$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa File: 891132c6-0309-32ba-a1d3-ef9e3b909c24.roa (raw, json) Hash identifier: Wf9ra/OR72P+tvY/7IHscAuMPn9a1CWSWgrT9RT8aM0= Subject key identifier: B2:52:50:DB:7A:10:97:FF:64:46:B4:67:D2:9E:52:BA:51:E9:E5:6D Certificate issuer: /CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Certificate serial: 010D0C9F4328584E82C4DDD27323C4208C50C600 Authority key identifier: 96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa Signing time: Wed 15 Jul 2026 21:00:12 +0000 ROA not before: Wed 15 Jul 2026 21:00:12 +0000 ROA not after: Tue 13 Oct 2026 21:00:12 +0000 asID: 22785 IP address blocks: 66.109.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:82:c4:dd:d2:73:23:c4:20:8c:50:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d708e8-5964-4587-8db1-e22545ec38a3 Validity Not Before: Jul 15 21:00:12 2026 GMT Not After : Oct 13 21:00:12 2026 GMT Subject: CN=a8fd7011-ace9-4809-94d2-63370ca665c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:41:8c:ee:55:24:e5:64:a2:7f:c6:47:57: e1:46:90:00:e1:7f:09:52:31:0a:36:5e:8e:5d:12: 3d:bd:e5:9d:03:d7:63:9c:3a:93:b9:a2:c2:54:e4: 60:a3:44:d4:99:09:86:b6:ee:f1:40:86:4e:4a:21: 65:e5:59:0a:08:21:59:35:97:0d:0b:ea:fc:9a:dc: ef:36:ba:f6:dd:7d:71:62:83:12:9a:81:40:96:a6: f0:09:7d:09:08:41:a6:64:d2:d2:ca:a5:7e:b6:a2: 16:f4:18:b6:1d:5e:b2:95:23:c6:0d:c3:18:3e:2b: 22:ce:b0:3c:70:ff:f0:3b:ef:38:d6:21:bf:10:cc: 17:38:08:c1:d8:ab:a0:2d:cd:e0:1c:52:87:9b:d3: 5c:9c:28:1b:1d:79:cd:cf:cd:e5:8e:4d:c6:a4:9d: 13:1c:78:86:5b:74:3d:9b:a9:56:b4:68:37:27:2b: 38:7f:e6:38:6d:ad:db:c5:86:72:a8:4b:7d:f6:1c: 8d:3e:4f:0a:e7:07:0d:55:23:94:83:aa:76:d8:d3: 7c:2e:40:2f:f7:c1:69:35:40:75:06:7f:ba:5d:1f: b4:a6:49:9a:3d:40:02:c2:52:4d:d0:d0:c8:8c:f3: 83:e6:ef:e5:90:17:6e:1e:86:84:b1:fe:76:4e:0c: ad:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:52:50:DB:7A:10:97:FF:64:46:B4:67:D2:9E:52:BA:51:E9:E5:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/891132c6-0309-32ba-a1d3-ef9e3b909c24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3/d6d708e8-5964-4587-8db1-e22545ec38a3.crl X509v3 Authority Key Identifier: keyid:96:4F:71:53:38:88:DA:C6:95:AE:5A:82:6F:EC:AF:3A:1A:5F:2C:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d6d708e8-5964-4587-8db1-e22545ec38a3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c7:f6:d6:0a:b1:18:09:49:06:af:32:b5:13:1f:00:e6:27: 87:23:04:c0:ee:26:6c:1c:77:31:8f:23:64:23:b8:3c:12:c8: