$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa File: 23821e89-69f1-35fa-8453-8f2195bf5679.roa (raw, json) Hash identifier: 33WAD0TDlTtaRGUQAXn7/sjvpP0pqw0aWHH/UQdAM20= Subject key identifier: 80:34:FB:C3:DC:81:2F:D2:B0:5B:30:B0:FD:BA:72:0E:2F:FC:29:23 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584EAFE70A8C2DCE1262E2EBDE00 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 398576 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e7:0a:8c:2d:ce:12:62:e2:eb:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=37a9c6ae-8861-40f2-9e97-5f3f28a8eea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:12:9a:10:27:d7:76:48:11:37:0e:df:1b:60: fe:20:8c:c0:63:ce:86:3b:76:7c:26:f2:42:84:b5: 01:df:a3:88:4b:ea:c9:80:a1:9a:be:69:04:cf:2c: 84:2f:ed:9e:a8:c8:7d:b4:45:7e:ea:e3:86:8e:8d: 98:7e:6b:b5:70:3e:55:7c:f3:c1:e8:be:08:06:94: 97:71:e2:ec:6b:df:52:ab:9d:b0:e3:ce:73:8e:ee: a8:1a:d7:dd:25:42:9d:1f:ea:af:5d:4c:29:2b:ec: 3a:11:39:1b:f0:24:d8:af:8d:f5:e0:9c:e4:6a:fa: 00:00:72:0c:d4:22:5c:a4:fc:e7:ad:bb:2d:fa:bb: 40:1e:09:84:63:ce:2c:29:de:47:a1:a9:6e:ed:ae: 99:47:ff:23:a7:ea:b8:36:59:64:d5:f9:9b:95:d5: 5a:88:32:87:4a:a7:6d:22:fd:bf:a7:cd:99:48:83: bf:91:39:78:a7:c0:01:c2:5d:f7:99:0f:fb:21:84: af:ae:8a:24:2a:f8:98:56:c1:d9:43:17:bd:3d:bb: 7c:0c:ab:b6:9d:96:c3:c9:5b:1a:d8:cb:c8:5b:6c: 14:01:0f:a3:83:42:5b:47:09:bb:e5:19:83:b9:4b: 46:23:80:9b:1c:b0:f5:a1:02:5f:b2:ba:da:3e:31: 63:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:34:FB:C3:DC:81:2F:D2:B0:5B:30:B0:FD:BA:72:0E:2F:FC:29:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/23821e89-69f1-35fa-8453-8f2195bf5679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:95:e3:76:5b:e9:ab:57:26:4b:8c:1b:70:d7:74:57:9a:29: 3b:3d:8e:b9:3a:35:7b:78:bb:03:f1:71:1b:e9:7d:1a:0f:73: a9:d3:7a:95:f1:ea:2b:64:31:61:90:90:8a:eb:96:75:85:0c: 89:d4:ca:8a:11:c8:50:fa:4e:62:4d:e4:98:c5:d9:2f:d5:ae: f3:10:6f:42:21:9e:b3:cb:4e:86:c4:46:5c:b1:19:84:59:8d: 2f:9c:d4:d2:77:dd:46:3b:64:8e:4c:86:fb:8a:65:c0:c2:d9: d6:3a:0d:52:b1:9e:5b:18:a1:5d:98:c3:87:9d:7e:6f:f7:89: 24:34:ef:5c:a4:1a:48:d0:bb:91:94:e1:37:54:71:dc:d2:e1: 13:fc:c5:aa:19:d0:e5:41:81:0a:94:1f:49:8e:12:2a:57:e2: fa:73:01:26:7a:0c:93:b2:cc:3c:da:6d:7f:0c:97:76:77:51: 60:83:5e:97:ed:05:a8:14:be:21:67:cf:34:49:3e:00:14:b3: 54:50:d2:6e:97:a4:8c:54:5d:cc:48:06:d1:5a:24:07:b4:94: 20:44:cf:79:9f:57:69:e6:f6:73:2b:93:91:89:b3:38:57:98: b3:a8:f1:d5:79:5d:2f:71:72:61:dd:e6:a9:35:89:17:4a:e3: 12:fb:73:28 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE6v5wqMLc4SYuLr3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk MzdhOWM2YWUtODg2MS00MGYyLTllOTctNWYzZjI4YThlZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RKaECfXdkgRNw7fG2D+IIzAY86GO3Z8JvJC hLUB36OIS+rJgKGavmkEzyyEL+2eqMh9tEV+6uOGjo2Yfmu1cD5VfPPB6L4IBpSX ceLsa99Sq52w485zju6oGtfdJUKdH+qvXUwpK+w6ETkb8CTYr4314JzkavoAAHIM 1CJcpPznrbst+rtAHgmEY84sKd5Hoalu7a6ZR/8jp+q4Nllk1fmbldVaiDKHSqdt Iv2/p82ZSIO/kTl4p8ABwl33mQ/7IYSvrookKviYVsHZQxe9Pbt8DKu2nZbDyVsa 2MvIW2wUAQ+jg0JbRwm75RmDuUtGI4CbHLD1oQJfsrraPjFjOwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIA0+8PcgS/SsFswsP26cg4v/CkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvMjM4MjFlODktNjlmMS0z NWZhLTg0NTMtOGYyMTk1YmY1Njc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAEKV43Zb6atXJkuMG3DXdFeaKTs9jrk6NXt4uwPx cRvpfRoPc6nTepXx6itkMWGQkIrrlnWFDInUyooRyFD6TmJN5JjF2S/VrvMQb0Ih nrPLTobERlyxGYRZjS+c1NJ33UY7ZI5MhvuKZcDC2dY6DVKxnlsYoV2Yw4edfm/3 iSQ071ykGkjQu5GU4TdUcdzS4RP8xaoZ0OVBgQqUH0mOEipX4vpzASZ6DJOyzDza bX8Ml3Z3UWCDXpftBagUviFnzzRJPgAUs1RQ0m6XpIxUXcxIBtFaJAe0lCBEz3mf V2nm9nMrk5GJszhXmLOo8dV5XS9xcmHd5qk1iRdK4xL7cyg= -----END CERTIFICATE-----Generated at Fri Sep 11 15:14:08 2026 by rpki-client