$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa File: d097d779-d0f5-3dfb-b429-f39981788e91.roa (raw, json) Hash identifier: LcPa5hDeh7CNEF7QJ040tvTzVbh25dIS/+TtUNiHQrg= Subject key identifier: 9A:7F:78:E6:60:AB:D5:40:9D:17:DE:56:E2:FB:9D:5E:E2:9E:73:61 Certificate issuer: /CN=21adcbb8-b500-460f-90cb-bca0525aabcb Certificate serial: 010D0C9F4328584B84E770AD73C216D7BF61F880 Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 16509 IP address blocks: 170.176.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:70:ad:73:c2:16:d7:bf:61:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=4bfc4c13-f976-481f-b9ee-c2c5b20c874f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:2b:cd:23:38:f1:49:24:02:57:aa:0c:b9: 7f:43:85:25:8b:fb:fc:4b:04:ec:5b:f4:9f:38:a0: ee:08:60:82:79:cc:40:a1:93:2e:c3:92:58:8f:d7: 1a:d4:27:fc:49:ff:5c:71:94:4d:66:7b:83:ca:06: bd:b0:af:54:33:6a:de:81:6d:52:01:fe:ea:77:1e: 31:c3:e0:53:d0:f4:3a:7f:44:71:c0:32:24:52:da: c0:dc:ef:26:43:da:02:eb:95:a8:89:9d:f3:a3:24: 45:bf:ac:49:b3:25:b4:b8:46:14:3e:74:fe:4d:e5: f8:e6:e6:53:1c:69:1c:7d:32:f7:ab:cd:7e:f1:1f: 1f:76:f6:5d:d6:1a:ea:23:1c:38:ce:0b:a6:76:b7: 52:7b:15:81:7d:d1:0a:d4:f1:22:cb:73:b3:d2:19: 0c:4e:1e:05:a2:66:ae:27:ae:e7:97:ea:41:b1:0a: 19:65:9f:9a:b6:34:df:a4:0c:a7:5c:85:62:40:4a: fc:7f:f0:98:45:e8:91:db:ea:c2:93:59:bf:f3:e8: e9:31:35:f1:30:84:05:95:fb:ab:d3:95:0f:97:a0: 53:ce:af:a3:52:70:fd:29:f3:28:cf:71:fb:c9:39: 6a:06:5c:7c:4b:ac:29:19:aa:5a:c4:81:5e:49:f1: 71:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7F:78:E6:60:AB:D5:40:9D:17:DE:56:E2:FB:9D:5E:E2:9E:73:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/d097d779-d0f5-3dfb-b429-f39981788e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl X509v3 Authority Key Identifier: keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer sbgp-ipAddrBlock: critical IPv4: 170.176.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:fd:33:32:7c:16:49:87:04:d9:ac:ff:17:09:cc:2a:66:c5: df:12:21:2f:d8:99:db:32:ce:a5:19:14:11:1b:7d:b9:59:f0: 4f:85:6e:39:f0:77:ab:5e:05:af:3e:56:ea:09:db:b2:91:2e: e6:a2:9e:4e:f9:a4:85:26:3d:f7:6f:a8:5a:07:32:5c:48:94: b8:89:66:83:fb:3d:e5:5a:95:40:af:eb:a7:3c:fe:fc:1a:b4: 12:7e:40:12:5e:e6:fa:e1:b9:6e:2f:a1:13:82:66:49:55:d3: 33:d5:3a:cb:87:a1:59:91:31:ab:b4:21:d7:b0:35:ae:cd:a5: ea:4e:73:4e:30:d0:c6:93:f7:0e:6b:51:56:25:83:7e:e8:4f: 35:b6:ad:19:ce:3d:82:1e:78:d3:f9:8c:35:73:66:65:6e:c1: cb:1a:7f:14:57:8f:cc:bd:45:01:75:9d:21:ac:37:88:8a:ad: 82:c3:ed:c5:60:6d:ef:eb:9d:bc:aa:38:64:f8:04:14:60:ca: c4:bd:02:cc:69:69:0b:8d:38:e9:70:cb:c9:55:a9:c1:a6:21: 73:2a:17:d0:f9:0e:5d:56:7b:02:85:fb:20:de:f1:01:2b:27: d7:be:1b:ec:76:89:c3:53:6b:ee:c8:2b:d1:85:b1:a7:56:54: a8:52:05:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE53Ctc8IW179h+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFhZGNiYjgtYjUwMC00NjBmLTkwY2ItYmNhMDUyNWFh YmNiMB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NGJmYzRjMTMtZjk3Ni00ODFmLWI5ZWUtYzJjNWIyMGM4NzRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5crzSM48UkkAleqDLl/Q4Uli/v8SwTsW/Sf OKDuCGCCecxAoZMuw5JYj9ca1Cf8Sf9ccZRNZnuDyga9sK9UM2regW1SAf7qdx4x w+BT0PQ6f0RxwDIkUtrA3O8mQ9oC65WoiZ3zoyRFv6xJsyW0uEYUPnT+TeX45uZT HGkcfTL3q81+8R8fdvZd1hrqIxw4zgumdrdSexWBfdEK1PEiy3Oz0hkMTh4Fomau J67nl+pBsQoZZZ+atjTfpAynXIViQEr8f/CYReiR2+rCk1m/8+jpMTXxMIQFlfur 05UPl6BTzq+jUnD9KfMoz3H7yTlqBlx8S6wpGapaxIFeSfFxBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp/eOZgq9VAnRfeVuL7nV7innNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFk Y2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2EwNTI1YWFiY2IvZDA5N2Q3NzktZDBmNS0z ZGZiLWI0MjktZjM5OTgxNzg4ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjFhZGNiYjgtYjUwMC00NjBmLTkw Y2ItYmNhMDUyNWFhYmNiLzIxYWRjYmI4LWI1MDAtNDYwZi05MGNiLWJjYTA1MjVh YWJjYi5jcmwwHwYDVR0jBBgwFoAUYisKHntT0uIra1r/HcGq7QoGaT0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMWFkY2JiOC1iNTAwLTQ2MGYtOTBjYi1iY2Ew NTI1YWFiY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrDIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf9MzJ8FkmHBNms/xcJzCpmxd8SIS/YmdsyzqUZFBEbfblZ8E+Fbjnw d6teBa8+VuoJ27KRLuaink75pIUmPfdvqFoHMlxIlLiJZoP7PeValUCv66c8/vwa tBJ+QBJe5vrhuW4voROCZklV0zPVOsuHoVmRMau0IdewNa7NpepOc04w0MaT9w5r UVYlg37oTzW2rRnOPYIeeNP5jDVzZmVuwcsafxRXj8y9RQF1nSGsN4iKrYLD7cVg be/rnbyqOGT4BBRgysS9AsxpaQuNOOlwy8lVqcGmIXMqF9D5Dl1WewKF+yDe8QEr J9e+G+x2icNTa+7IK9GFsadWVKhSBfc= -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:18 2025 by rpki-client