$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa File: 079c6c1e-7cea-39de-b468-9dc26c56722f.roa (raw, json) Hash identifier: +F07Pw98dV7w7ZKmtco57Ulzpexf+NLW3XojzRpitXI= Subject key identifier: 26:73:2A:6F:46:BE:6A:FC:46:9C:26:27:74:D4:37:EE:4A:FE:84:E8 Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Certificate serial: 010D0C9F4328584BAA97BC4EB031D1EB5A8953F0 Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 16557 IP address blocks: 72.21.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:bc:4e:b0:31:d1:eb:5a:89:53:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=87a38307-2151-4794-b1ff-b654e4f3394b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f5:4b:31:c5:63:d4:80:04:f7:4e:18:63:79: d7:1e:67:1a:97:7a:42:8d:d9:d2:34:2b:ee:1b:1e: db:a1:87:c8:2a:e2:2e:9e:a3:69:44:42:bb:23:91: a5:74:80:c7:32:09:a5:80:8e:00:65:24:21:5c:53: 83:5e:a7:94:11:f4:a6:f6:81:96:25:29:ae:7b:42: 53:64:92:d8:f7:a4:8e:e0:96:c9:72:77:d4:7e:53: ca:7e:a2:29:09:cf:99:21:8d:5c:21:9f:76:ee:8c: 87:fb:14:87:46:04:8f:b6:44:77:fc:c2:00:5b:a9: 26:2c:f5:54:36:e1:4e:13:61:fe:ba:7c:1c:bc:a4: c3:8b:c8:42:7d:7f:8c:db:23:b6:b8:7d:84:dc:da: 9d:08:3f:2c:eb:fb:53:96:00:c6:00:10:63:fc:7c: ba:48:d8:52:9c:19:fe:77:ff:fe:73:88:7a:5d:d7: e3:6e:3f:4a:cd:c5:51:6d:86:e6:5f:a4:1b:0e:4a: 82:d5:39:c5:6f:4c:a9:32:43:e6:64:43:9a:6b:11: 59:f7:8a:30:79:60:0e:54:15:5d:80:2d:7b:9f:90: b6:cf:ae:60:1d:a1:48:2d:72:82:25:8d:f4:1f:78: 6e:c9:e5:e5:9a:99:b2:dc:2b:e2:3d:41:05:ad:b6: c9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:73:2A:6F:46:BE:6A:FC:46:9C:26:27:74:D4:37:EE:4A:FE:84:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/079c6c1e-7cea-39de-b468-9dc26c56722f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl X509v3 Authority Key Identifier: keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer sbgp-ipAddrBlock: critical IPv4: 72.21.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:a7:21:4c:7c:51:a6:f1:ca:d0:96:70:f3:19:fa:ae:00:22: c3:4b:16:c3:80:9b:2a:37:a6:85:15:e5:23:16:38:94:5a:0b: 15:06:51:ba:a9:46:76:2e:94:29:b0:07:80:4d:44:b4:2d:ab: 11:2c:5f:ec:18:0f:ff:d3:f9:d6:0e:21:d3:a7:2d:9a:81:70: d6:00:3f:f1:df:f3:72:8a:d9:95:e8:90:8d:91:be:30:15:91: 22:2a:d4:43:4e:e8:98:98:83:80:1d:2d:4c:10:82:56:b0:8d: 35:85:89:82:f6:1c:78:1e:ef:bd:a8:65:93:2d:ba:bc:7b:30: 7d:5a:68:e4:1c:07:a5:ca:fa:c2:10:ee:c3:16:a4:bc:33:66: ee:bb:6c:02:0b:a8:16:2a:89:b1:31:32:4f:a5:59:45:97:73: 8d:87:6d:ac:ea:a2:f5:e5:f5:42:52:06:16:03:ab:35:f4:00: d4:60:4c:a6:60:d8:ed:51:33:ef:85:5f:bf:16:77:c5:b2:b7: 0f:6c:1f:9b:9f:e1:f0:11:0f:2e:b0:37:70:02:7d:6a:d3:8a: f7:87:ba:4f:af:15:fe:55:5f:51:92:18:2d:77:f1:46:85:32: ce:fa:45:d1:78:7d:6d:31:36:43:ec:8f:c7:93:4c:ca:06:33: 63:aa:3a:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql7xOsDHR61qJU/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhM2ExNWYtZTZlYS00MzgyLTgzY2QtZjM5Y2VjZTk3 YjJlMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk ODdhMzgzMDctMjE1MS00Nzk0LWIxZmYtYjY1NGU0ZjMzOTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPVLMcVj1IAE904YY3nXHmcal3pCjdnSNCvu Gx7boYfIKuIunqNpREK7I5GldIDHMgmlgI4AZSQhXFODXqeUEfSm9oGWJSmue0JT ZJLY96SO4JbJcnfUflPKfqIpCc+ZIY1cIZ927oyH+xSHRgSPtkR3/MIAW6kmLPVU NuFOE2H+unwcvKTDi8hCfX+M2yO2uH2E3NqdCD8s6/tTlgDGABBj/Hy6SNhSnBn+ d//+c4h6Xdfjbj9KzcVRbYbmX6QbDkqC1TnFb0ypMkPmZEOaaxFZ94oweWAOVBVd gC17n5C2z65gHaFILXKCJY30H3huyeXlmpmy3CviPUEFrbbJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZzKm9Gvmr8RpwmJ3TUN+5K/oToMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEz YTE1Zi1lNmVhLTQzODItODNjZC1mMzljZWNlOTdiMmUvMDc5YzZjMWUtN2NlYS0z OWRlLWI0NjgtOWRjMjZjNTY3MjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMjFhM2ExNWYtZTZlYS00MzgyLTgz Y2QtZjM5Y2VjZTk3YjJlLzIxYTNhMTVmLWU2ZWEtNDM4Mi04M2NkLWYzOWNlY2U5 N2IyZS5jcmwwHwYDVR0jBBgwFoAUtuxiIPPxR5PblYjHQ8xX2nJuDkswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yMWEzYTE1Zi1lNmVhLTQzODItODNjZC1mMzlj ZWNlOTdiMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBUWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2nIUx8UabxytCWcPMZ+q4AIsNLFsOAmyo3poUV5SMWOJRaCxUGUbqp RnYulCmwB4BNRLQtqxEsX+wYD//T+dYOIdOnLZqBcNYAP/Hf83KK2ZXokI2RvjAV kSIq1ENO6JiYg4AdLUwQglawjTWFiYL2HHge772oZZMturx7MH1aaOQcB6XK+sIQ 7sMWpLwzZu67bAILqBYqibExMk+lWUWXc42HbazqovXl9UJSBhYDqzX0ANRgTKZg 2O1RM++FX78Wd8Wytw9sH5uf4fARDy6wN3ACfWrTiveHuk+vFf5VX1GSGC138UaF Ms76RdF4fW0xNkPsj8eTTMoGM2OqOhs= -----END CERTIFICATE-----Generated at Wed Nov 5 21:23:07 2025 by rpki-client