$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: ycK6dBe/X/ioJHz5CkNbzvBjCiaNwKrXsodcxoOzSBc= Subject key identifier: 59:82:8F:EE:43:0D:6D:81:1B:1D:0F:D1:5A:85:D5:7D:54:CF:3C:6E Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584EA7953B2414D22A0799E20800 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 31 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:95:3b:24:14:d2:2a:07:99:e2:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3cd0fc98-3aaa-43b3-8d9a-d41ee2f3d5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:c4:d6:1a:8f:88:6e:e1:9d:ed:c2:28:c9: e1:be:ca:f3:d0:25:18:d9:9b:37:5a:8f:d6:d2:7e: 9b:55:2b:91:1d:2e:db:12:84:51:d4:ab:9a:8e:e3: 0f:27:48:b5:11:bb:5c:23:66:b3:9d:0b:9c:39:90: ca:f0:4c:39:7f:4e:50:8c:33:ae:b5:6b:de:34:49: b7:5b:95:d3:3f:a9:88:b6:9a:1d:e8:b9:85:81:ff: bd:a8:57:3c:37:eb:e2:02:99:2f:00:a3:fc:ca:53: d2:be:1e:3d:84:bd:7b:4b:08:ec:3a:6b:83:ba:e7: 82:a0:ac:04:ce:59:3d:75:18:05:33:fc:61:f4:08: 2d:18:c4:7b:90:73:cd:61:a8:cc:0d:f5:3b:20:03: 99:17:0f:50:40:c1:97:bd:76:5c:44:78:7e:85:ba: eb:ce:53:ad:54:eb:bd:59:da:7d:b1:8a:cf:df:52: 87:18:2b:91:f1:1a:f8:76:1a:44:17:37:d5:96:c9: 21:ba:53:37:2f:f3:3b:55:c6:bb:24:d4:8d:77:02: be:92:db:2c:9e:6c:ed:67:19:18:16:10:22:27:a0: ac:0f:8c:2d:f9:f0:9e:95:47:63:3b:7a:f8:1e:df: ea:51:0a:d7:61:a0:19:d2:6a:08:8a:c3:d1:7c:ac: 5f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:82:8F:EE:43:0D:6D:81:1B:1D:0F:D1:5A:85:D5:7D:54:CF:3C:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:e1:1d:e4:1c:a1:2c:d9:2a:f6:15:2b:41:4b:42:7e:54:bc: f7:84:47:aa:62:e0:94:d6:05:8e:41:05:93:91:1b:c7:82:b2: fe:65:17:d5:5c:c8:b4:91:34:76:a1:69:d4:39:3a:2b:c9:fa: af:26:64:b2:83:61:94:eb:e0:f4:59:f3:df:00:00:a5:39:89: 97:0c:ae:cd:8d:80:ba:f2:61:c6:f2:ed:db:90:62:ab:3c:cf: 37:47:40:3e:11:49:3c:3b:b7:7c:21:5c:48:29:2a:fd:28:bb: 0a:fb:19:0e:a7:b9:74:9f:a4:b5:aa:74:85:da:ad:9a:67:38: eb:3c:72:b8:e1:5b:85:33:1d:b5:37:f8:f0:35:99:88:85:54: 4b:c6:d3:7b:b9:c4:f5:fe:48:40:14:12:c5:c8:bb:99:cd:04: a5:ac:9d:b0:7d:d4:80:4f:f0:0e:53:85:21:e5:b7:f9:24:c3: 07:d8:97:f9:c8:25:01:0d:a8:df:8b:32:24:7d:4e:9c:71:a0: aa:be:1c:62:62:82:73:e3:1a:04:0d:be:ef:2f:1a:19:fd:89: 51:55:6e:68:e2:65:16:bd:63:0c:c9:2a:e4:b1:11:ce:44:9a: 12:a8:4f:02:6c:e0:0d:c4:8c:f4:59:82:63:3e:51:46:98:f8: 87:e8:bd:28 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE6nlTskFNIqB5niCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2NkMGZjOTgtM2FhYS00M2IzLThkOWEtZDQxZWUyZjNkNWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs47E1hqPiG7hne3CKMnhvsrz0CUY2Zs3Wo/W 0n6bVSuRHS7bEoRR1KuajuMPJ0i1EbtcI2aznQucOZDK8Ew5f05QjDOutWveNEm3 W5XTP6mItpod6LmFgf+9qFc8N+viApkvAKP8ylPSvh49hL17SwjsOmuDuueCoKwE zlk9dRgFM/xh9AgtGMR7kHPNYajMDfU7IAOZFw9QQMGXvXZcRHh+hbrrzlOtVOu9 Wdp9sYrP31KHGCuR8Rr4dhpEFzfVlskhulM3L/M7Vca7JNSNdwK+ktssnmztZxkY FhAiJ6CsD4wt+fCelUdjO3r4Ht/qUQrXYaAZ0moIisPRfKxfpQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFFmCj+5DDW2BGx0P0VqF1X1UzzxuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABjhHeQcoSzZKvYVK0FLQn5UvPeE R6pi4JTWBY5BBZORG8eCsv5lF9VcyLSRNHahadQ5OivJ+q8mZLKDYZTr4PRZ898A AKU5iZcMrs2NgLryYcby7duQYqs8zzdHQD4RSTw7t3whXEgpKv0ouwr7GQ6nuXSf pLWqdIXarZpnOOs8crjhW4UzHbU3+PA1mYiFVEvG03u5xPX+SEAUEsXIu5nNBKWs nbB91IBP8A5ThSHlt/kkwwfYl/nIJQENqN+LMiR9TpxxoKq+HGJignPjGgQNvu8v Ghn9iVFVbmjiZRa9YwzJKuSxEc5EmhKoTwJs4A3EjPRZgmM+UUaY+IfovSg= -----END CERTIFICATE-----Generated at Thu Jul 30 00:35:57 2026 by rpki-client