$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa File: 02a2b201-0d63-3b68-aadd-ec4984b4846f.roa (raw, json) Hash identifier: tNjLJ1N+gnBk5E6q028eO6yjmZz7U+e6Tq+FqBi7YR4= Subject key identifier: 74:DF:DD:C6:77:4A:C9:65:6E:FD:9C:96:5C:9E:8A:24:4D:12:87:CE Certificate issuer: /CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Certificate serial: 010D0C9F4328584B3DB6F96CD4DB7E9ED88F5A40 Authority key identifier: 42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 12129 IP address blocks: 199.167.252.0/24 maxlen: 24 199.167.253.0/24 maxlen: 24 199.167.254.0/24 maxlen: 24 199.167.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:f9:6c:d4:db:7e:9e:d8:8f:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21dd6860-719e-46c0-8b7c-89b9e8d88da6 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=b4869a4f-a22a-47e7-a1ce-56e3e3c96867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:a8:3f:ce:2d:9f:bd:aa:7f:ab:68:2c:7e: 69:48:65:ac:ea:be:87:77:a7:b4:64:87:96:17:dd: 01:69:30:20:53:8b:0d:a2:a5:b4:9f:1c:0f:b3:82: 3e:55:8e:dc:32:60:05:d4:5d:2e:81:73:6c:94:93: 16:84:ac:cf:af:2e:df:df:38:1c:24:d2:a3:c5:e7: 7e:0e:0c:a9:61:8b:22:32:d3:ca:69:bf:7b:85:96: 00:93:18:43:93:3f:42:13:95:75:b5:b3:98:63:f0: ae:6f:1d:ab:60:b6:71:cc:70:fa:f8:4d:b3:f3:40: a6:84:d4:8e:42:1a:82:a8:31:8f:87:21:5a:b2:8c: f8:b3:f1:77:63:1e:fd:93:1c:17:6b:df:d0:c1:86: 6d:53:83:11:3b:71:02:49:ba:d5:cf:40:45:57:89: 05:1e:26:80:29:9b:69:92:20:69:ba:f8:eb:cf:1c: d6:46:fe:bd:95:2f:32:84:37:80:8b:4c:5f:85:b0: 98:d7:7f:e4:bf:9a:67:fc:6a:79:ff:f4:bf:37:60: 20:f3:ab:6c:94:06:54:a2:46:cf:c8:8f:2f:b4:21: 8e:bc:ae:1f:e5:53:c2:99:6c:2a:65:46:d0:0c:87: 75:87:b5:0c:4d:af:da:84:f7:a8:92:b2:9e:4d:22: 67:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:DD:C6:77:4A:C9:65:6E:FD:9C:96:5C:9E:8A:24:4D:12:87:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/02a2b201-0d63-3b68-aadd-ec4984b4846f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6/21dd6860-719e-46c0-8b7c-89b9e8d88da6.crl X509v3 Authority Key Identifier: keyid:42:79:8D:AA:08:72:7C:74:A2:5D:C9:91:AD:DB:EA:CA:2E:FC:A5:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21dd6860-719e-46c0-8b7c-89b9e8d88da6.cer sbgp-ipAddrBlock: critical IPv4: 199.167.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:9d:60:2e:62:e9:40:49:11:c0:04:d5:2c:49:be:2f:4a:54: 56:b2:73:ee:21:ea:ac:1a:21:49:78:22:84:9b:a1:08:d0:47: 13:ba:55:08:db:66:ae:83:7d:a2:be:0a:70:f6:f9:93:a6:d8: 73:ab:92:ac:99:60:10:98:86:f7:c1:0b:20:a4:f7:a0:8a:58: 84:28:37:67:7b:c0:10:97:22:ae:cd:c9:bf:fc:68:35:bc:19: aa:06:9a:3c:89:48:b9:39:08:c3:01:f3:11:3a:63:01:a5:28: 7e:e5:2f:52:bb:40:00:7c:0a:68:3a:12:dd:35:03:5c:71:6c: b4:08:c0:3e:5b:1d:20:e2:72:4f:89:a5:04:56:dd:9b:e4:d8: 2a:47:5f:18:e8:c0:d3:97:b1:0f:16:a3:c5:f9:32:b6:40:52: d7:47:44:e6:cb:02:56:75:ea:8f:95:ef:ba:fc:2a:bf:f0:0d: d0:bf:aa:2f:94:41:80:6c:a7:19:ae:8a:b5:61:73:a0:0b:87: d0:ef:bd:ad:51:de:37:c0:2f:2f:22:bc:11:09:64:09:22:74: 9b:b8:ca:ae:d2:68:ba:d0:34:16:72:a4:5d:68:39:c7:83:6c: ac:09:f2:77:0c:d3:6c:77:ec:d1:93:c3:4c:87:11:f0:2b:e8: e2:b5:16:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tvls1Nt+ntiPWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFkZDY4NjAtNzE5ZS00NmMwLThiN2MtODliOWU4ZDg4 ZGE2MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YjQ4NjlhNGYtYTIyYS00N2U3LWExY2UtNTZlM2UzYzk2ODY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufWoP84tn72qf6toLH5pSGWs6r6Hd6e0ZIeW F90BaTAgU4sNoqW0nxwPs4I+VY7cMmAF1F0ugXNslJMWhKzPry7f3zgcJNKjxed+ DgypYYsiMtPKab97hZYAkxhDkz9CE5V1tbOYY/Cubx2rYLZxzHD6+E2z80CmhNSO QhqCqDGPhyFasoz4s/F3Yx79kxwXa9/QwYZtU4MRO3ECSbrVz0BFV4kFHiaAKZtp kiBpuvjrzxzWRv69lS8yhDeAi0xfhbCY13/kv5pn/Gp5//S/N2Ag86tslAZUokbP yI8vtCGOvK4f5VPCmWwqZUbQDId1h7UMTa/ahPeokrKeTSJncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTf3cZ3Ssllbv2cllyeiiRNEofOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRk Njg2MC03MTllLTQ2YzAtOGI3Yy04OWI5ZThkODhkYTYvMDJhMmIyMDEtMGQ2My0z YjY4LWFhZGQtZWM0OTg0YjQ4NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFkZDY4NjAtNzE5ZS00NmMwLThi N2MtODliOWU4ZDg4ZGE2LzIxZGQ2ODYwLTcxOWUtNDZjMC04YjdjLTg5YjllOGQ4 OGRhNi5jcmwwHwYDVR0jBBgwFoAUQnmNqghyfHSiXcmRrdvqyi78pSgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWRkNjg2MC03MTllLTQ2YzAtOGI3Yy04OWI5 ZThkODhkYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx6f8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqdYC5i6UBJEcAE1SxJvi9KVFayc+4h6qwaIUl4IoSboQjQRxO6VQjb Zq6DfaK+CnD2+ZOm2HOrkqyZYBCYhvfBCyCk96CKWIQoN2d7wBCXIq7Nyb/8aDW8 GaoGmjyJSLk5CMMB8xE6YwGlKH7lL1K7QAB8Cmg6Et01A1xxbLQIwD5bHSDick+J pQRW3Zvk2CpHXxjowNOXsQ8Wo8X5MrZAUtdHRObLAlZ16o+V77r8Kr/wDdC/qi+U QYBspxmuirVhc6ALh9Dvva1R3jfALy8ivBEJZAkidJu4yq7SaLrQNBZypF1oOceD bKwJ8ncM02x37NGTw0yHEfAr6OK1FvY= -----END CERTIFICATE-----Generated at Sat Oct 11 07:49:40 2025 by rpki-client