$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa File: dff21604-1698-3188-98f1-6b0994e52624.roa (raw, json) Hash identifier: +ww5WARV8WrRQ35gI/sUIhC5Cy7csbiEMuZDvCnHBbY= Subject key identifier: 27:03:FE:BF:B2:4B:15:B4:2E:83:7D:17:6D:CC:F3:9D:16:C6:9B:67 Certificate issuer: /CN=d899d3d2-c968-408b-b21e-5744f982c130 Certificate serial: 010D0C9F4328584A7085F54A99935377657B2580 Authority key identifier: 2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa Signing time: Mon 07 Jul 2025 13:01:05 +0000 ROA not before: Mon 07 Jul 2025 13:01:05 +0000 ROA not after: Sun 05 Oct 2025 13:01:05 +0000 asID: 393821 IP address blocks: 192.169.66.0/23 maxlen: 24 206.125.144.0/21 maxlen: 24 2607:3680::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:70:85:f5:4a:99:93:53:77:65:7b:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d899d3d2-c968-408b-b21e-5744f982c130 Validity Not Before: Jul 7 13:01:05 2025 GMT Not After : Oct 5 13:01:05 2025 GMT Subject: CN=68e917dc-d01e-4d03-8f1a-0e61b8bd2c4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:82:1d:74:9f:70:f1:2d:46:eb:f0:88:82:a3: af:10:4b:4a:cd:ca:9e:72:a2:7b:6b:27:1c:67:35: b4:a7:14:78:26:5d:ed:2c:72:a8:ec:be:c3:26:16: e7:69:c2:7a:26:34:3b:8f:e6:d0:96:31:43:7c:12: 7e:ce:83:a0:e4:30:04:c1:73:34:01:c0:62:11:a8: 54:0a:18:26:c3:4e:7b:6a:05:6a:9e:3b:b0:ed:ce: d6:02:a8:85:08:df:0c:4c:02:e4:7f:0d:05:b7:1e: 37:2e:8e:54:36:47:9f:b1:13:f1:a7:4c:25:9a:86: ad:c8:d2:c0:2d:81:38:6d:aa:93:a2:95:1e:58:2c: 05:77:aa:19:5d:56:8f:c9:5b:63:16:2a:22:c4:19: a8:6e:0a:cf:61:2f:b0:e0:e2:63:39:6b:6b:06:40: 13:f7:04:1a:9a:68:9b:d6:8c:c2:c6:ff:0a:3e:b4: 90:aa:1c:bb:46:14:fb:e5:a7:b3:44:b9:90:28:79: e3:c4:b4:d2:c6:7f:4e:4b:f1:22:af:66:ec:ec:62: f5:57:b4:69:a9:cc:f3:c5:7e:b7:a5:18:bf:45:97: ce:80:eb:6b:a4:9c:8d:a5:aa:91:60:ac:93:43:9a: da:32:ee:25:da:3e:80:64:bc:7d:f8:14:cc:5a:62: 5d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:03:FE:BF:B2:4B:15:B4:2E:83:7D:17:6D:CC:F3:9D:16:C6:9B:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/dff21604-1698-3188-98f1-6b0994e52624.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130/d899d3d2-c968-408b-b21e-5744f982c130.crl X509v3 Authority Key Identifier: keyid:2A:CF:72:BD:2C:A5:C6:D9:49:F2:A2:93:83:97:80:C1:81:ED:87:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d899d3d2-c968-408b-b21e-5744f982c130.cer sbgp-ipAddrBlock: critical IPv4: 192.169.66.0/23 206.125.144.0/21 IPv6: 2607:3680::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:17:a8:1c:b9:08:be:db:47:c1:d6:48:43:a7:5e:07:ec:7e: