$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: fvKMycaqrTo/86e9fjFfpcaDb5O7nfFSUYJwu4zKHns= Subject key identifier: DF:4C:3D:66:4F:F2:99:13:92:5F:45:2F:07:AF:A7:A1:0E:61:9D:CD Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584DF2108B5135DECA34609D0A00 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Mon 25 May 2026 01:00:24 +0000 ROA not before: Mon 25 May 2026 01:00:24 +0000 ROA not after: Sun 23 Aug 2026 01:00:24 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f2:10:8b:51:35:de:ca:34:60:9d:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: May 25 01:00:24 2026 GMT Not After : Aug 23 01:00:24 2026 GMT Subject: CN=30a567dc-7023-4da5-ad8f-5c45adbe0560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:14:33:c1:0c:82:d3:4c:44:36:37:ba:b1:82: e1:83:ed:f3:72:35:34:f3:8b:e2:b1:e1:55:2e:92: 27:45:10:8d:1d:b3:e5:3a:a5:e3:5d:2d:f1:64:2a: ef:c0:e5:8d:c9:ed:e8:77:8a:fd:56:14:5f:c9:3d: af:ff:30:f1:9a:6a:20:eb:a8:75:ab:17:7a:51:17: d8:d3:f5:38:9c:c9:8a:4d:43:e3:c0:cc:f0:fe:b3: 2b:cf:ca:4a:09:44:34:e8:fe:a1:b3:ee:ae:54:d3: 73:23:ec:04:70:c6:e9:46:04:c1:7c:78:0e:12:e9: 57:0d:b5:55:29:8c:f4:1d:60:c7:87:51:12:0e:d4: 5c:00:cf:f4:39:6e:f2:d4:90:56:5f:3f:9e:bb:51: 89:5d:3d:da:f9:ba:01:77:9b:e2:a5:f4:aa:cd:2b: cd:d5:fc:97:e1:b5:d3:7c:09:d6:9c:05:99:b5:76: ae:1c:52:3f:8c:dc:fb:13:90:62:42:b8:5e:6a:20: 1a:c1:23:8f:36:7e:e7:3f:88:a0:30:2a:d3:4b:0c: aa:d2:d7:be:d6:4b:cd:71:ae:56:49:b2:7d:20:bc: 2c:bc:4d:f9:e8:b0:f7:13:23:ec:34:a5:6b:1a:2b: 30:74:6f:6f:c9:24:82:f2:40:e3:3b:73:03:08:d4: e1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4C:3D:66:4F:F2:99:13:92:5F:45:2F:07:AF:A7:A1:0E:61:9D:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:b6:d8:66:8d:57:de:91:a6:59:43:a8:ef:32:c4:b9:c4:56: 79:bb:5a:66:db:97:88:94:68:b7:b1:9b:ff:13:93:0a:7b:a5: aa:57:76:40:29:8b:12:56:da:df:df:32:07:69:d0:0a:72:8c: 84:2c:17:bc:d6:14:02:12:d4:65:1d:96:64:31:46:44:58:ea: 5f:7a:8c:73:1d:92:b7:bc:4e:c5:09:e8:a0:0b:e7:46:70:fb: 7e:75:c8:b6:fd:98:77:03:82:3c:c2:f1:4a:c2:13:8f:f3:82: 2b:d9:c3:e1:1d:0b:3b:96:ce:8b:85:79:16:e1:ec:4e:3c:e7: 8b:02:95:f5:aa:55:a8:6d:f4:8a:92:cf:e4:dd:80:19:17:4a: a4:3e:23:62:e9:5e:a5:3a:26:39:76:8e:b8:e1:3e:c6:a7:69: 8c:81:48:1d:bc:2e:2c:a0:32:c7:bf:fb:50:bf:bf:6f:68:27: 4b:8c:de:b8:97:96:78:42:67:44:27:4d:ff:f8:73:ae:01:73: ac:ee:fa:23:a7:ab:af:d7:a9:bd:28:dd:95:54:c1:18:bd:85: f8:b8:11:41:fd:07:e2:ae:67:f9:06:ac:68:67:1d:69:42:9b: cf:68:f2:f7:74:9d:5f:42:42:6f:b9:f2:03:98:45:18:5a:c8: e5:00:62:17 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE3yEItRNd7KNGCdCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDUyNTAxMDAyNFoXDTI2MDgyMzAxMDAyNFowLzEtMCsGA1UEAxMk MzBhNTY3ZGMtNzAyMy00ZGE1LWFkOGYtNWM0NWFkYmUwNTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xQzwQyC00xENje6sYLhg+3zcjU084viseFV LpInRRCNHbPlOqXjXS3xZCrvwOWNye3od4r9VhRfyT2v/zDxmmog66h1qxd6URfY 0/U4nMmKTUPjwMzw/rMrz8pKCUQ06P6hs+6uVNNzI+wEcMbpRgTBfHgOEulXDbVV KYz0HWDHh1ESDtRcAM/0OW7y1JBWXz+eu1GJXT3a+boBd5vipfSqzSvN1fyX4bXT fAnWnAWZtXauHFI/jNz7E5BiQrheaiAawSOPNn7nP4igMCrTSwyq0te+1kvNca5W SbJ9ILwsvE356LD3EyPsNKVrGiswdG9vySSC8kDjO3MDCNTh3QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFN9MPWZP8pkTkl9FLwevp6EOYZ3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIi22GaNV96RpllDqO8yxLnEVnm7 Wmbbl4iUaLexm/8Tkwp7papXdkApixJW2t/fMgdp0ApyjIQsF7zWFAIS1GUdlmQx RkRY6l96jHMdkre8TsUJ6KAL50Zw+351yLb9mHcDgjzC8UrCE4/zgivZw+EdCzuW zouFeRbh7E4854sClfWqVaht9IqSz+TdgBkXSqQ+I2LpXqU6Jjl2jrjhPsanaYyB SB28LiygMse/+1C/v29oJ0uM3riXlnhCZ0QnTf/4c64Bc6zu+iOnq6/Xqb0o3ZVU wRi9hfi4EUH9B+KuZ/kGrGhnHWlCm89o8vd0nV9CQm+58gOYRRhayOUAYhc= -----END CERTIFICATE-----Generated at Sun Jun 14 01:11:36 2026 by rpki-client