$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json) Hash identifier: CAcoEAcFCn+Tb+XcYl6pyiQY3ZS1wr0GC9JwoBiP8Mw= Subject key identifier: 81:FA:CB:91:90:5F:D8:53:B2:C7:6E:24:E9:AF:E8:F8:A3:FC:33:52 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584E0D843AB47746C068499F8080 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa Signing time: Wed 03 Jun 2026 21:00:12 +0000 ROA not before: Wed 03 Jun 2026 21:00:12 +0000 ROA not after: Tue 01 Sep 2026 21:00:12 +0000 asID: 398576 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0d:84:3a:b4:77:46:c0:68:49:9f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Jun 3 21:00:12 2026 GMT Not After : Sep 1 21:00:12 2026 GMT Subject: CN=de55a711-5f16-449b-91ec-3255fcff765f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:23:44:e2:3d:db:dc:a5:5d:2d:fb:98:6a:de: 73:b5:aa:f1:18:96:ac:b5:f9:ae:18:76:d0:e3:71: 91:67:40:57:83:3d:9e:aa:fb:21:0d:8b:e3:50:e5: c8:bf:11:f3:3e:d8:5b:f9:ac:59:09:20:7b:ab:6b: 3a:0f:9b:98:1b:ed:dc:d4:33:0c:ef:aa:03:62:50: bb:75:cc:00:8f:ce:1e:96:c7:bc:ee:a4:a8:dd:af: 31:62:ee:80:24:a4:78:74:a5:64:44:73:74:29:d9: 82:f5:2d:81:e0:91:d5:96:18:b1:ab:bc:7f:15:ed: 0a:40:1d:26:e8:4c:37:51:ba:cb:8a:73:a9:98:8e: e9:12:d2:30:1c:4c:cc:d7:82:4a:df:97:54:4e:5e: 8c:ce:8b:da:3d:59:d2:e8:a1:7a:aa:5e:21:1f:35: 66:24:4a:c4:c9:e1:d8:8c:82:06:03:85:b2:b3:90: 99:1d:7c:8a:10:d2:df:ee:ba:20:8c:e7:5f:44:29: 3c:33:3a:c1:07:a8:d8:0e:ca:2c:99:cc:c2:65:c4: 38:26:33:b6:b4:52:8f:68:39:54:36:57:a7:bb:b5: da:e8:28:c2:24:4a:55:86:34:ba:03:ba:63:32:d2: 16:c5:bf:6b:30:d8:72:41:f2:63:11:40:6c:ae:d3: 37:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FA:CB:91:90:5F:D8:53:B2:C7:6E:24:E9:AF:E8:F8:A3:FC:33:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:08:4d:67:7f:58:d7:7a:a8:16:6d:cc:03:f9:5f:24:5f:52: 82:79:41:94:59:1c:f8:0f:99:53:c9:9c:d0:c0:63:b7:ed:03: 26:1a:65:18:20:15:9b:f4:f5:92:4d:cd:68:8a:4c:9a:69:b9: f0:15:7c:8a:07:09:b2:8b:42:94:6f:f6:27:2f:c2:bb:96:e7: f1:b0:ae:16:55:a8:d2:a7:6f:0a:ef:83:a2:00:e3:94:16:34: c1:fd:1d:93:5e:af:e5:af:90:53:5a:bd:28:1c:82:a3:10:85: 05:e2:1b:9e:76:72:48:7e:94:b8:f2:d7:d0:7a:d3:18:40:87: d9:7c:75:6d:44:2e:d7:74:61:71:80:f5:55:4e:9f:20:5e:cf: d1:b6:da:ad:39:b8:5a:eb:fe:79:f6:4d:fb:df:d2:ab:66:d6: 8a:a1:36:84:b7:f1:4a:e8:23:52:0c:5f:83:10:66:2f:ea:f6: d7:f6:7c:4d:33:02:67:14:1b:e5:0d:f6:a0:80:63:cf:2a:f9: 02:19:d1:ea:fa:bf:51:d0:8b:c7:09:96:4f:04:1e:d2:0a:0a: 79:1c:97:55:3f:ef:30:1c:63:15:40:42:e4:cb:0d:94:7c:da: 02:6f:32:89:5e:bb:2f:5f:d1:ec:5d:78:80:3c:d2:81:3a:52: 1a:25:e9:02 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE4NhDq0d0bAaEmfgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI2MDYwMzIxMDAxMloXDTI2MDkwMTIxMDAxMlowLzEtMCsGA1UEAxMk ZGU1NWE3MTEtNWYxNi00NDliLTkxZWMtMzI1NWZjZmY3NjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSNE4j3b3KVdLfuYat5ztarxGJastfmuGHbQ 43GRZ0BXgz2eqvshDYvjUOXIvxHzPthb+axZCSB7q2s6D5uYG+3c1DMM76oDYlC7 dcwAj84else87qSo3a8xYu6AJKR4dKVkRHN0KdmC9S2B4JHVlhixq7x/Fe0KQB0m 6Ew3UbrLinOpmI7pEtIwHEzM14JK35dUTl6MzovaPVnS6KF6ql4hHzVmJErEyeHY jIIGA4Wys5CZHXyKENLf7rogjOdfRCk8MzrBB6jYDsosmczCZcQ4JjO2tFKPaDlU Nlenu7Xa6CjCJEpVhjS6A7pjMtIWxb9rMNhyQfJjEUBsrtM3HQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIH6y5GQX9hTssduJOmv6Pij/DNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABIITWd/WNd6qBZtzAP5XyRfUoJ5QZRZHPgPmVPJ nNDAY7ftAyYaZRggFZv09ZJNzWiKTJppufAVfIoHCbKLQpRv9icvwruW5/GwrhZV qNKnbwrvg6IA45QWNMH9HZNer+WvkFNavSgcgqMQhQXiG552ckh+lLjy19B60xhA h9l8dW1ELtd0YXGA9VVOnyBez9G22q05uFrr/nn2Tfvf0qtm1oqhNoS38UroI1IM X4MQZi/q9tf2fE0zAmcUG+UN9qCAY88q+QIZ0er6v1HQi8cJlk8EHtIKCnkcl1U/ 7zAcYxVAQuTLDZR82gJvMoleuy9f0exdeIA80oE6Uhol6QI= -----END CERTIFICATE-----Generated at Fri Jun 5 18:52:40 2026 by rpki-client