$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa File: 995efe20-f339-3067-94d9-cb4ac509c5a8.roa (raw, json) Hash identifier: PfhhoftlUY0zy5+YWwY2hFqoCGoAPz2uAcFFBq7oKs4= Subject key identifier: 2A:BB:56:6F:B2:B8:B9:7B:0C:E1:10:EB:DD:D5:3A:53:A7:C7:62:BE Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F4328584B9E07D024E679E1073B0B7280 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 170.176.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:d0:24:e6:79:e1:07:3b:0b:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=2eeba4bd-b6e4-404e-9d72-546f5c117e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:45:fb:3a:97:33:58:ce:f9:30:a9:27:66:01: 6c:78:2c:ad:2e:b1:66:27:e3:c8:4f:c9:b0:d1:e2: e3:53:0c:43:e2:3c:a0:94:2e:55:c9:3a:ba:75:66: 30:ce:7c:95:09:4f:9e:3b:a0:bc:24:d0:b3:d5:49: fa:5c:dd:5c:b4:85:b9:e4:28:e7:df:45:59:f8:a0: 1e:9a:7f:01:49:96:2e:50:53:93:69:9f:d2:81:be: 42:73:23:3d:f9:a1:6b:b7:ae:18:e0:54:fc:b6:a4: fd:6a:81:74:a5:73:ee:46:f5:c6:c6:de:c1:14:39: 62:bb:75:fd:fb:f3:da:78:1f:62:d7:50:f8:e7:a2: 8f:24:97:1f:41:49:12:4e:57:e8:30:e0:c4:19:46: a8:fe:31:78:81:69:58:1f:3d:f9:29:e8:e4:5b:a9: 71:97:a7:11:cb:fa:cb:0d:cc:9b:c6:69:35:19:97: 5c:48:f0:e7:fd:84:55:c4:14:d3:33:46:dd:99:d6: fd:30:3a:a2:63:26:cc:22:3a:70:2c:53:1f:b4:a8: 76:26:9e:ec:41:5d:00:34:15:7e:16:0f:78:83:56: e6:6f:90:fc:d5:e9:d9:5e:9c:df:7e:ed:24:13:54: 42:13:d4:3a:37:08:dd:2a:b7:11:bc:22:dd:ef:58: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:56:6F:B2:B8:B9:7B:0C:E1:10:EB:DD:D5:3A:53:A7:C7:62:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/995efe20-f339-3067-94d9-cb4ac509c5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:2b:7d:76:7f:0a:ed:1e:e0:fd:62:4a:85:27:b9:0e:38:33: 83:47:b0:b4:22:a1:73:de:e9:a9:92:1c:72:25:6d:60:08:d6: bd:ef:42:bd:c5:c6:20:aa:17:66:bb:c9:e8:15:c8:ec:9b:01: 01:56:72:d9:b6:55:6c:1d:c7:af:43:b8:20:ed:7b:6d:cd:e8: 14:30:11:2e:28:bd:fc:ed:f9:a5:4f:98:bf:71:a0:4f:38:41: a8:00:e5:25:38:b5:5f:23:27:7b:ef:4c:68:2f:42:c9:70:c5: f7:41:09:ec:4d:f7:ae:a4:b0:ac:5d:fe:99:2b:71:29:51:9e: 03:80:cf:9c:12:28:f6:4e:ee:45:24:5b:b0:b0:66:f9:98:dd: 49:fe:66:19:97:79:69:6d:16:e9:91:ed:98:94:52:90:9d:de: 19:41:59:a6:ab:2e:9c:8e:7e:84:ff:23:f1:a6:3d:8f:ec:16: 1d:dc:a4:c9:6b:f0:a5:a9:e8:5e:68:fd:f2:bb:40:3d:41:40: d1:53:f0:3d:d0:58:8e:ca:6f:27:d9:cf:f4:62:39:a0:a3:24: 66:90:93:2e:3f:09:3a:51:ef:26:23:f9:6b:a8:2e:6b:17:01: a7:97:39:45:0b:60:10:26:03:3a:eb:87:9d:97:d9:68:d6:2c: 8d:04:9a:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB9Ak5nnhBzsLcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk MmVlYmE0YmQtYjZlNC00MDRlLTlkNzItNTQ2ZjVjMTE3ZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUX7OpczWM75MKknZgFseCytLrFmJ+PIT8mw 0eLjUwxD4jyglC5VyTq6dWYwznyVCU+eO6C8JNCz1Un6XN1ctIW55Cjn30VZ+KAe mn8BSZYuUFOTaZ/Sgb5CcyM9+aFrt64Y4FT8tqT9aoF0pXPuRvXGxt7BFDliu3X9 +/PaeB9i11D456KPJJcfQUkSTlfoMODEGUao/jF4gWlYHz35KejkW6lxl6cRy/rL Dcybxmk1GZdcSPDn/YRVxBTTM0bdmdb9MDqiYybMIjpwLFMftKh2Jp7sQV0ANBV+ Fg94g1bmb5D81enZXpzffu0kE1RCE9Q6NwjdKrcRvCLd71hEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCq7Vm+yuLl7DOEQ693VOlOnx2K+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvOTk1ZWZlMjAtZjMzOS0z MDY3LTk0ZDktY2I0YWM1MDljNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsrfXZ/Cu0e4P1iSoUnuQ44M4NHsLQioXPe6amSHHIlbWAI1r3vQr3F xiCqF2a7yegVyOybAQFWctm2VWwdx69DuCDte23N6BQwES4ovfzt+aVPmL9xoE84 QagA5SU4tV8jJ3vvTGgvQslwxfdBCexN966ksKxd/pkrcSlRngOAz5wSKPZO7kUk W7CwZvmY3Un+ZhmXeWltFumR7ZiUUpCd3hlBWaarLpyOfoT/I/GmPY/sFh3cpMlr 8KWp6F5o/fK7QD1BQNFT8D3QWI7KbyfZz/RiOaCjJGaQky4/CTpR7yYj+WuoLmsX AaeXOUULYBAmAzrrh52X2WjWLI0EmlI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:09:18 2025 by rpki-client