$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa File: AS21769.roa (raw, json) Hash identifier: bsBowRxQ5JvUks7Du7c8HLWokEfWJ9DZAud2anpqYYM= Subject key identifier: 9A:90:A8:A3:F6:34:1A:21:BA:17:DD:9B:EF:60:32:9D:8C:40:A7:A8 Certificate issuer: /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Certificate serial: 5D1436EE084B12147B237877A6A911FB5902D21C Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa Signing time: Tue 21 Oct 2025 16:33:41 +0000 ROA not before: Tue 21 Oct 2025 16:28:41 +0000 ROA not after: Tue 20 Oct 2026 16:33:41 +0000 asID: 21769 IP address blocks: 40.27.24.0/23 maxlen: 24 40.223.14.0/23 maxlen: 24 40.223.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:14:36:ee:08:4b:12:14:7b:23:78:77:a6:a9:11:fb:59:02:d2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e Validity Not Before: Oct 21 16:28:41 2025 GMT Not After : Oct 20 16:33:41 2026 GMT Subject: CN=9A90A8A3F6341A21BA17DD9BEF60329D8C40A7A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cf:1c:91:d1:b1:82:9d:71:8e:fe:ef:ea:6e: 8c:2a:57:13:b1:7d:ec:1c:85:5a:31:fc:2e:61:a4: fe:31:09:04:63:30:e1:6f:3e:32:c7:84:71:92:de: 9a:c2:9a:01:aa:fd:c4:72:0a:73:37:c8:54:01:df: 8d:c7:23:3a:05:9a:87:6d:1e:f5:7e:39:db:4d:ab: b1:3f:00:65:15:dd:de:95:a1:b1:3e:85:d6:f1:7b: 07:11:e0:9f:04:74:1f:4b:99:15:eb:33:02:6c:27: 0c:90:52:02:93:9e:cb:09:c0:1a:07:a1:54:64:06: 5a:2b:ef:38:a6:f5:b4:0f:f9:7f:6b:9a:a5:d5:6e: 41:83:2a:df:e5:a4:2f:8f:da:84:24:d4:1a:85:4f: a3:6b:11:9e:83:20:8c:c7:a3:bc:87:21:6e:17:06: 36:01:6c:04:fd:cd:ba:66:ea:3f:0a:8a:38:40:4f: 2f:d8:f4:7f:5e:75:e1:67:0d:35:e1:c0:14:c6:57: 7b:64:9a:30:dd:f8:ae:cb:04:71:2a:4c:61:a5:78: c5:cf:07:88:9e:23:e3:16:0c:e5:85:47:d1:98:72: da:b2:06:fb:3f:cb:69:9b:d3:51:29:2b:d4:d0:ef: 1f:30:8c:6f:bb:b6:12:7c:c9:9e:97:50:dc:7c:78: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:90:A8:A3:F6:34:1A:21:BA:17:DD:9B:EF:60:32:9D:8C:40:A7:A8 X509v3 Authority Key Identifier: keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS21769.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 40.27.24.0/23 40.223.14.0/23 40.223.184.0/22 Signature Algorithm: sha256WithRSAEncryption 11:f0:34:ff:80:5b:5f:b1:d3:1a:86:d5:dc:12:0f:f9:73:4e: 34:f5:57:8f:50:a0:26:c5:bc:3c:10:c1:20:29:63:09:46:87: c4:b2:8b:ac:38:c5:3c:f1:3d:2d:28:5a:3f:9e:2f:9f:b5:d8: 51:31:23:d5:a0:84:a8:41:35:2f:6f:4c:77:a1:99:a5:b9:84: 66:e8:51:dd:37:f3:f8:e6:7d:f3:9a:bb:63:da:34:15:be:b2: 73:26:5c:71:11:f8:6f:4a:9d:15:55:cc:bd:d7:7c:a8:33:f3: 25:33:b6:f7:52:b8:56:a8:be:e4:f4:d5:2b:02:f8:ab:42:06: 6b:18:3b:7b:13:c2:b3:de:e7:12:da:89:fd:d2:77:71:cb:ec: 59:8d:6d:3d:ae:17:59:67:c6:1f:11:9e:d2:fd:6b:17:7f:e4: 92:53:ab:b2:ed:55:34:7e:ab:b9:b1:c5:92:b6:01:e4:9b:c2: 98:2d:f7:fb:12:05:ea:d1:b3:7e:4d:39:0d:91:49:95:b9:6b: 61:97:79:47:75:3d:b4:e6:7b:7f:4d:78:eb:b1:5e:0f:1c:45: 5b:6b:8e:90:bc:ed:98:e9:c0:c0:80:03:5c:14:96:2c:46:61: fe:7d:fc:32:78:c0:00:33:18:55:a4:17:d9:36:ab:ea:dd:e7: a5:12:6d:00 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIUXRQ27ghLEhR7I3h3pqkR+1kC0hwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUxMDIxMTYyODQxWhcNMjYxMDIwMTYzMzQx WjAzMTEwLwYDVQQDEyg5QTkwQThBM0Y2MzQxQTIxQkExN0REOUJFRjYwMzI5RDhD NDBBN0E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss8ckdGxgp1x jv7v6m6MKlcTsX3sHIVaMfwuYaT+MQkEYzDhbz4yx4Rxkt6awpoBqv3EcgpzN8hU Ad+NxyM6BZqHbR71fjnbTauxPwBlFd3elaGxPoXW8XsHEeCfBHQfS5kV6zMCbCcM kFICk57LCcAaB6FUZAZaK+84pvW0D/l/a5ql1W5Bgyrf5aQvj9qEJNQahU+jaxGe gyCMx6O8hyFuFwY2AWwE/c26Zuo/Coo4QE8v2PR/XnXhZw014cAUxld7ZJow3fiu ywRxKkxhpXjFzweIniPjFgzlhUfRmHLasgb7P8tpm9NRKSvU0O8fMIxvu7YSfMme l1DcfHhKzQIDAQABo4ICijCCAoYwHQYDVR0OBBYEFJqQqKP2NBohuhfdm+9gMp2M QKeoMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0 OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2 NDExOWQvNS9BUzIxNzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBKBsYAwQBKN8OAwQCKN+4MA0GCSqG SIb3DQEBCwUAA4IBAQAR8DT/gFtfsdMahtXcEg/5c0409VePUKAmxbw8EMEgKWMJ RofEsousOMU88T0tKFo/ni+ftdhRMSPVoISoQTUvb0x3oZmluYRm6FHdN/P45n3z mrtj2jQVvrJzJlxxEfhvSp0VVcy913yoM/MlM7b3UrhWqL7k9NUrAvirQgZrGDt7 E8Kz3ucS2on90ndxy+xZjW09rhdZZ8YfEZ7S/WsXf+SSU6uy7VU0fqu5scWStgHk m8KYLff7EgXq0bN+TTkNkUmVuWthl3lHdT205nt/TXjrsV4PHEVba46QvO2Y6cDA gANcFJYsRmH+ffwyeMAAMxhVpBfZNqvq3eelEm0A -----END CERTIFICATE-----Generated at Wed Oct 22 01:53:02 2025 by rpki-client