVMwIZWi3EELXNaQtivA8LLLVZIMDKNyVGGWgQ2PIUHZJRNCj6Sfn 5k4tNyhZphcI0Hv2/kdEiwiZr5Od3Sgi+0VPoNrOyWdFtuzmgvt4vbW/meFT7wy1 BSEsnvCMBQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFNVkp0tHSCqJoE2xeynJHvCp nxJHMB8GA1UdIwQYMBaAFPPyXoYjAqOnZaqoBqg9ufjnIO4yMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgxNzU0ZjRlNjQ5LzAv RjNGMjVFODYyMzAyQTNBNzY1QUFBODA2QTgzREI5RjhFNzIwRUUzMi5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm Y2Q5OWE4Lzc4ZTI4ZGM2LTVhZmUtNDJiMy05MmFmLTZhY2U5YzJkNWJkOC8yMGMx MTZkMWZiNjE4YTNjODAzMmE4ODBiMzQ4NDQzMGQwNmRlZGNiMjdhZDIwNzg4OS5j ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2ZjYTIyMTQ5MzliMDQ1N2VhM2E3MDgx NzU0ZjRlNjQ5LzAvMzEzNzMyMmUzOTM2MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNk M2UyMDMxMzQzNjMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsYAEwDQYJKoZIhvcNAQELBQADggEB AKhUS5AueR+Gg+1HBcEPP4UKUkZINr0PtFBbjCw+7D4PDHDFaoeGJ27PTPwprDQ5 PNIlKWwoK87WE3o311ybAENPAilp5QRGvuJ14pJ9TrOLZwXg2XU6KPqFv59Q6bCn SJHEUp8j+8w5HE/K2yDqOveyG5pnlGWRqWV00URssS5qGsayGXNgK0ZaZPW9fQPO sxeAMD8GVmrkGqSBJ10pN1YvfbDimuaMPgoe6J4PkNYn511iMHjd8jF1B2hcNKxA G+Uv6nvbjXj5GyLGjXBex/n9LfNeHxQOEYAZT6fS58DOG5ttzp76xyeI9hlR906U mDoCdddFquqRbQ8dAgQJte4= -----END CERTIFICATE-----Generated at Tue Jul 21 15:00:32 2026 by rpki-client