b0:07:55:8e:91:0b:ce:eb:f6:02:75:5e:30:1d:ce:af:6a:af: 0c:f2:b1:2a:1e:f3:bf:1e:ab:3c:72:bf:a1:c6:a3:ba:ae:9a: 7d:c2:15:21:bc:01:59:ad:7f:f7:0c:40:74:97:c7:d7:a0:fc: d3:3d:a7:b6:fa:d5:52:32:21:74:0c:d2:14:8d:a0:0c:d2:f2: 94:91:a5:4e:6e:ad:b8:fc:e4:e0:96:b5:ac:ac:ff:79:0c:39: 00:71:9c:41:5c:a7:04:71:9e:e7:ea:ca:97:55:a3:42:d3:b6: 2e:95:29:c5:7e:31:aa:63:53:33:24:0c:d2:84:ec:3d:86:80: c0:8b:92:68:47:3e:98:39:3e:c2:15:be:74:1d:86:8a:ae:32: 04:55:f9:e3:be:e7:90:2a:3f:e9:fd:14:0d:a3:8b:64:0e:63: 20:de:61:8c:5c:56:cd:c5:86:65:fa:1a:35:9e:14:36:93:8f: 0c:e2:86:da:d2:da:7b:16:03:fc:41:f8:a9:7e:b5:01:e2:21: 88:29:82:38:67:c2:86:a1:d7:db:fd:43:13:d7:7a:29:04:80: 8d:b5:91:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6CxN3ScyPEIIxQxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDZkNzA4ZTgtNTk2NC00NTg3LThkYjEtZTIyNTQ1ZWMz OGEzMB4XDTI2MDcxNTIxMDAxMloXDTI2MTAxMzIxMDAxMlowLzEtMCsGA1UEAxMk YThmZDcwMTEtYWNlOS00ODA5LTk0ZDItNjMzNzBjYTY2NWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sVBjO5VJOVkon/GR1fhRpAA4X8JUjEKNl6O XRI9veWdA9djnDqTuaLCVORgo0TUmQmGtu7xQIZOSiFl5VkKCCFZNZcNC+r8mtzv Nrr23X1xYoMSmoFAlqbwCX0JCEGmZNLSyqV+tqIW9Bi2HV6ylSPGDcMYPisizrA8 cP/wO+841iG/EMwXOAjB2KugLc3gHFKHm9NcnCgbHXnNz83ljk3GpJ0THHiGW3Q9 m6lWtGg3Jys4f+Y4ba3bxYZyqEt99hyNPk8K5wcNVSOUg6p22NN8LkAv98FpNUB1 Bn+6XR+0pkmaPUACwlJN0NDIjPOD5u/lkBduHoaEsf52TgytiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJSUNt6EJf/ZEa0Z9KeUrpR6eVtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3 MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1NDVlYzM4YTMvODkxMTMyYzYtMDMwOS0z MmJhLWExZDMtZWY5ZTNiOTA5YzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDZkNzA4ZTgtNTk2NC00NTg3LThk YjEtZTIyNTQ1ZWMzOGEzL2Q2ZDcwOGU4LTU5NjQtNDU4Ny04ZGIxLWUyMjU0NWVj MzhhMy5jcmwwHwYDVR0jBBgwFoAUlk9xUziI2saVrlqCb+yvOhpfLHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNmQ3MDhlOC01OTY0LTQ1ODctOGRiMS1lMjI1 NDVlYzM4YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQm2WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzH9tYKsRgJSQavMrUTHwDmJ4cjBMDuJmwcdzGPI2QjuDwSyLAHVY6R C87r9gJ1XjAdzq9qrwzysSoe878eqzxyv6HGo7qumn3CFSG8AVmtf/cMQHSXx9eg /NM9p7b61VIyIXQM0hSNoAzS8pSRpU5urbj85OCWtays/3kMOQBxnEFcpwRxnufq ypdVo0LTti6VKcV+MapjUzMkDNKE7D2GgMCLkmhHPpg5PsIVvnQdhoquMgRV+eO+ 55AqP+n9FA2ji2QOYyDeYYxcVs3FhmX6GjWeFDaTjwzihtrS2nsWA/xB+Kl+tQHi IYgpgjhnwoah19v9QxPXeikEgI21kSw= -----END CERTIFICATE-----Generated at Fri Jul 24 04:52:19 2026 by rpki-client