c8:e3:c7:f9:4f:e4:9a:52:56:85:cc:3e:b5:df:0b:08:f4:b3: 2a:ab:a3:50:86:c0:14:bf:15:2a:e8:5d:c9:65:7c:b6:90:8e: a0:42:29:16:e3:f7:9e:3a:7d:63:ea:cc:17:14:8d:17:5f:1a: ec:0e:74:6a:4c:97:54:6f:f3:20:0e:7d:c2:90:d0:93:8c:69: e9:e5:30:a4:e9:6f:7a:45:e8:55:b0:c4:42:fa:36:e9:35:41: 0a:07:c8:9c:c7:a6:99:be:a9:bb:d7:3f:da:15:e7:d8:0f:66: b2:db:24:14:98:5f:f0:f6:25:4d:d4:42:59:01:a5:2e:19:79: 0f:1f:c4:51:d0:6e:3f:79:b3:b6:68:bd:ce:b4:60:dd:e3:b3: 24:28:ba:76:e5:a9:00:2c:bc:6e:41:bd:c2:fb:e2:eb:7b:fa: 9e:f9:09:9d:e4:86:77:03:05:7a:0a:2c:73:b2:ce:b4:18:6b: 4b:cb:37:0e:86:bc:8e:17:00:28:98:ba:ad:6a:cc:ec:07:e1: a7:4b:95:0c:e6:b6:ec:e8:aa:8f:2c:64:0f:30:69:ca:75:f0: cd:e5:30:46:dc:4c:1d:45:c4:b4:ce:28:52:4e:6c:26:53:fb: 46:9d:ad:1b -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEpwhfVKmZNTd2V7JYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5OWQzZDItYzk2OC00MDhiLWIyMWUtNTc0NGY5ODJj MTMwMB4XDTI1MDcwNzEzMDEwNVoXDTI1MTAwNTEzMDEwNVowLzEtMCsGA1UEAxMk NjhlOTE3ZGMtZDAxZS00ZDAzLThmMWEtMGU2MWI4YmQyYzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYIddJ9w8S1G6/CIgqOvEEtKzcqecqJ7aycc ZzW0pxR4Jl3tLHKo7L7DJhbnacJ6JjQ7j+bQljFDfBJ+zoOg5DAEwXM0AcBiEahU Chgmw057agVqnjuw7c7WAqiFCN8MTALkfw0Ftx43Lo5UNkefsRPxp0wlmoatyNLA LYE4baqTopUeWCwFd6oZXVaPyVtjFioixBmobgrPYS+w4OJjOWtrBkAT9wQammib 1ozCxv8KPrSQqhy7RhT75aezRLmQKHnjxLTSxn9OS/Eir2bs7GL1V7RpqczzxX63 pRi/RZfOgOtrpJyNpaqRYKyTQ5raMu4l2j6AZLx9+BTMWmJd/QIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCcD/r+ySxW0LoN9F23M850WxptnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5 ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0Zjk4MmMxMzAvZGZmMjE2MDQtMTY5OC0z MTg4LTk4ZjEtNmIwOTk0ZTUyNjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDg5OWQzZDItYzk2OC00MDhiLWIy MWUtNTc0NGY5ODJjMTMwL2Q4OTlkM2QyLWM5NjgtNDA4Yi1iMjFlLTU3NDRmOTgy YzEzMC5jcmwwHwYDVR0jBBgwFoAUKs9yvSylxtlJ8qKTg5eAwYHth2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kODk5ZDNkMi1jOTY4LTQwOGItYjIxZS01NzQ0 Zjk4MmMxMzAuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwKlCAwQD zn2QMA0EAgACMAcDBQAmBzaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHAXqBy5CL7bR8HWSEOnXgfsfsjj x/lP5JpSVoXMPrXfCwj0syqro1CGwBS/FSroXcllfLaQjqBCKRbj9546fWPqzBcU jRdfGuwOdGpMl1Rv8yAOfcKQ0JOMaenlMKTpb3pF6FWwxEL6Nuk1QQoHyJzHppm+ qbvXP9oV59gPZrLbJBSYX/D2JU3UQlkBpS4ZeQ8fxFHQbj95s7Zovc60YN3jsyQo unblqQAsvG5BvcL74ut7+p75CZ3khncDBXoKLHOyzrQYa0vLNw6GvI4XACiYuq1q zOwH4adLlQzmtuzoqo8sZA8wacp18M3lMEbcTB1FxLTOKFJObCZT+0adrRs= -----END CERTIFICATE-----Generated at Wed Jul 9 21:40:05 2025 by rpki-client