$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa File: 21f399c4-9b55-39ef-bed5-884b07932f9f.roa (raw, json) Hash identifier: lcRunEGXG1NO5Q+hiK0imp43JeK7CwlwkrWWJhcx4zw= Subject key identifier: 1D:98:44:D2:3E:1E:29:BC:65:88:76:10:4F:74:7E:13:E2:BD:B5:F9 Certificate issuer: /CN=2cb23841-08c5-41c8-81c9-076b288743e8 Certificate serial: 010D0C9F4328584B0A115CC4451DDA46812DBF00 Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 26918 IP address blocks: 204.77.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:5c:c4:45:1d:da:46:81:2d:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=03224a18-9e91-4dbb-9c6a-9593a1c741a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:26:0a:f6:61:a2:9f:3f:dd:f9:cf:6e:3e: 69:bb:ce:44:7e:b5:19:ab:70:db:60:37:26:a7:ce: 23:ea:1a:01:03:07:dd:fc:62:ef:b2:5f:e6:27:78: 66:a1:af:dd:96:16:bf:80:c0:82:7e:60:74:07:e8: 1b:ac:64:5a:39:da:a6:80:53:1b:e9:d1:f1:03:89: 28:6b:21:72:13:ac:3f:02:3e:de:80:da:3a:d2:70: 48:61:c1:35:09:ec:6f:98:fd:86:a9:f3:64:6d:41: 48:f3:ee:5e:87:56:83:31:ba:3e:2d:85:fb:d6:11: 81:78:00:7d:58:c7:46:43:1e:38:60:4f:dd:ac:ee: 72:26:fe:10:90:72:1b:95:f9:82:cc:ea:83:b5:af: c5:4c:b3:6b:d3:da:e7:8f:3f:3d:e5:ce:3d:09:8a: ef:53:08:e1:a8:e5:f6:38:eb:11:ce:3f:b8:01:ef: 5e:57:84:90:4f:49:67:80:c5:58:c9:ec:27:a6:fe: 32:02:1c:a9:e2:11:47:0d:54:74:b2:8a:45:da:3e: cd:0b:68:5a:d2:37:8d:c5:29:38:95:e2:d0:ca:39: 42:d7:b0:f8:88:d3:60:6e:a7:a7:56:80:3b:6c:14: d9:25:be:c7:aa:b4:86:e3:df:e5:a0:74:e9:33:90: 85:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:98:44:D2:3E:1E:29:BC:65:88:76:10:4F:74:7E:13:E2:BD:B5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/21f399c4-9b55-39ef-bed5-884b07932f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl X509v3 Authority Key Identifier: keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer sbgp-ipAddrBlock: critical IPv4: 204.77.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:a5:10:1d:25:d1:31:44:06:b8:4e:c1:d9:d8:f0:94:79:05: dc:b4:2a:22:a0:ca:31:42:0f:3d:e7:79:58:cd:7c:67:90:2b: 1b:c1:2f:ee:5d:23:d9:04:66:c3:1e:f5:0f:e3:b6:4e:a3:d2: c1:00:68:92:e4:d5:7e:19:6c:d7:b4:f2:f8:5d:2c:24:18:7f: af:5d:c1:9f:ca:3e:de:d3:b2:44:e7:ff:7f:32:d4:46:31:f1: 64:e8:f9:1e:e5:00:b0:3f:db:3c:2b:27:41:6b:ef:9a:ed:73: bc:a9:65:08:1f:e9:c4:6f:80:45:a2:28:7b:0a:63:c2:60:45: 43:fe:df:50:a8:8d:e4:e0:74:92:eb:41:5e:8b:2c:02:66:56: ac:d3:cf:75:6b:7f:03:aa:2f:1a:2d:db:67:cd:29:01:a4:01: 95:ed:7b:b9:52:4b:12:5c:02:0e:b4:94:09:b2:6e:62:ce:44: 9a:58:82:4d:9b:79:78:e6:ed:37:0b:03:6a:6c:57:2c:97:3e: 78:8c:3b:cf:35:ce:38:83:99:d2:89:bb:f4:88:94:b1:f4:88: 4b:da:59:4c:6b:5d:21:06:aa:13:32:73:55:d5:ae:52:ba:d5: 95:c1:3a:64:e8:ee:e8:e3:de:de:ba:83:ef:b6:33:74:61:8e: 28:e5:6c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsKEVzERR3aRoEtvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmNiMjM4NDEtMDhjNS00MWM4LTgxYzktMDc2YjI4ODc0 M2U4MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk MDMyMjRhMTgtOWU5MS00ZGJiLTljNmEtOTU5M2ExYzc0MWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYomCvZhop8/3fnPbj5pu85EfrUZq3DbYDcm p84j6hoBAwfd/GLvsl/mJ3hmoa/dlha/gMCCfmB0B+gbrGRaOdqmgFMb6dHxA4ko ayFyE6w/Aj7egNo60nBIYcE1CexvmP2GqfNkbUFI8+5eh1aDMbo+LYX71hGBeAB9 WMdGQx44YE/drO5yJv4QkHIblfmCzOqDta/FTLNr09rnjz895c49CYrvUwjhqOX2 OOsRzj+4Ae9eV4SQT0lngMVYyewnpv4yAhyp4hFHDVR0sopF2j7NC2ha0jeNxSk4 leLQyjlC17D4iNNgbqenVoA7bBTZJb7HqrSG49/loHTpM5CFmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2YRNI+Him8ZYh2EE90fhPivbX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yY2Iy Mzg0MS0wOGM1LTQxYzgtODFjOS0wNzZiMjg4NzQzZTgvMjFmMzk5YzQtOWI1NS0z OWVmLWJlZDUtODg0YjA3OTMyZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmNiMjM4NDEtMDhjNS00MWM4LTgx YzktMDc2YjI4ODc0M2U4LzJjYjIzODQxLTA4YzUtNDFjOC04MWM5LTA3NmIyODg3 NDNlOC5jcmwwHwYDVR0jBBgwFoAUaa4nJAgOrfpuCq6JeTBbwR2WXxgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yY2IyMzg0MS0wOGM1LTQxYzgtODFjOS0wNzZi Mjg4NzQzZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzE2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEulEB0l0TFEBrhOwdnY8JR5Bdy0KiKgyjFCDz3neVjNfGeQKxvBL+5d I9kEZsMe9Q/jtk6j0sEAaJLk1X4ZbNe08vhdLCQYf69dwZ/KPt7TskTn/38y1EYx 8WTo+R7lALA/2zwrJ0Fr75rtc7ypZQgf6cRvgEWiKHsKY8JgRUP+31CojeTgdJLr QV6LLAJmVqzTz3VrfwOqLxot22fNKQGkAZXte7lSSxJcAg60lAmybmLORJpYgk2b eXjm7TcLA2psVyyXPniMO881zjiDmdKJu/SIlLH0iEvaWUxrXSEGqhMyc1XVrlK6 1ZXBOmTo7ujj3t66g++2M3RhjijlbAI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:36:58 2025 by rpki-client