$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa File: f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa (raw, json) Hash identifier: Lfz7P6/T2OjLCsL/C2geA5YzXvakEiRi8NRvXYSf6iA= Subject key identifier: 3D:74:EB:4A:14:23:FC:98:75:5C:00:A2:8A:68:C6:29:2E:2E:CC:34 Certificate issuer: /CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Certificate serial: 010D0C9F4328584B6D2CB874C160853A38D32700 Authority key identifier: 51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa Signing time: Mon 06 Oct 2025 01:00:33 +0000 ROA not before: Mon 06 Oct 2025 01:00:33 +0000 ROA not after: Sun 04 Jan 2026 02:00:33 +0000 asID: 46188 IP address blocks: 199.21.176.0/22 maxlen: 22 199.45.28.0/22 maxlen: 22 208.93.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6d:2c:b8:74:c1:60:85:3a:38:d3:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21bc3777-de7d-4aed-88bc-9c652ed17843 Validity Not Before: Oct 6 01:00:33 2025 GMT Not After : Jan 4 02:00:33 2026 GMT Subject: CN=cf8347c0-7121-4e5e-a9e2-4c2f09340c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:c6:e8:f3:69:d9:b1:d4:e1:ee:1c:39:0d: 06:e9:63:e0:b3:b7:eb:8b:a9:6f:64:77:06:4d:07: 49:70:87:82:68:c0:49:a6:08:e2:0d:f9:c8:81:34: c6:60:cc:46:88:96:c7:dd:83:ad:28:3d:12:7f:7d: 2d:fc:5a:c9:ce:46:0f:c0:2e:a5:53:de:72:5f:41: 3e:d0:69:80:96:09:d2:ca:c1:7e:6b:42:69:69:5a: 71:88:07:2e:9b:70:23:4f:b7:79:80:43:2a:36:c1: 92:94:cb:48:74:0d:c3:0a:e2:37:fa:5d:4f:d3:3a: 14:43:39:17:9f:b7:28:9e:c7:19:d3:64:8c:65:af: 04:78:6e:a6:da:8d:ca:1d:5a:21:fd:25:c1:0b:3b: d3:62:9e:38:19:f0:40:0f:8c:44:da:d0:c9:16:db: 96:44:fd:a8:f9:27:f0:5e:fc:61:6d:90:8f:2f:41: d0:dc:cd:b4:e3:dc:8a:f0:23:e4:3f:80:63:57:e1: 8a:6d:19:25:cd:6a:35:76:32:7c:ee:84:ec:e6:b0: b8:1f:ec:5d:91:79:de:02:bd:ab:d4:b3:7a:70:a7: 4a:27:95:c6:37:9e:16:71:7d:ec:17:23:ef:39:36: 35:dd:30:16:7b:be:e2:a7:1b:e7:0f:b0:a1:32:f5: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:74:EB:4A:14:23:FC:98:75:5C:00:A2:8A:68:C6:29:2E:2E:CC:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/f2a8e2bd-ba4e-3209-b315-1823ebb403a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843/21bc3777-de7d-4aed-88bc-9c652ed17843.crl X509v3 Authority Key Identifier: keyid:51:D1:4C:A5:50:D0:D0:72:00:46:BF:9C:5F:E7:45:08:7E:B4:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/21bc3777-de7d-4aed-88bc-9c652ed17843.cer sbgp-ipAddrBlock: critical IPv4: 199.21.176.0/22 199.45.28.0/22 208.93.