$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa File: 8e538e64-2bf8-3da1-9438-625e450840da.roa (raw, json) Hash identifier: llcFDNtl8nnA6qmJMK1Y38AuYk+sQOxSsGqDe7tpsMc= Subject key identifier: CC:B7:5A:A0:98:33:11:E5:92:50:03:B9:95:5E:E4:30:16:BA:87:02 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584D9E501D57E2650BD87DD5B280 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 15204 IP address blocks: 66.6.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:1d:57:e2:65:0b:d8:7d:d5:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=12bf7bf2-0def-468e-8b46-7a84f6870e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:da:03:13:db:92:48:37:56:04:cd:38:86: 9b:a8:cd:fb:fe:63:85:e9:0d:18:e3:4f:9d:e0:1c: 8e:a8:a7:25:da:a8:90:36:6a:af:38:8f:78:fa:b0: 3b:df:c1:a9:c7:5b:ad:58:41:fb:d5:4b:e0:95:36: 90:ad:78:96:ea:2a:d0:4b:98:f5:6a:a0:5b:81:7c: 5a:17:f5:66:35:dc:99:32:5d:33:49:d2:7d:23:ed: c3:a6:36:f6:f2:1f:be:49:30:a0:ec:36:f9:88:48: 02:e2:e8:38:31:e2:31:e1:4b:63:d7:90:94:0c:f2: 01:43:4d:c9:63:c1:0b:82:05:d3:6d:50:58:ec:81: 62:25:44:70:41:ef:61:40:b3:a0:26:2b:7c:e1:6b: 86:4e:57:49:ec:dc:52:2d:94:bc:04:f0:05:07:51: 91:69:a7:1c:d0:db:6d:53:3e:27:79:aa:20:12:06: c5:02:7a:78:fd:a6:d2:38:c5:dc:a7:b5:ba:46:7b: 95:81:ce:87:ea:5f:fc:3f:ac:fd:73:5b:e1:85:f0: c1:a9:e8:2e:b1:49:88:00:40:9b:77:64:15:85:d0: 71:8e:ec:2b:e4:c8:f7:09:e7:72:74:0c:07:b8:61: b5:1b:5e:5a:e5:5d:ae:ac:de:eb:58:91:b3:25:e4: 75:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:5A:A0:98:33:11:E5:92:50:03:B9:95:5E:E4:30:16:BA:87:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:71:78:72:d2:17:76:e4:0f:e7:bb:61:61:4f:fc:29:05:21: ae:1a:7b:6c:40:41:c9:55:79:9e:bb:b6:a8:be:a0:4f:20:ec: 6b:d3:c9:f0:4b:2b:ca:08:59:71:98:1a:69:79:6b:53:56:34: b5:a9:12:ea:f5:3f:b1:d7:2c:e8:24:9a:3a:57:1b:f9:d8:3d: 4d:e6:02:dd:8b:ef:1d:5d:87:ad:64:a7:4d:cb:9d:a2:e3:cc: ec:34:19:d8:94:62:af:ca:d1:74:44:d8:b8:78:1d:ce:dc:c0: 6a:b5:d5:2c:2a:09:47:a9:0a:20:19:1a:7b:58:51:94:a1:ce: 15:a0:54:45:7d:18:50:ac:f8:fe:dd:06:c8:e2:a8:a2:5a:b5: 2a:c5:6f:ea:d4:53:8a:04:d6:2e:12:52:47:a3:9c:e1:4d:6e: 75:64:7a:28:a3:6b:54:85:f4:06:c2:7f:65:43:36:92:e1:11: 66:30:18:3b:97:37:49:3f:26:83:6a:ea:3a:af:e9:28:4f:b5: ff:7d:51:0f:6a:4f:cb:15:ab:c8:bf:e0:6a:e7:a8:35:e6:d6: 11:4b:dd:2c:3f:6d:13:85:f9:39:3a:20:11:a2:fc:de:80:61: e2:5d:f1:b6:e3:8c:5f:aa:0b:7b:93:ea:b8:3a:72:03:e5:07: 06:dc:76:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUB1X4mUL2H3VsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MTJiZjdiZjItMGRlZi00NjhlLThiNDYtN2E4NGY2ODcwZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38HaAxPbkkg3VgTNOIabqM37/mOF6Q0Y40+d 4ByOqKcl2qiQNmqvOI94+rA738Gpx1utWEH71UvglTaQrXiW6irQS5j1aqBbgXxa F/VmNdyZMl0zSdJ9I+3Dpjb28h++STCg7Db5iEgC4ug4MeIx4Utj15CUDPIBQ03J Y8ELggXTbVBY7IFiJURwQe9hQLOgJit84WuGTldJ7NxSLZS8BPAFB1GRaacc0Ntt Uz4neaogEgbFAnp4/abSOMXcp7W6RnuVgc6H6l/8P6z9c1vhhfDBqegusUmIAECb d2QVhdBxjuwr5Mj3CedydAwHuGG1G15a5V2urN7rWJGzJeR1LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy3WqCYMxHlklADuZVe5DAWuocCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGU1MzhlNjQtMmJmOC0z ZGExLTk0MzgtNjI1ZTQ1MDg0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxxeHLSF3bkD+e7YWFP/CkFIa4ae2xAQclVeZ67tqi+oE8g7GvTyfBL K8oIWXGYGml5a1NWNLWpEur1P7HXLOgkmjpXG/nYPU3mAt2L7x1dh61kp03LnaLj zOw0GdiUYq/K0XRE2Lh4Hc7cwGq11SwqCUepCiAZGntYUZShzhWgVEV9GFCs+P7d BsjiqKJatSrFb+rUU4oE1i4SUkejnOFNbnVkeiija1SF9AbCf2VDNpLhEWYwGDuX N0k/JoNq6jqv6ShPtf99UQ9qT8sVq8i/4GrnqDXm1hFL3Sw/bROF+Tk6IBGi/N6A YeJd8bbjjF+qC3uT6rg6cgPlBwbcdss= -----END CERTIFICATE-----Generated at Wed May 13 07:43:04 2026 by rpki-client