$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa File: 70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa (raw, json) Hash identifier: PIJLEeq0WJXzfzyyHOJxeEYlz9zxKEfFM/UeH1zP4Qc= Subject key identifier: 17:68:EE:D6:44:60:B7:A4:9A:2C:5B:2F:36:87:2C:31:5D:4C:52:AF Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584E640F741375318838EB323F80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 401092 IP address blocks: 66.186.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:74:13:75:31:88:38:eb:32:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=a8aba47d-5335-4a72-a3df-c78b0817e426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:58:1f:2b:8a:4f:28:c5:99:7d:78:f0:3e: 48:da:2b:70:97:a6:b6:f7:5a:46:77:6b:d3:1e:b5: f1:1a:64:00:9c:27:ef:52:5d:6b:e0:cb:c0:12:52: b3:c7:02:74:25:db:23:80:93:b8:3a:25:6d:50:88: d1:34:0e:84:c9:1b:05:d1:a3:ef:1d:b1:23:41:85: dc:52:fe:98:14:5c:a5:72:30:a9:03:e9:35:49:a3: 7b:8f:8f:53:5f:44:1c:80:03:85:60:0b:74:74:f4: 44:b7:42:54:e2:f0:7e:bb:1f:a6:14:92:54:e0:99: ef:e2:c2:7b:5b:d7:97:98:55:31:ea:12:3a:96:b7: ba:03:ee:9b:f0:a4:7c:3a:bb:37:65:e3:40:b7:89: 37:90:2e:e1:3a:66:72:11:2d:50:c9:7b:ef:97:48: 5d:7a:ad:04:cb:59:b3:8d:53:a1:1f:e3:64:2a:f9: b7:d5:64:2f:4d:fc:fa:18:d6:3c:bf:56:35:19:d9: c9:5d:c0:20:03:ea:68:44:f5:fa:11:22:a7:c9:0d: 70:6a:d7:7b:e2:0d:cc:7d:14:cd:6f:16:d2:c8:f0: 1b:71:a9:e9:c1:01:ad:17:61:af:be:86:8e:03:8a: 08:df:9d:68:56:43:4e:9c:6b:51:57:b6:dc:58:4c: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:68:EE:D6:44:60:B7:A4:9A:2C:5B:2F:36:87:2C:31:5D:4C:52:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/70ea6789-2fd4-317d-917d-d00ed4bb6cce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 66.186.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:8c:7c:4a:6b:0d:1d:36:fa:b3:c7:59:08:e4:1b:59:80:42: 0a:c1:fc:a8:03:80:8a:8d:b6:72:42:0e:8d:7f:10:89:48:a4: d2:8c:89:ea:8c:40:54:9d:18:de:56:19:64:cb:d2:c7:26:b1: f8:67:94:04:c7:dd:44:d5:be:27:13:05:ff:a0:cc:72:3b:15: 9d:ad:e0:e9:79:e8:e2:25:e1:1e:99:d1:67:98:24:fc:6d:21: cf:1b:18:95:38:8b:65:c9:fb:29:8b:a7:a4:11:68:b6:8e:53: db:60:41:2d:b4:18:49:a6:17:80:ce:0f:10:60:a6:36:18:17: e8:60:c3:31:16:da:54:48:b2:ab:05:c5:2f:30:87:d7:0d:73: 43:a3:04:99:70:af:cd:41:2b:e5:17:a9:07:7b:02:d0:79:9b: 42:75:9d:10:34:a8:8b:65:50:93:0f:04:3a:43:a0:a8:ef:5a: b4:9a:8a:dc:c8:4b:4e:37:4f:46:30:ce:ff:f9:79:19:6d:89: 22:4d:19:31:fa:a0:00:d5:b9:ad:0a:03:38:08:e7:ff:9d:91: f7:ea:a4:a6:93:c7:38:de:d0:d6:53:77:06:53:35:28:fa:7b: ed:36:aa:bc:71:b3:65:8d:cc:d9:96:67:c8:d9:2b:6d:0e:2c: 5b:55:07:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5kD3QTdTGIOOsyP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk YThhYmE0N2QtNTMzNS00YTcyLWEzZGYtYzc4YjA4MTdlNDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleRYHyuKTyjFmX148D5I2itwl6a291pGd2vT HrXxGmQAnCfvUl1r4MvAElKzxwJ0JdsjgJO4OiVtUIjRNA6EyRsF0aPvHbEjQYXc Uv6YFFylcjCpA+k1SaN7j49TX0QcgAOFYAt0dPREt0JU4vB+ux+mFJJU4Jnv4sJ7 W9eXmFUx6hI6lre6A+6b8KR8Ors3ZeNAt4k3kC7hOmZyES1QyXvvl0hdeq0Ey1mz jVOhH+NkKvm31WQvTfz6GNY8v1Y1GdnJXcAgA+poRPX6ESKnyQ1watd74g3MfRTN bxbSyPAbcanpwQGtF2GvvoaOA4oI351oVkNOnGtRV7bcWEzEnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdo7tZEYLekmixbLzaHLDFdTFKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvNzBlYTY3ODktMmZkNC0z MTdkLTkxN2QtZDAwZWQ0YmI2Y2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQro9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALqMfEprDR02+rPHWQjkG1mAQgrB/KgDgIqNtnJCDo1/EIlIpNKMieqM QFSdGN5WGWTL0scmsfhnlATH3UTVvicTBf+gzHI7FZ2t4Ol56OIl4R6Z0WeYJPxt Ic8bGJU4i2XJ+ymLp6QRaLaOU9tgQS20GEmmF4DODxBgpjYYF+hgwzEW2lRIsqsF xS8wh9cNc0OjBJlwr81BK+UXqQd7AtB5m0J1nRA0qItlUJMPBDpDoKjvWrSaitzI S043T0Ywzv/5eRltiSJNGTH6oADVua0KAzgI5/+dkffqpKaTxzje0NZTdwZTNSj6 e+02qrxxs2WNzNmWZ8jZK20OLFtVB5A= -----END CERTIFICATE-----Generated at Fri Jul 24 07:04:02 2026 by rpki-client