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:63:89:69:50:30:06:5d:51:8c:13:62:a7:64:ce:8e:42:6a: c5:53:1b:1c:35:97:8b:2a:d5:d1:50:98:c0:bc:ca:c9:d5:e1: 56:8f:a7:b8:5c:2c:78:e9:a9:1b:f7:1c:a9:ad:45:b7:49:9e: 2d:26:9f:fd:79:cb:b8:cd:fd:ca:13:f5:a6:73:29:4f:d3:c4: 20:78:13:48:b8:63:e3:41:82:2b:05:23:49:9b:4d:e7:04:75: 33:53:9b:fa:5f:9c:94:a6:6f:7c:3a:27:c2:8e:8e:14:46:02: dd:58:9e:21:84:90:56:34:5a:16:48:ba:70:ab:f9:16:1a:73: da:2d:74:ad:50:3f:dd:28:82:da:7f:a6:97:11:74:c0:80:6b: dd:d5:57:73:55:ed:78:62:c6:8e:59:59:db:a7:73:c0:1a:d7: 33:68:69:66:80:a2:35:11:15:e4:c9:23:fb:6f:6f:69:d4:13: 18:f1:f9:e3:27:42:97:b2:4f:8c:48:cb:b8:18:aa:36:39:69: 6b:ec:a2:17:d1:04:a1:22:24:e1:7f:ad:07:b8:98:04:df:55: fe:52:40:56:82:0e:65:da:0e:aa:5e:d4:52:b2:c1:ea:69:9a: 97:46:54:6a:39:50:a8:8b:d5:09:8a:be:21:d0:10:c0:04:92: b5:5f:fa:3a -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEttLLh0wWCFOjjTJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFiYzM3NzctZGU3ZC00YWVkLTg4YmMtOWM2NTJlZDE3 ODQzMB4XDTI1MTAwNjAxMDAzM1oXDTI2MDEwNDAyMDAzM1owLzEtMCsGA1UEAxMk Y2Y4MzQ3YzAtNzEyMS00ZTVlLWE5ZTItNGMyZjA5MzQwYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj93G6PNp2bHU4e4cOQ0G6WPgs7fri6lvZHcG TQdJcIeCaMBJpgjiDfnIgTTGYMxGiJbH3YOtKD0Sf30t/FrJzkYPwC6lU95yX0E+ 0GmAlgnSysF+a0JpaVpxiAcum3AjT7d5gEMqNsGSlMtIdA3DCuI3+l1P0zoUQzkX n7conscZ02SMZa8EeG6m2o3KHVoh/SXBCzvTYp44GfBAD4xE2tDJFtuWRP2o+Sfw XvxhbZCPL0HQ3M2049yK8CPkP4BjV+GKbRklzWo1djJ87oTs5rC4H+xdkXneAr2r 1LN6cKdKJ5XGN54WcX3sFyPvOTY13TAWe77ipxvnD7ChMvVJXwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFD1060oUI/yYdVwAoopoxikuLsw0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJj Mzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1MmVkMTc4NDMvZjJhOGUyYmQtYmE0ZS0z MjA5LWIzMTUtMTgyM2ViYjQwM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjFiYzM3NzctZGU3ZC00YWVkLTg4 YmMtOWM2NTJlZDE3ODQzLzIxYmMzNzc3LWRlN2QtNGFlZC04OGJjLTljNjUyZWQx Nzg0My5jcmwwHwYDVR0jBBgwFoAUUdFMpVDQ0HIARr+cX+dFCH60WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMWJjMzc3Ny1kZTdkLTRhZWQtODhiYy05YzY1 MmVkMTc4NDMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxxWwAwQC xy0cAwQC0F0MMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAC1jiWlQMAZdUYwTYqdkzo5CasVTGxw1l4sq1dFQ mMC8ysnV4VaPp7hcLHjpqRv3HKmtRbdJni0mn/15y7jN/coT9aZzKU/TxCB4E0i4 Y+NBgisFI0mbTecEdTNTm/pfnJSmb3w6J8KOjhRGAt1YniGEkFY0WhZIunCr+RYa c9otdK1QP90ogtp/ppcRdMCAa93VV3NV7Xhixo5ZWdunc8Aa1zNoaWaAojURFeTJ I/tvb2nUExjx+eMnQpeyT4xIy7gYqjY5aWvsohfRBKEiJOF/rQe4mATfVf5SQFaC DmXaDqpe1FKyweppmpdGVGo5UKiL1QmKviHQEMAEkrVf+jo= -----END CERTIFICATE-----Generated at Tue Oct 28 13:12:06 2025 by rpki-client