$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa File: 985211db-3d6b-313f-ad01-983be935ee5a.roa (raw, json) Hash identifier: f2vzSzc6b2i9s6BAgrY+zF9b4pm+PmgXhUaKirUCJTQ= Subject key identifier: 87:61:B3:FC:FD:87:38:76:9A:E7:EB:44:56:2D:54:56:53:6D:2B:02 Certificate issuer: /CN=dd89d034-c049-4b11-917d-e035f703312f Certificate serial: 010D0C9F4328584E4559E9A146E7A5FD2E1E7938 Authority key identifier: FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa Signing time: Tue 23 Jun 2026 21:00:12 +0000 ROA not before: Tue 23 Jun 2026 21:00:12 +0000 ROA not after: Mon 21 Sep 2026 21:00:12 +0000 asID: 13394 IP address blocks: 204.63.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:59:e9:a1:46:e7:a5:fd:2e:1e:79:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd89d034-c049-4b11-917d-e035f703312f Validity Not Before: Jun 23 21:00:12 2026 GMT Not After : Sep 21 21:00:12 2026 GMT Subject: CN=5d45a7d9-ae58-4684-80e9-fc1a13fb72f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b0:f0:9f:9a:c3:38:3d:3f:09:07:af:43:20: 1f:e9:78:9b:72:d1:f6:7a:5e:0f:d1:ef:a0:37:1c: fd:1d:e5:44:72:45:d2:39:92:7b:96:a3:0b:f5:2a: e9:1b:f7:76:c6:05:24:97:64:b6:32:1a:99:4e:dc: e5:3e:32:6a:1a:03:db:2f:bd:23:a3:b8:3f:ee:fc: 7b:16:d4:cc:42:60:14:68:0c:12:f3:27:2a:51:22: 0e:33:22:58:4b:43:1d:15:ad:0c:36:0b:52:c2:7d: 59:fa:24:ff:e3:71:63:54:75:82:33:a2:5f:80:fd: f2:1f:0e:c7:62:a6:e5:2f:88:f5:41:79:7a:0b:47: ca:b5:21:84:39:5a:4f:56:59:2e:22:88:60:91:b3: ec:67:0d:18:d6:03:73:a7:9d:3a:c1:d4:7d:63:fa: ac:b9:2d:76:22:89:2d:35:fb:33:a3:b4:a4:05:bf: ce:48:aa:e1:67:13:14:5d:02:af:8d:a4:df:cd:05: 31:72:ee:fb:da:39:da:b4:46:50:b0:c5:f6:28:f6: 3d:21:1a:2a:b1:bf:42:eb:9c:98:91:73:47:a0:11: 82:17:26:02:b6:10:07:32:37:3c:2b:59:40:8e:59: 3c:d9:f9:d5:fb:0e:c6:68:ff:f9:a9:d2:49:09:9e: 03:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:61:B3:FC:FD:87:38:76:9A:E7:EB:44:56:2D:54:56:53:6D:2B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/985211db-3d6b-313f-ad01-983be935ee5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f/dd89d034-c049-4b11-917d-e035f703312f.crl X509v3 Authority Key Identifier: keyid:FD:2D:36:CC:EC:EE:00:DC:29:64:26:A8:7C:2F:AC:E6:1F:0E:B1:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dd89d034-c049-4b11-917d-e035f703312f.cer sbgp-ipAddrBlock: critical IPv4: 204.63.