$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa File: AS21769.roa (raw, json) Hash identifier: hviYqqAZvfGaii6fitNzYswBD7kDWcD0KDtMR/ITGA0= Subject key identifier: 53:32:13:B6:66:20:8F:30:CD:B6:5A:E3:3C:DA:72:08:0D:5E:AE:16 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 6C9DAE8E05AEE86921AF97A6B380F07CC3BB8B30 Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa Signing time: Wed 05 Nov 2025 01:30:05 +0000 ROA not before: Wed 05 Nov 2025 01:25:05 +0000 ROA not after: Wed 04 Nov 2026 01:30:05 +0000 asID: 21769 IP address blocks: 40.27.4.0/22 maxlen: 24 40.27.24.0/23 maxlen: 24 40.27.32.0/22 maxlen: 24 40.223.14.0/23 maxlen: 24 40.223.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9d:ae:8e:05:ae:e8:69:21:af:97:a6:b3:80:f0:7c:c3:bb:8b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Nov 5 01:25:05 2025 GMT Not After : Nov 4 01:30:05 2026 GMT Subject: CN=533213B666208F30CDB65AE33CDA72080D5EAE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bf:44:a0:c1:ae:7c:92:bb:67:cf:3d:74:5e: 68:3b:02:1a:36:7d:e2:5b:5b:97:b5:4b:b7:34:27: d4:4c:64:74:05:60:2d:93:89:a0:bc:ca:be:60:2f: 09:b0:16:ba:3d:35:13:fa:4e:98:49:05:0f:26:76: 3c:34:c4:52:76:6f:c3:3b:6d:5b:63:32:9c:3c:aa: 0b:46:f2:a2:d1:1f:17:c3:ba:48:d8:3c:a2:a5:d2: dc:81:b5:2c:23:fa:f6:6d:ee:b8:20:81:e2:a8:89: 1d:b7:90:1f:a1:e9:cb:b7:ff:f3:d7:ce:b1:35:81: be:e1:b1:22:fd:3e:31:0b:b6:c8:0c:ce:f3:df:32: d7:44:33:b0:b0:f0:e3:34:07:d9:15:e0:3b:e0:a9: b3:a9:12:07:53:6e:e5:63:a3:80:2f:ca:75:8b:32: 9f:8e:83:84:ad:ea:b0:b5:ff:21:39:16:3a:7c:59: 0a:cc:61:9b:82:d3:53:3f:9d:6b:f4:04:4d:e7:a1: b6:5d:f1:c9:17:61:27:1b:e5:e9:06:84:34:d3:f6: 12:69:d7:12:ca:56:f3:8f:3b:e9:15:57:fc:78:13: a9:44:2c:d7:1d:86:10:80:06:e7:ec:96:01:ef:38: 09:bd:b8:5f:79:39:ad:a3:57:f9:38:ca:20:94:78: 0a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:32:13:B6:66:20:8F:30:CD:B6:5A:E3:3C:DA:72:08:0D:5E:AE:16 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.4.0/22 40.27.24.0/23 40.27.32.0/22 40.223.14.0/23 40.223.184.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:d0:ac:d1:46:d0:f6:c0:3c:7e:e7:92:d8:6e:4e:98:ea:62: 35:30:93:8c:3a:3a:df:2a:c5:da:f7:17:26:37:bb:c7:a7:81: b8:97:cf:93:11:5a:10:77:0e:f6:7a:01:05:24:d3:29:16:12: c2:81:fb:b9:a9:1f:a0:df:f8:4e:8e:82:5a:59:f4:eb:06:21: 08:31:3c:78:2b:87:1f:20:fb:24:40:7c:a1:7e:a9:36:62:58: e6:cc:59:7b:4c:43:6a:aa:8a:9d:6f:5e:5f:52:80:d0:9f:31: 91:b6:72:ba:43:c4:b1:6c:7a:3e:8d:f9:ff:ad:16:84:68:e3: d8:81:f0:91:21:2d:6c:7a:53:f2:3f:c6:5c:1d:76:99:c2:06: 0a:11:b8:98:81:66:fc:f8:8f:57:72:a1:71:ff:85:4d:34:59: ba:b8:7c:d7:d3:dd:e5:34:aa:95:f5:0f:b8:c6:2c:e5:61:cf: 6d:0d:2d:57:f1:ec:f2:f4:99:d1:a9:66:44:fb:cd:fd:66:00: f0:e5:6d:d4:73:e2:24:20:b8:a3:9e:04:a5:28:d3:8d:ca:b5: fd:55:b4:a0:c3:09:a2:fb:f5:c1:9a:8e:5d:54:18:18:98:3c: cd:d0:2a:87:bf:87:70:bc:d5:dc:b2:0f:e1:45:90:fc:2c:0f: 9b:57:46:00 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIUbJ2ujgWu6Gkhr5ems4DwfMO7izAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMTA1MDEyNTA1WhcNMjYxMTA0MDEzMDA1 WjAzMTEwLwYDVQQDEyg1MzMyMTNCNjY2MjA4RjMwQ0RCNjVBRTMzQ0RBNzIwODBE NUVBRTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw79EoMGufJK7 Z889dF5oOwIaNn3iW1uXtUu3NCfUTGR0BWAtk4mgvMq+YC8JsBa6PTUT+k6YSQUP JnY8NMRSdm/DO21bYzKcPKoLRvKi0R8Xw7pI2DyipdLcgbUsI/r2be64IIHiqIkd t5AfoenLt//z186xNYG+4bEi/T4xC7bIDM7z3zLXRDOwsPDjNAfZFeA74KmzqRIH U27lY6OAL8p1izKfjoOEreqwtf8hORY6fFkKzGGbgtNTP51r9ARN56G2XfHJF2En G+XpBoQ00/YSadcSylbzjzvpFVf8eBOpRCzXHYYQgAbn7JYB7zgJvbhfeTmto1f5 OMoglHgKKwIDAQABo4ICljCCApIwHQYDVR0OBBYEFFMyE7ZmII8wzbZa4zzacggN Xq4WMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDcG CCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCKBsEAwQBKBsYAwQCKBsgAwQBKN8O AwQCKN+4MA0GCSqGSIb3DQEBCwUAA4IBAQBt0KzRRtD2wDx+55LYbk6Y6mI1MJOM OjrfKsXa9xcmN7vHp4G4l8+TEVoQdw72egEFJNMpFhLCgfu5qR+g3/hOjoJaWfTr BiEIMTx4K4cfIPskQHyhfqk2YljmzFl7TENqqoqdb15fUoDQnzGRtnK6Q8SxbHo+ jfn/rRaEaOPYgfCRIS1selPyP8ZcHXaZwgYKEbiYgWb8+I9XcqFx/4VNNFm6uHzX 093lNKqV9Q+4xizlYc9tDS1X8ezy9JnRqWZE+839ZgDw5W3Uc+IkILijngSlKNON yrX9VbSgwwmi+/XBmo5dVBgYmDzN0CqHv4dwvNXcsg/hRZD8LA+bV0YA -----END CERTIFICATE-----Generated at Wed Nov 5 02:57:14 2025 by rpki-client