$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json) Hash identifier: YKaLphgT1s2jpGUUcj/J8fDjVX1weXnTCVSUUISSE4s= Subject key identifier: B6:F3:10:12:21:4E:87:27:BA:DE:3B:FD:D6:83:BE:77:B7:08:9C:00 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584D2D3F9DC8EEE38CC6EBD02F80 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 398576 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:9d:c8:ee:e3:8c:c6:eb:d0:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=651a58a6-c7f9-4fa2-b010-cddcf180504f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:d9:9f:78:75:47:24:28:de:d1:83:bc:80: d8:b4:27:bd:1b:2a:c7:86:89:22:85:0f:58:a7:7c: e2:67:1f:2f:ad:50:72:db:b6:f9:9f:cd:73:c5:35: 10:d3:bc:28:1d:a3:b3:01:3e:5d:85:84:44:d4:34: b6:22:7a:bd:dc:f1:90:b0:24:ef:91:27:e6:55:1b: 62:4a:81:09:7f:4c:ad:23:e7:9a:57:29:07:4f:7f: ec:76:19:32:f0:0a:b3:ab:a4:aa:30:74:90:e6:db: 28:93:7a:27:42:f9:d9:53:86:67:e3:1a:fd:c4:2b: 98:44:87:8b:b3:3f:6c:c2:dc:63:87:e6:31:f4:91: 52:c5:09:cd:1f:26:15:3d:c6:75:71:56:92:a6:88: ef:4e:19:fb:c1:2e:74:1d:32:b2:f9:19:34:af:32: b9:83:b4:76:e7:a2:b9:15:d3:e1:1e:95:9d:48:c5: 1e:48:89:a4:c2:a6:04:4c:45:31:e7:91:ed:dc:67: 45:c5:2b:fd:82:be:09:2e:7f:55:6c:4f:53:b0:07: 83:16:d7:3e:e1:75:97:75:09:76:c1:17:c6:a5:b7: 30:8b:95:bf:a4:f0:87:e9:33:fd:33:e5:a6:62:2b: 13:a0:7b:08:49:57:54:85:14:05:ef:37:0c:f7:42: 10:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F3:10:12:21:4E:87:27:BA:DE:3B:FD:D6:83:BE:77:B7:08:9C:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:02:8a:26:39:f9:ea:69:94:09:76:bc:9a:49:22:79:89:a3: 5a:cf:bc:3d:0c:96:fd:95:cb:6a:e4:0a:9a:45:75:bd:98:51: 0e:73:1a:02:a7:46:4f:f1:db:b6:a3:8a:18:84:fd:5e:86:06: f2:6d:29:16:98:33:14:6e:3f:85:97:89:e3:0d:06:df:8c:f1: e9:db:56:f9:9a:47:bd:b6:39:f4:2b:a6:99:fe:39:e2:1c:df: b3:66:b5:17:c9:4e:9f:45:42:3c:b4:0f:2b:a1:87:b2:26:47: 77:98:be:5d:64:9d:37:e6:98:de:67:41:6a:8d:65:8c:03:6f: c3:3c:f4:41:e3:6d:d7:df:e7:1b:eb:f9:fb:d8:79:7a:45:c2: 93:78:d6:32:58:90:2d:60:05:11:3d:84:6f:f6:64:48:5c:20: 33:26:59:c8:e6:8c:d4:fd:bf:23:5d:d8:2d:2c:a8:5e:bd:ca: d1:61:a8:58:85:ba:4f:ab:ce:34:f2:32:e0:4c:25:d2:d2:ab: 82:57:a5:a0:cd:28:8e:10:03:00:d3:59:be:45:5f:29:e6:47: 53:f9:d4:a7:52:0e:19:94:37:d5:23:0f:8e:94:f7:bf:f1:ac: 4b:f5:fb:67:54:c2:d3:4f:60:e7:80:2f:85:48:d8:7f:3c:f9: 96:54:be:1c -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE0tP53I7uOMxuvQL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NjUxYTU4YTYtYzdmOS00ZmEyLWIwMTAtY2RkY2YxODA1MDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmjZn3h1RyQo3tGDvIDYtCe9GyrHhokihQ9Y p3ziZx8vrVBy27b5n81zxTUQ07woHaOzAT5dhYRE1DS2Inq93PGQsCTvkSfmVRti SoEJf0ytI+eaVykHT3/sdhky8Aqzq6SqMHSQ5tsok3onQvnZU4Zn4xr9xCuYRIeL sz9swtxjh+Yx9JFSxQnNHyYVPcZ1cVaSpojvThn7wS50HTKy+Rk0rzK5g7R256K5 FdPhHpWdSMUeSImkwqYETEUx55Ht3GdFxSv9gr4JLn9VbE9TsAeDFtc+4XWXdQl2 wRfGpbcwi5W/pPCH6TP9M+WmYisToHsISVdUhRQF7zcM90IQ+QIDAQABo4IDYTCC A10wHQYDVR0OBBYEFLbzEBIhTocnut47/daDvne3CJwAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIoCiiY5+epplAl2vJpJInmJo1rPvD0Mlv2Vy2rk CppFdb2YUQ5zGgKnRk/x27ajihiE/V6GBvJtKRaYMxRuP4WXieMNBt+M8enbVvma R722OfQrppn+OeIc37NmtRfJTp9FQjy0Dyuhh7ImR3eYvl1knTfmmN5nQWqNZYwD b8M89EHjbdff5xvr+fvYeXpFwpN41jJYkC1gBRE9hG/2ZEhcIDMmWcjmjNT9vyNd 2C0sqF69ytFhqFiFuk+rzjTyMuBMJdLSq4JXpaDNKI4QAwDTWb5FXynmR1P51KdS DhmUN9UjD46U97/xrEv1+2dUwtNPYOeAL4VI2H88+ZZUvhw= -----END CERTIFICATE-----Generated at Thu Mar 26 21:12:29 2026 by rpki-client