$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa File: 3d224895-501e-3aed-857c-97ee5700de82.roa (raw, json) Hash identifier: 1ddZv73C0Hgv4vUoxo8jhy28GKX8ReRsuI6rcLRuSFU= Subject key identifier: 86:15:CC:15:A9:ED:27:74:88:0E:85:A6:A7:91:DE:48:BA:DE:C3:88 Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584B047BFE30C317EEC8734AC700 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 30242 IP address blocks: 199.167.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fe:30:c3:17:ee:c8:73:4a:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=f5a75d20-713a-4bf6-a9e5-e2756ec615bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c2:92:cb:61:84:84:bf:7a:59:49:4e:70:01: 04:b2:4c:34:48:a1:5c:84:32:f0:49:1b:71:3c:b1: f0:5f:f8:94:b5:b0:65:51:e7:db:10:c1:d8:e8:2f: 85:d8:4a:2c:e0:25:4a:7d:69:4e:e6:9a:0e:f7:a6: 95:ae:92:fd:d4:c5:95:b9:c7:3c:c6:5b:03:18:37: 23:14:c9:f0:e8:cb:9f:5c:2f:97:71:ca:f6:33:09: 69:4a:2a:87:60:4d:89:20:be:88:f6:47:c2:80:b9: b8:42:b1:4a:8b:ee:27:3f:4e:eb:94:6a:40:af:3c: 98:83:37:b2:b8:ef:f8:4d:f4:b0:0c:bd:02:78:19: cd:75:44:1d:72:bb:5a:9b:d6:ef:5d:db:e6:9b:8e: 98:2c:4d:bc:55:b1:10:dd:3b:22:0f:10:06:a8:5e: 57:6a:76:e3:6e:db:0d:79:3f:26:b4:49:88:45:79: c7:4c:28:9d:c4:b6:3a:27:12:2e:22:a0:24:65:97: cd:7f:5a:c3:bf:05:11:84:27:75:2d:36:5a:ff:bf: da:25:67:7e:5d:5e:81:a4:37:3e:7d:78:46:0b:c3: dd:ec:b5:36:23:7f:35:5a:52:3c:cd:bd:10:c0:ee: 97:f4:8d:00:f1:d3:f0:22:4f:e2:bb:7c:74:4f:4e: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:15:CC:15:A9:ED:27:74:88:0E:85:A6:A7:91:DE:48:BA:DE:C3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/3d224895-501e-3aed-857c-97ee5700de82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:9e:21:3f:1d:f8:a6:df:dd:b4:9d:5d:92:f3:cb:08:fa:a2: a6:fa:6c:50:04:8f:bf:99:d7:ed:77:27:ee:51:eb:ef:9e:8d: a3:1d:4d:f4:1f:db:b0:28:53:37:4b:ab:38:6f:7e:d6:44:f2: c5:de:c0:1a:9a:6c:a3:11:30:db:3c:80:cf:dc:e9:72:52:78: 0b:2b:ed:90:79:5e:c6:d9:43:01:50:48:88:66:cd:a0:d2:73: 4c:be:a7:0a:6b:98:a7:d2:f4:a7:04:37:3a:f6:ea:e6:06:f0: 92:0b:16:d4:ac:d6:b6:d9:e6:82:8e:c3:d4:17:af:40:29:74: 92:5d:65:7e:1d:5d:3e:02:a3:55:17:78:d7:72:48:9b:a4:cd: 02:a2:65:85:23:6f:ba:65:9c:66:24:8f:54:69:79:32:30:80: 2d:c9:75:b4:c0:c4:fe:03:4e:33:56:83:91:91:f2:0d:46:09: 26:59:09:82:ef:82:07:5a:5d:cc:1a:79:ff:b6:fb:0e:6d:da: 80:fa:8e:fe:d3:3c:46:ae:8d:9a:53:63:7e:88:da:dd:79:8a: d1:7b:09:2b:03:cb:aa:ce:32:16:2d:5e:a7:16:4f:7d:29:b9: 3e:1e:f9:89:dc:a5:57:4d:52:a7:2d:8c:61:a2:7d:18:a8:7a: 24:27:7e:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/4wwxfuyHNKxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjVhNzVkMjAtNzEzYS00YmY2LWE5ZTUtZTI3NTZlYzYxNWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncKSy2GEhL96WUlOcAEEskw0SKFchDLwSRtx PLHwX/iUtbBlUefbEMHY6C+F2Eos4CVKfWlO5poO96aVrpL91MWVucc8xlsDGDcj FMnw6MufXC+Xccr2MwlpSiqHYE2JIL6I9kfCgLm4QrFKi+4nP07rlGpArzyYgzey uO/4TfSwDL0CeBnNdUQdcrtam9bvXdvmm46YLE28VbEQ3TsiDxAGqF5XanbjbtsN eT8mtEmIRXnHTCidxLY6JxIuIqAkZZfNf1rDvwURhCd1LTZa/7/aJWd+XV6BpDc+ fXhGC8Pd7LU2I381WlI8zb0QwO6X9I0A8dPwIk/iu3x0T04x0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYVzBWp7Sd0iA6FpqeR3ki63sOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvM2QyMjQ4OTUtNTAxZS0z YWVkLTg1N2MtOTdlZTU3MDBkZTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6eIT8d+Kbf3bSdXZLzywj6oqb6bFAEj7+Z1+13J+5R6++ejaMdTfQf 27AoUzdLqzhvftZE8sXewBqabKMRMNs8gM/c6XJSeAsr7ZB5XsbZQwFQSIhmzaDS c0y+pwprmKfS9KcENzr26uYG8JILFtSs1rbZ5oKOw9QXr0ApdJJdZX4dXT4Co1UX eNdySJukzQKiZYUjb7plnGYkj1RpeTIwgC3JdbTAxP4DTjNWg5GR8g1GCSZZCYLv ggdaXcwaef+2+w5t2oD6jv7TPEaujZpTY36I2t15itF7CSsDy6rOMhYtXqcWT30p uT4e+YncpVdNUqctjGGifRioeiQnfpo= -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:57 2025 by rpki-client