$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: kO6uvpyfu58ZgXhle8OIW3nvo7/2izKVBc9gB8hyxJg= Subject key identifier: 27:12:50:C6:54:50:CC:AD:3C:76:04:39:A4:74:1D:0F:32:F2:CB:FE Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584F49765C03A3D6D30D821EAF00 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:5c:03:a3:d6:d3:0d:82:1e:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6cb878e4-f4e1-4144-9a75-ec8846b9daff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ee:e9:7b:45:38:3b:56:85:cb:9a:90:06:ae: 3a:97:09:ee:33:d6:45:15:5d:11:8a:cc:54:22:8e: 4f:49:76:89:c1:17:e4:18:ef:af:b4:0d:e1:4b:2e: 20:5f:ed:14:22:8c:d6:20:b7:9d:27:e0:dd:17:6e: 87:de:86:d2:2d:27:fe:1f:24:48:d5:b2:3d:e4:1d: 44:1b:84:8f:bd:d6:15:57:cf:a6:47:99:6a:91:10: 60:13:52:9f:2b:dc:6c:ab:38:47:7b:2f:fb:77:57: bd:7f:cc:5e:cf:35:e7:b9:8c:ff:6f:eb:19:94:60: 13:e8:99:32:db:e9:49:f8:49:46:11:e6:26:1b:8e: ab:23:63:0f:ba:40:3d:cf:ae:79:3b:20:a6:04:e1: 50:42:53:14:a2:e4:0d:68:04:3e:47:d2:b6:ee:c1: 5d:fc:7b:d2:12:38:af:2a:9b:26:9f:3f:bf:9c:2e: b8:19:c9:c3:a7:6a:5c:a3:06:3e:f9:52:2e:66:0e: df:2a:8b:17:b4:01:a9:30:da:e1:de:e2:c6:2a:a3: 4a:ff:6f:d0:7d:c5:d0:90:ef:3e:b2:a1:d6:10:4b: c6:4b:bb:91:48:7b:a2:1b:90:c0:d7:93:ae:4d:28: 47:e3:61:4a:da:c9:54:5d:bd:64:7e:08:e2:7f:6d: a2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:12:50:C6:54:50:CC:AD:3C:76:04:39:A4:74:1D:0F:32:F2:CB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:45:9d:dc:bf:d6:9a:11:21:d6:57:5d:3f:94:e2:a6:72:9d: fa:d2:23:1a:39:0c:9e:0c:37:ac:82:d9:a2:d1:92:36:f8:a6: 5e:98:35:ff:48:9f:b9:3c:92:c1:af:98:22:45:8e:c6:38:fb: 33:34:ff:a1:6b:2e:d1:8c:d9:70:cd:4e:1a:aa:52:6c:d6:0e: 2f:29:b4:be:ce:e3:2f:74:49:fd:67:10:66:1f:bb:22:ca:da: f0:b1:b8:08:3a:72:05:0d:5d:0a:1c:33:a8:e1:70:c7:ab:26: 98:56:86:ca:41:79:ba:4a:bb:f0:ff:f5:e8:22:74:31:d1:30: b8:25:df:a4:6d:a8:4c:4a:ea:30:23:45:e2:e4:44:44:58:0c: 0d:f9:ee:a9:1f:d5:48:19:86:6e:46:d3:87:9e:ab:34:af:b2: 51:f6:f7:4b:44:7e:6a:eb:1e:08:af:4d:a8:04:93:88:b7:6f: e9:f1:47:62:c9:f4:df:5d:06:83:88:ed:44:99:c8:c4:90:a6: 7c:42:25:b8:15:51:f7:e1:64:55:47:ec:ee:8d:b5:e6:a3:af: 76:7f:eb:3c:eb:82:b0:44:6d:16:13:2c:8c:b8:58:05:21:af: b3:74:66:05:25:3c:a3:f2:66:4e:77:ff:64:96:3c:f9:87:c8: 35:f5:97:3b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9JdlwDo9bTDYIerwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNiODc4ZTQtZjRlMS00MTQ0LTlhNzUtZWM4ODQ2YjlkYWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO7pe0U4O1aFy5qQBq46lwnuM9ZFFV0RisxU Io5PSXaJwRfkGO+vtA3hSy4gX+0UIozWILedJ+DdF26H3obSLSf+HyRI1bI95B1E G4SPvdYVV8+mR5lqkRBgE1KfK9xsqzhHey/7d1e9f8xezzXnuYz/b+sZlGAT6Jky 2+lJ+ElGEeYmG46rI2MPukA9z655OyCmBOFQQlMUouQNaAQ+R9K27sFd/HvSEjiv Kpsmnz+/nC64GcnDp2pcowY++VIuZg7fKosXtAGpMNrh3uLGKqNK/2/QfcXQkO8+ sqHWEEvGS7uRSHuiG5DA15OuTShH42FK2slUXb1kfgjif22iIQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCcSUMZUUMytPHYEOaR0HQ8y8sv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGJFndy/1poRIdZXXT+U4qZynfrS Ixo5DJ4MN6yC2aLRkjb4pl6YNf9In7k8ksGvmCJFjsY4+zM0/6FrLtGM2XDNThqq UmzWDi8ptL7O4y90Sf1nEGYfuyLK2vCxuAg6cgUNXQocM6jhcMerJphWhspBebpK u/D/9egidDHRMLgl36RtqExK6jAjReLkRERYDA357qkf1UgZhm5G04eeqzSvslH2 90tEfmrrHgivTagEk4i3b+nxR2LJ9N9dBoOI7USZyMSQpnxCJbgVUffhZFVH7O6N teajr3Z/6zzrgrBEbRYTLIy4WAUhr7N0ZgUlPKPyZk53/2SWPPmHyDX1lzs= -----END CERTIFICATE-----Generated at Mon Sep 28 10:39:04 2026 by rpki-client