$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json) Hash identifier: USOtgakJk/WNy2RuF9Pn56vE5OBlKbwHFW3D8XtltiM= Subject key identifier: 2E:1D:D4:FE:50:DB:58:9D:08:4D:D9:48:3C:24:6F:A1:C3:04:7B:E6 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584A8CD4BCB3307984091A338938 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa Signing time: Thu 17 Jul 2025 16:22:34 +0000 ROA not before: Thu 17 Jul 2025 16:22:34 +0000 ROA not after: Wed 15 Oct 2025 16:22:34 +0000 asID: 398576 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:d4:bc:b3:30:79:84:09:1a:33:89:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Jul 17 16:22:34 2025 GMT Not After : Oct 15 16:22:34 2025 GMT Subject: CN=6be9caab-fa51-456b-b8b3-fc8c1bddbe9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:71:07:8e:ac:0f:22:f6:ff:76:00:54:db:01: b2:b1:00:32:87:ea:fd:a0:56:bf:ff:ce:fd:7b:07: 64:2c:73:30:e3:83:c2:30:5b:18:4c:16:b3:4d:c1: 4a:c5:bd:7b:9a:d7:1e:01:f7:05:e9:39:58:e0:34: a1:2b:2c:c2:c9:34:46:c3:3f:9e:b2:4c:83:76:ee: d0:7c:b0:87:a3:86:01:90:90:c2:3b:04:52:42:c8: 81:cc:5a:ef:8e:57:0f:56:72:0c:76:cb:25:e6:2a: 16:82:ee:03:24:6e:22:fd:e5:e1:f6:e0:a3:96:4b: 0f:1f:17:b6:35:1c:f2:ab:5d:26:c3:8d:89:c9:5c: 89:05:67:fd:ba:3f:62:dd:d2:0b:e2:7d:59:88:1a: 43:28:1f:ed:54:93:46:80:06:c6:76:0b:49:be:bf: 91:5f:13:88:d6:41:4e:83:7c:c8:9f:ee:7c:85:91: 2b:01:34:21:56:8a:13:da:e3:1f:f4:ad:0e:3f:e9: 0d:a0:bd:6e:dc:fc:cf:04:c5:cc:78:6f:d2:46:d3: 28:7e:82:e9:63:d7:0b:5c:0b:de:9c:48:6f:4f:3d: 56:b6:22:23:bd:df:7d:83:24:97:b8:2e:e8:99:c2: 4f:53:f6:06:72:67:2e:c9:34:93:a2:a8:ab:8a:06: ab:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1D:D4:FE:50:DB:58:9D:08:4D:D9:48:3C:24:6F:A1:C3:04:7B:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:08:8b:59:94:fd:ae:97:27:6d:42:cd:d2:01:87:b0:bc:6a: f1:26:4f:c9:82:85:4e:fa:0e:9e:c8:5f:31:e2:1c:91:13:e6: 55:d3:f1:d0:c4:b9:0a:e8:17:11:df:a2:03:d1:4a:98:af:04: 5d:f8:e1:6c:91:69:19:41:14:68:91:27:d6:ee:ec:94:ac:c9: 06:4a:cb:d3:93:df:14:1c:d6:c8:72:f6:1a:ab:c6:6d:8e:55: 66:82:b3:6a:69:24:c5:f7:3c:48:f0:42:36:d6:f7:b5:bd:b2: 22:7e:3e:10:b7:0f:b3:82:09:14:a8:fc:79:80:db:23:97:23: 35:c0:e4:39:af:49:65:40:08:92:75:01:49:eb:fc:32:3c:c7: 21:de:2b:b7:31:c7:22:3a:8c:42:11:ea:09:8a:c1:3b:28:93: 1b:65:41:50:96:c7:ab:a5:28:cf:a7:4b:91:c1:29:55:1c:e4: 29:99:1c:36:d6:94:6e:70:3e:60:5e:0f:c6:a6:9e:0c:ea:c2: 1e:1a:8b:dc:a1:07:33:66:1b:76:55:de:63:2c:c3:76:a0:ff: 6d:b9:80:03:35:80:95:99:aa:67:c1:d3:71:05:60:f9:9c:b7: b5:87:76:4c:38:c4:a3:63:16:d8:ba:1d:e3:c2:2f:8b:bd:b3: 1a:16:54:a1 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEqM1LyzMHmECRoziTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI1MDcxNzE2MjIzNFoXDTI1MTAxNTE2MjIzNFowLzEtMCsGA1UEAxMk NmJlOWNhYWItZmE1MS00NTZiLWI4YjMtZmM4YzFiZGRiZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XEHjqwPIvb/dgBU2wGysQAyh+r9oFa//879 ewdkLHMw44PCMFsYTBazTcFKxb17mtceAfcF6TlY4DShKyzCyTRGwz+eskyDdu7Q fLCHo4YBkJDCOwRSQsiBzFrvjlcPVnIMdssl5ioWgu4DJG4i/eXh9uCjlksPHxe2 NRzyq10mw42JyVyJBWf9uj9i3dIL4n1ZiBpDKB/tVJNGgAbGdgtJvr+RXxOI1kFO g3zIn+58hZErATQhVooT2uMf9K0OP+kNoL1u3PzPBMXMeG/SRtMofoLpY9cLXAve nEhvTz1WtiIjvd99gySXuC7omcJPU/YGcmcuyTSToqirigarqwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFC4d1P5Q21idCE3ZSDwkb6HDBHvmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACEIi1mU/a6XJ21CzdIBh7C8avEmT8mChU76Dp7I XzHiHJET5lXT8dDEuQroFxHfogPRSpivBF344WyRaRlBFGiRJ9bu7JSsyQZKy9OT 3xQc1shy9hqrxm2OVWaCs2ppJMX3PEjwQjbW97W9siJ+PhC3D7OCCRSo/HmA2yOX IzXA5DmvSWVACJJ1AUnr/DI8xyHeK7cxxyI6jEIR6gmKwTsokxtlQVCWx6ulKM+n S5HBKVUc5CmZHDbWlG5wPmBeD8amngzqwh4ai9yhBzNmG3ZV3mMsw3ag/225gAM1 gJWZqmfB03EFYPmct7WHdkw4xKNjFti6HePCL4u9sxoWVKE= -----END CERTIFICATE-----Generated at Sun Aug 10 10:38:41 2025 by rpki-client