$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa File: b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa (raw, json) Hash identifier: Bcf/87GqjXx8KVwlbwxdXE372yJ3KM+DM3TqJp3DJd0= Subject key identifier: C4:52:26:2A:6E:CA:7E:BA:FB:7C:71:B0:FC:C0:EC:38:21:C8:E5:2B Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F4328584AE4611653B44D992ECE2D4900 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 170.176.220.0/24 maxlen: 24 170.176.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:16:53:b4:4d:99:2e:ce:2d:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=48f53282-ca31-42ce-9310-1c1ca09adc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:5b:d9:5e:18:14:77:f3:d2:c9:54:d4:ff: b4:46:c6:fb:b6:00:fe:e7:19:87:32:ae:30:1c:2f: e1:90:45:a6:ed:f5:d5:8a:a2:72:e7:d9:bf:3d:1c: df:df:1e:68:18:c2:5e:1e:c2:a0:6a:25:1a:d4:36: e1:ac:ac:2d:9a:98:47:5e:51:fa:b2:bc:8c:a3:3c: f1:ec:2f:63:98:29:7b:8a:eb:d0:aa:22:37:89:55: c9:f9:e9:b6:df:b2:15:6a:8d:fc:d8:ae:c5:ef:38: f5:0a:fa:06:32:80:22:1b:f4:47:fa:36:c4:e7:f4: 7d:8d:c5:69:d1:5a:93:fe:fe:5c:8a:7e:27:11:e9: fe:48:7f:b4:51:97:29:bf:75:e0:58:fe:c0:1a:35: 17:f9:f2:af:1b:49:7a:f8:ae:dd:25:c3:b8:51:58: 0f:8a:1d:ef:58:65:ce:14:31:c4:4a:4e:aa:c6:7d: c3:67:b2:fb:56:5c:c7:d8:3f:e6:72:85:b5:82:57: 6a:21:69:fd:60:a7:80:35:f7:c2:ec:07:86:1e:ce: 42:b1:7d:2c:9b:f8:0e:83:68:74:ef:7b:a1:35:e6: d8:aa:6a:19:28:18:ec:36:6d:26:e3:df:9f:c2:78: f4:f7:e8:0b:c7:56:92:d0:11:86:a2:82:cc:eb:b5: 49:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:52:26:2A:6E:CA:7E:BA:FB:7C:71:B0:FC:C0:EC:38:21:C8:E5:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/b48d9434-68a1-30d3-b7c0-fecc7e76f3e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:80:38:5e:20:b2:e1:f7:d5:86:6d:d6:95:b2:ae:cf:50:57: 15:8f:e0:87:71:89:b4:d5:9c:ae:3f:c0:e9:48:8d:f0:de:12: dc:47:49:33:29:c9:af:4d:a0:f7:4f:ea:22:0a:81:c9:3b:f0: bd:9c:c4:86:4f:0b:e8:1c:62:6c:ff:e5:7b:ea:ab:74:e9:31: 63:e6:fa:97:35:ed:10:84:7a:39:6e:cc:32:aa:50:c7:89:88: d3:43:b1:c6:15:0d:f2:e9:18:0f:2d:59:5d:cf:36:39:90:14: 12:eb:82:10:22:d3:09:d0:9d:2b:14:02:9c:a0:91:90:c8:07: 29:72:ea:82:77:f2:23:c4:66:6c:2e:52:40:5a:fc:55:03:2f: 8a:b4:a9:2d:ee:9f:d7:1a:40:27:ee:af:61:eb:ea:e9:05:6a: d8:08:aa:ad:cf:7a:ec:0f:7d:c6:47:22:c5:8c:5d:27:b3:ba: ad:7c:9b:2a:dc:3d:81:7a:bf:11:b8:16:36:26:ab:ad:5c:76: c8:59:70:0f:b9:44:c6:b9:70:f5:fd:97:77:47:1a:a5:62:fb: 90:b2:27:d5:77:f2:dd:da:fe:4b:5c:bd:0a:3d:cc:c4:5f:5d: a0:ea:11:de:3a:cf:ce:bf:4f:33:e4:a7:35:5a:66:44:e2:8f: ad:cb:ec:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRZTtE2ZLs4tSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk NDhmNTMyODItY2EzMS00MmNlLTkzMTAtMWMxY2EwOWFkYzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0Vb2V4YFHfz0slU1P+0Rsb7tgD+5xmHMq4w HC/hkEWm7fXViqJy59m/PRzf3x5oGMJeHsKgaiUa1DbhrKwtmphHXlH6sryMozzx 7C9jmCl7iuvQqiI3iVXJ+em237IVao382K7F7zj1CvoGMoAiG/RH+jbE5/R9jcVp 0VqT/v5cin4nEen+SH+0UZcpv3XgWP7AGjUX+fKvG0l6+K7dJcO4UVgPih3vWGXO FDHESk6qxn3DZ7L7VlzH2D/mcoW1gldqIWn9YKeANffC7AeGHs5CsX0sm/gOg2h0 73uhNebYqmoZKBjsNm0m49+fwnj09+gLx1aS0BGGooLM67VJRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRSJipuyn66+3xxsPzA7DghyOUrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvYjQ4ZDk0MzQtNjhhMS0z MGQzLWI3YzAtZmVjYzdlNzZmM2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqrDcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALCAOF4gsuH31YZt1pWyrs9QVxWP4IdxibTVnK4/wOlIjfDeEtxHSTMp ya9NoPdP6iIKgck78L2cxIZPC+gcYmz/5Xvqq3TpMWPm+pc17RCEejluzDKqUMeJ iNNDscYVDfLpGA8tWV3PNjmQFBLrghAi0wnQnSsUApygkZDIByly6oJ38iPEZmwu UkBa/FUDL4q0qS3un9caQCfur2Hr6ukFatgIqq3PeuwPfcZHIsWMXSezuq18myrc PYF6vxG4FjYmq61cdshZcA+5RMa5cPX9l3dHGqVi+5CyJ9V38t3a/ktcvQo9zMRf XaDqEd46z86/TzPkpzVaZkTij63L7FA= -----END CERTIFICATE-----Generated at Sat Aug 23 10:13:39 2025 by rpki-client