$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: NbpqVWOf+qWzj9lWb3526lNro+nf1CTC09A34TU35Fk= Subject key identifier: 43:37:AD:BB:B8:2C:9A:CB:63:A1:F3:71:D9:E9:F0:4A:91:F9:01:B5 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584D117269C7E8DE53A8752BD680 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Thu 05 Mar 2026 14:00:40 +0000 ROA not before: Thu 05 Mar 2026 14:00:40 +0000 ROA not after: Wed 03 Jun 2026 13:00:40 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:11:72:69:c7:e8:de:53:a8:75:2b:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Mar 5 14:00:40 2026 GMT Not After : Jun 3 13:00:40 2026 GMT Subject: CN=b7569338-5b75-43ac-add2-db02d77130aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:3a:5b:4d:d7:0f:79:aa:f3:58:70:69:3c: af:86:64:ea:73:b6:aa:16:44:69:50:80:df:5c:bc: aa:58:3d:7b:7b:ca:7e:aa:59:19:d5:36:eb:4e:12: 43:5d:de:db:00:0d:c3:e9:5f:42:d7:94:59:76:b5: 15:3f:6d:95:0d:a3:7b:c8:67:aa:8c:6c:62:cc:b3: a1:3c:7f:ca:2d:f6:73:ef:6c:50:6e:a1:dc:e2:4e: 24:aa:de:fc:ed:44:db:26:5d:eb:ea:e1:8e:25:75: 5a:6c:8f:21:e6:30:38:89:53:34:12:d1:90:19:5e: cb:21:98:e9:5d:fd:ac:a3:4a:d4:99:9b:79:c8:ce: cc:90:de:6c:76:f1:78:82:8a:6a:b5:3d:62:c1:4e: 13:5c:c3:41:4c:44:bf:b7:10:09:f0:27:93:df:a1: 58:b0:74:84:b2:f1:fd:a6:24:91:82:36:cd:7c:e7: ff:60:6f:87:9e:40:b9:3a:fc:9e:63:18:20:ac:b8: 57:e5:f1:4d:d4:4e:59:e0:c2:03:3b:88:61:d2:ca: 13:20:af:9f:57:3e:22:a8:2b:b4:5f:97:e3:dd:91: 73:2e:70:3b:7e:7f:f4:77:8e:96:a0:fc:84:ca:4d: 86:79:99:79:32:aa:97:42:41:ec:14:bd:b4:c3:c1: f9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:37:AD:BB:B8:2C:9A:CB:63:A1:F3:71:D9:E9:F0:4A:91:F9:01:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:d9:bd:df:03:a9:70:61:c1:6b:6e:9b:a0:7a:03:fb:3b:d5: 27:8c:42:8f:b9:85:60:01:12:67:6d:cc:68:54:1b:47:c5:e8: 70:6b:68:3e:66:a4:6c:cf:b1:af:4e:3b:57:b2:41:f0:5e:03: bd:c6:d7:4e:36:66:13:75:fe:03:ac:08:ea:06:97:b1:76:0e: b4:43:a2:7d:99:ef:0c:e8:ab:38:01:c8:bb:69:ee:8c:58:70: 1c:05:e1:68:d0:95:41:c2:47:4c:b6:5e:81:71:19:9b:4b:a2: 4b:3c:c2:41:86:23:0c:25:a5:2b:85:9e:ab:4f:20:c8:4c:93: 11:aa:dc:67:04:2f:d3:4c:eb:1a:f5:60:ef:4e:96:f6:8e:6e: 39:99:c6:00:da:fe:72:c7:2a:c1:24:77:fb:fc:d6:29:9b:7a: 75:f0:f8:fe:75:42:ed:5f:0a:d1:23:4f:fa:b0:13:dc:ec:3b: b4:72:7e:41:4d:c7:f8:1a:44:f8:36:d3:f9:ce:3b:d6:01:44: cc:7c:1f:ed:a3:25:37:87:b7:84:33:72:de:cd:8b:c8:65:94: ba:2d:2e:07:32:1d:67:f1:f0:65:c1:54:32:f2:08:b0:47:5f: d0:4b:38:db:e7:73:a3:c1:6d:b1:56:91:ee:61:9b:09:61:e2: 0f:b9:6c:98 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE0RcmnH6N5TqHUr1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk Yjc1NjkzMzgtNWI3NS00M2FjLWFkZDItZGIwMmQ3NzEzMGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj586W03XD3mq81hwaTyvhmTqc7aqFkRpUIDf XLyqWD17e8p+qlkZ1TbrThJDXd7bAA3D6V9C15RZdrUVP22VDaN7yGeqjGxizLOh PH/KLfZz72xQbqHc4k4kqt787UTbJl3r6uGOJXVabI8h5jA4iVM0EtGQGV7LIZjp Xf2so0rUmZt5yM7MkN5sdvF4gopqtT1iwU4TXMNBTES/txAJ8CeT36FYsHSEsvH9 piSRgjbNfOf/YG+HnkC5OvyeYxggrLhX5fFN1E5Z4MIDO4hh0soTIK+fVz4iqCu0 X5fj3ZFzLnA7fn/0d46WoPyEyk2GeZl5MqqXQkHsFL20w8H5GwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFEM3rbu4LJrLY6Hzcdnp8EqR+QG1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG3Zvd8DqXBhwWtum6B6A/s71SeM Qo+5hWABEmdtzGhUG0fF6HBraD5mpGzPsa9OO1eyQfBeA73G1042ZhN1/gOsCOoG l7F2DrRDon2Z7wzoqzgByLtp7oxYcBwF4WjQlUHCR0y2XoFxGZtLoks8wkGGIwwl pSuFnqtPIMhMkxGq3GcEL9NM6xr1YO9OlvaObjmZxgDa/nLHKsEkd/v81imbenXw +P51Qu1fCtEjT/qwE9zsO7RyfkFNx/gaRPg20/nOO9YBRMx8H+2jJTeHt4Qzct7N i8hllLotLgcyHWfx8GXBVDLyCLBHX9BLONvnc6PBbbFWke5hmwlh4g+5bJg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:25 2026 by rpki-client