$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json) Hash identifier: 8ChPSb9GNNxUDovl/RgKjwoijrbF4Wqgg8pJZvyW1mQ= Subject key identifier: 2E:1A:38:B9:38:DE:EE:99:6C:8D:C4:41:F5:CC:9E:A8:A6:1C:A0:A6 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584B6D2CB88958495559E5B8F700 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 398576 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b8:89:58:49:55:59:e5:b8:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=12dbfd2c-1470-4806-811a-8b0ad04e581e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:86:d0:78:2a:29:a5:cc:27:88:ee:47:a8: cf:8b:af:90:c8:a5:02:2d:12:67:ad:b8:f4:fc:c7: 28:92:97:4e:2a:0c:6b:8b:01:cc:a7:06:54:e0:65: 66:2c:0d:30:2b:b2:6f:b3:e8:f1:cc:12:85:fd:6f: 36:38:d1:be:9a:68:19:16:89:5a:d8:a8:d8:29:9f: e9:cb:d6:31:76:08:bb:78:5c:09:c7:64:43:60:f0: 5c:e6:df:fb:4f:59:e5:c7:cc:40:bf:e2:a3:fc:bb: 6d:4f:ac:b7:c8:19:bd:23:8c:5b:59:9b:6b:b5:5b: 66:bf:97:3e:a7:59:ce:e6:84:98:7f:4b:4d:5f:7a: 08:7f:e4:8e:0f:6d:15:40:54:6d:89:e6:62:29:48: 97:0f:62:c9:b4:5e:57:cc:be:e9:a7:7f:40:c0:e4: c0:2a:ee:91:b8:f0:a2:4c:c4:b6:f7:4d:79:fb:2c: 99:94:a8:9a:86:fd:85:64:47:4b:b7:de:73:c5:86: da:97:ca:11:15:42:76:48:b4:da:df:79:dd:de:26: 71:75:b9:32:ff:f5:a7:15:4f:99:17:85:b0:51:c6: 38:a4:f5:92:1c:07:77:22:52:c0:8d:d2:2b:01:f0: 99:64:74:3f:75:05:81:39:fe:6f:22:0e:01:3e:cd: 8e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1A:38:B9:38:DE:EE:99:6C:8D:C4:41:F5:CC:9E:A8:A6:1C:A0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:a8:7c:75:fd:2d:64:a3:b7:0b:28:f1:ff:4f:c5:5f:03:5f: d4:42:c0:b0:52:17:30:ed:20:e9:87:93:38:03:d9:b4:52:c8: ad:af:9e:3a:11:f4:4a:dc:fe:3f:02:3a:b6:37:ed:71:87:72: 01:54:c8:16:7d:88:b7:5f:79:30:16:87:73:35:fb:db:0f:8b: 77:48:f8:b0:0d:2b:ee:ad:c8:60:c2:b8:d3:fb:a9:22:73:1c: 66:f7:b2:37:d0:1e:68:f8:7c:9a:71:86:8e:94:5d:ad:8f:d4: 1d:18:7c:b4:e3:c4:c5:b9:62:f8:47:1f:43:e1:30:31:71:d6: 5a:05:fd:2b:2b:13:26:b5:c4:05:f7:3c:4d:b2:b5:09:99:82: c1:a1:95:ae:d8:7b:b0:35:bb:04:24:93:56:67:7b:e8:1d:c2: dd:5b:59:05:3a:b6:3a:b4:3c:06:8c:83:72:83:c1:a7:2a:0b: 54:87:01:dd:81:68:36:68:c6:80:8c:ee:ca:32:66:12:b4:ca: fe:37:72:9c:ec:7c:e0:f1:a0:78:5c:cd:8b:4b:5d:c4:4d:5e: f7:11:3e:cd:a2:39:d5:71:21:56:60:c4:16:31:d5:37:45:aa: 9c:5d:95:6e:9c:e8:92:ad:45:80:9f:39:16:84:68:e4:5a:e8: ef:ad:c9:27 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEttLLiJWElVWeW49wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTJkYmZkMmMtMTQ3MC00ODA2LTgxMWEtOGIwYWQwNGU1ODFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMiG0HgqKaXMJ4juR6jPi6+QyKUCLRJnrbj0 /McokpdOKgxriwHMpwZU4GVmLA0wK7Jvs+jxzBKF/W82ONG+mmgZFola2KjYKZ/p y9Yxdgi7eFwJx2RDYPBc5t/7T1nlx8xAv+Kj/LttT6y3yBm9I4xbWZtrtVtmv5c+ p1nO5oSYf0tNX3oIf+SOD20VQFRtieZiKUiXD2LJtF5XzL7pp39AwOTAKu6RuPCi TMS29015+yyZlKiahv2FZEdLt95zxYbal8oRFUJ2SLTa33nd3iZxdbky//WnFU+Z F4WwUcY4pPWSHAd3IlLAjdIrAfCZZHQ/dQWBOf5vIg4BPs2OmQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFC4aOLk43u6ZbI3EQfXMnqimHKCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEGofHX9LWSjtwso8f9PxV8DX9RCwLBSFzDtIOmH kzgD2bRSyK2vnjoR9Erc/j8COrY37XGHcgFUyBZ9iLdfeTAWh3M1+9sPi3dI+LAN K+6tyGDCuNP7qSJzHGb3sjfQHmj4fJpxho6UXa2P1B0YfLTjxMW5YvhHH0PhMDFx 1loF/SsrEya1xAX3PE2ytQmZgsGhla7Ye7A1uwQkk1Zne+gdwt1bWQU6tjq0PAaM g3KDwacqC1SHAd2BaDZoxoCM7soyZhK0yv43cpzsfODxoHhczYtLXcRNXvcRPs2i OdVxIVZgxBYx1TdFqpxdlW6c6JKtRYCfORaEaORa6O+tySc= -----END CERTIFICATE-----Generated at Tue Oct 21 02:26:28 2025 by rpki-client