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:af:cf:64:d3:4e:03:3c:30:7b:49:b8:a5:52:1b:ab:09:e4: 19:bb:98:40:ed:f7:8b:d7:ee:33:75:de:a7:ba:75:29:dc:3c: 5a:7f:11:6a:92:cf:20:e6:ec:6b:08:54:55:a6:ec:fa:fd:e5: 5f:e3:49:5b:4a:95:b0:08:ad:04:9f:51:c3:98:9e:b4:9c:92: 36:c1:ca:19:ed:d8:dd:b4:78:14:be:c7:2f:b6:78:85:83:51: 30:ad:0b:53:44:3b:cb:b4:eb:d3:02:04:d2:81:12:5a:71:28: 9b:f5:54:88:28:d9:aa:78:1c:d5:a9:52:05:17:ab:39:ce:87: 09:4a:ab:b3:0b:2a:09:00:89:eb:ec:06:ed:0b:00:5a:61:93: 46:c3:13:da:31:85:3a:4a:00:89:39:12:da:a2:50:e8:46:8c: 33:13:61:64:94:10:ea:04:4c:18:b9:94:f9:13:32:08:1a:78: 40:55:15:7a:64:ee:a8:98:8b:1b:57:39:1f:3f:be:b3:38:08: 2c:c7:3c:cf:26:6c:7b:9c:e0:62:e7:94:19:ae:b8:aa:4f:83: 88:75:06:9e:a7:c4:88:8d:2e:84:9f:8a:8b:75:9b:cc:9b:c6: 23:f8:c6:dc:c0:03:6e:0d:c2:84:b8:79:c0:e7:22:12:1b:47: 2a:c1:72:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FWemhRuel/S4eeTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ4OWQwMzQtYzA0OS00YjExLTkxN2QtZTAzNWY3MDMz MTJmMB4XDTI2MDYyMzIxMDAxMloXDTI2MDkyMTIxMDAxMlowLzEtMCsGA1UEAxMk NWQ0NWE3ZDktYWU1OC00Njg0LTgwZTktZmMxYTEzZmI3MmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLDwn5rDOD0/CQevQyAf6XibctH2el4P0e+g Nxz9HeVEckXSOZJ7lqML9SrpG/d2xgUkl2S2MhqZTtzlPjJqGgPbL70jo7g/7vx7 FtTMQmAUaAwS8ycqUSIOMyJYS0MdFa0MNgtSwn1Z+iT/43FjVHWCM6JfgP3yHw7H YqblL4j1QXl6C0fKtSGEOVpPVlkuIohgkbPsZw0Y1gNzp506wdR9Y/qsuS12Iokt Nfszo7SkBb/OSKrhZxMUXQKvjaTfzQUxcu772jnatEZQsMX2KPY9IRoqsb9C65yY kXNHoBGCFyYCthAHMjc8K1lAjlk82fnV+w7GaP/5qdJJCZ4D/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdhs/z9hzh2mufrRFYtVFZTbSsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5 ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1ZjcwMzMxMmYvOTg1MjExZGItM2Q2Yi0z MTNmLWFkMDEtOTgzYmU5MzVlZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGQ4OWQwMzQtYzA0OS00YjExLTkx N2QtZTAzNWY3MDMzMTJmL2RkODlkMDM0LWMwNDktNGIxMS05MTdkLWUwMzVmNzAz MzEyZi5jcmwwHwYDVR0jBBgwFoAU/S02zOzuANwpZCaofC+s5h8OsfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZDg5ZDAzNC1jMDQ5LTRiMTEtOTE3ZC1lMDM1 ZjcwMzMxMmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzD/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAivz2TTTgM8MHtJuKVSG6sJ5Bm7mEDt94vX7jN13qe6dSncPFp/EWqS zyDm7GsIVFWm7Pr95V/jSVtKlbAIrQSfUcOYnrSckjbByhnt2N20eBS+xy+2eIWD UTCtC1NEO8u069MCBNKBElpxKJv1VIgo2ap4HNWpUgUXqznOhwlKq7MLKgkAievs Bu0LAFphk0bDE9oxhTpKAIk5EtqiUOhGjDMTYWSUEOoETBi5lPkTMggaeEBVFXpk 7qiYixtXOR8/vrM4CCzHPM8mbHuc4GLnlBmuuKpPg4h1Bp6nxIiNLoSfiot1m8yb xiP4xtzAA24NwoS4ecDnIhIbRyrBclA= -----END CERTIFICATE-----Generated at Mon Jul 6 22:15:46 2026 by rpki-client