$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: t9Uo79paPEOneFBkBSzRllO1kxpjAnHADLYyh7p2vsA= Subject key identifier: 18:66:5F:5C:65:02:FC:A5:43:82:84:D1:31:D7:B6:A8:8F:F3:0E:7E Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584B5141C084AB3D2527D2F48B80 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Fri 26 Sep 2025 01:00:33 +0000 ROA not before: Fri 26 Sep 2025 01:00:33 +0000 ROA not after: Thu 25 Dec 2025 02:00:33 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:41:c0:84:ab:3d:25:27:d2:f4:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Sep 26 01:00:33 2025 GMT Not After : Dec 25 02:00:33 2025 GMT Subject: CN=7299c857-b8ef-4f34-9ab1-88720936623e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5c:8a:ea:89:51:ab:7e:45:f3:ab:55:4a:aa: 1d:3f:bb:46:60:c3:f6:99:dc:b7:44:c4:a5:1d:59: e6:44:28:02:ee:e9:b1:81:42:2f:f3:3d:75:d1:40: 0c:09:0b:df:ea:9c:c9:6f:86:bd:0f:42:4f:39:db: 15:43:56:4a:4d:04:f8:ab:af:15:b2:aa:e6:72:95: 77:ae:6a:64:16:06:48:4e:19:ad:af:18:b6:c2:3f: 91:37:c8:ae:25:a4:07:6f:38:57:29:82:5d:7e:08: dd:48:67:2a:be:4f:4c:85:8b:af:28:33:62:83:82: 8f:26:6c:71:58:03:e4:b9:d1:87:30:42:e0:1d:12: 16:88:1f:84:89:31:ab:bb:df:4a:d9:6f:75:37:c5: b7:9c:a2:fd:0d:69:7e:d0:30:4d:d0:1f:14:81:ab: f0:ab:34:f0:57:84:5e:4a:40:b4:89:28:08:2f:14: 07:eb:e1:88:57:69:6e:c3:75:7a:d6:7d:2a:5a:c4: 8e:99:ba:d7:47:16:6c:7f:1d:b0:8e:eb:a2:21:d5: 84:2b:58:14:f3:c4:de:26:05:23:6f:f8:83:c9:6b: 5e:75:e1:1d:2b:cf:9c:36:b5:e3:1c:50:de:3f:30: 39:e8:c9:40:b3:b0:12:84:f2:18:d8:10:c1:35:6b: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:66:5F:5C:65:02:FC:A5:43:82:84:D1:31:D7:B6:A8:8F:F3:0E:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:76:24:d6:ef:a5:01:18:3f:a6:00:88:d1:8c:bc:29:08:fe: e0:62:01:6c:7d:14:b2:4d:cb:ff:7d:c2:dc:69:25:fd:72:0d: 9b:03:51:cf:ed:de:ba:21:34:e4:be:08:6a:49:1d:3e:69:a8: 89:78:1c:31:01:af:b2:fe:61:b4:05:82:8d:be:0e:99:6f:ba: 46:7e:9c:f3:b1:55:22:c3:6b:1b:98:e6:22:7a:b7:2e:a1:ba: 5a:81:6e:a7:5a:df:37:fd:fb:9f:ed:2c:86:32:5b:c0:a5:8d: d1:19:9c:13:c8:84:17:1d:39:63:f8:1f:87:71:74:b9:87:f8: c3:d7:6d:2a:bc:54:68:c2:fb:33:62:31:8e:86:5e:2f:e6:c7: 82:71:64:6b:8d:ec:da:be:cb:4a:df:89:dd:45:4f:88:68:ca: 12:46:86:65:c0:56:60:a7:1a:47:a3:41:10:c6:5d:52:5a:24: 9a:49:ce:f1:01:04:5d:f3:7e:9d:b6:b3:a9:f8:bb:2b:c3:52: 02:c6:3c:25:30:23:70:88:21:df:90:70:67:ee:08:98:e1:a5: 54:d9:6e:a6:26:3c:10:fb:4b:a9:5d:2f:00:1f:0f:5b:72:f0: 48:90:b3:11:d2:53:4b:76:00:61:ab:d6:3e:19:d5:6f:27:52: 95:24:70:67 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEtRQcCEqz0lJ9L0i4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI1MDkyNjAxMDAzM1oXDTI1MTIyNTAyMDAzM1owLzEtMCsGA1UEAxMk NzI5OWM4NTctYjhlZi00ZjM0LTlhYjEtODg3MjA5MzY2MjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFyK6olRq35F86tVSqodP7tGYMP2mdy3RMSl HVnmRCgC7umxgUIv8z110UAMCQvf6pzJb4a9D0JPOdsVQ1ZKTQT4q68VsqrmcpV3 rmpkFgZIThmtrxi2wj+RN8iuJaQHbzhXKYJdfgjdSGcqvk9MhYuvKDNig4KPJmxx WAPkudGHMELgHRIWiB+EiTGru99K2W91N8W3nKL9DWl+0DBN0B8UgavwqzTwV4Re SkC0iSgILxQH6+GIV2luw3V61n0qWsSOmbrXRxZsfx2wjuuiIdWEK1gU88TeJgUj b/iDyWtedeEdK8+cNrXjHFDePzA56MlAs7AShPIY2BDBNWtR1QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFBhmX1xlAvylQ4KE0THXtqiP8w5+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEx2JNbvpQEYP6YAiNGMvCkI/uBi AWx9FLJNy/99wtxpJf1yDZsDUc/t3rohNOS+CGpJHT5pqIl4HDEBr7L+YbQFgo2+ DplvukZ+nPOxVSLDaxuY5iJ6ty6hulqBbqda3zf9+5/tLIYyW8CljdEZnBPIhBcd OWP4H4dxdLmH+MPXbSq8VGjC+zNiMY6GXi/mx4JxZGuN7Nq+y0rfid1FT4hoyhJG hmXAVmCnGkejQRDGXVJaJJpJzvEBBF3zfp22s6n4uyvDUgLGPCUwI3CIId+QcGfu CJjhpVTZbqYmPBD7S6ldLwAfD1ty8EiQsxHSU0t2AGGr1j4Z1W8nUpUkcGc= -----END CERTIFICATE-----Generated at Wed Oct 8 19:42:59 2025 by rpki-client