$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa File: 8e538e64-2bf8-3da1-9438-625e450840da.roa (raw, json) Hash identifier: U2qA+CCi0TA0dpwTBSuKAXS8AYuWH/HQrez/209PxTw= Subject key identifier: 72:39:C7:23:9F:06:17:FE:F3:AF:D1:9E:DE:82:BD:30:57:69:0E:F1 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584AFC1C10D5CD188D6B22FB5500 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 66.6.0.0/20 maxlen: 20 66.6.0.0/21 maxlen: 21 66.6.0.0/24 maxlen: 24 66.6.1.0/24 maxlen: 24 66.6.2.0/24 maxlen: 24 66.6.3.0/24 maxlen: 24 66.6.4.0/24 maxlen: 24 66.6.5.0/24 maxlen: 24 66.6.6.0/24 maxlen: 24 66.6.7.0/24 maxlen: 24 66.6.8.0/21 maxlen: 21 66.6.8.0/24 maxlen: 24 66.6.9.0/24 maxlen: 24 66.6.10.0/24 maxlen: 24 66.6.11.0/24 maxlen: 24 66.6.12.0/24 maxlen: 24 66.6.13.0/24 maxlen: 24 66.6.14.0/24 maxlen: 24 66.6.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:10:d5:cd:18:8d:6b:22:fb:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=dcc99a4f-d61b-4de2-b3b9-c9f6defaef3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:13:d3:c8:7d:08:c8:e2:4c:d7:14:b9:30:51: 4d:b9:cb:99:4b:e9:26:96:aa:f5:92:58:90:3a:45: 7c:55:64:13:71:dd:92:d2:45:7e:19:57:61:6f:c3: 64:4b:e5:b3:34:93:11:30:81:99:0d:b8:09:12:9d: b1:d3:a1:af:fc:49:09:c2:11:f5:b7:0e:f7:43:dc: cc:5c:ef:93:8b:2f:6a:ef:9c:be:1f:00:67:e7:33: 14:bb:c5:22:d6:ff:7a:d5:f9:4b:e7:19:c8:7a:14: 1e:45:9b:59:f7:da:79:ba:01:59:d2:08:30:7a:9f: b2:e9:9d:14:e5:0b:b9:74:8c:6b:91:d3:14:13:70: 8e:79:6f:ed:d9:6f:b2:c3:c7:f8:12:e1:d8:2a:2a: 9a:4b:fd:d1:45:bb:53:19:64:98:0f:2a:ec:2f:c0: db:c7:94:b3:20:4e:80:23:fa:b9:57:1e:48:ed:e8: e4:7a:e9:a0:2b:25:2f:56:73:9b:03:ad:c3:25:0f: da:b0:e9:ca:88:5e:35:79:da:37:ba:f3:9d:7e:01: e4:a2:bd:49:bf:c7:7e:92:54:68:f6:90:1c:41:8c: 8d:6d:74:5c:2c:76:91:28:28:d4:9b:03:24:d5:64: 3a:97:4c:5d:45:f6:6c:29:13:ca:53:de:cc:97:db: 0f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:39:C7:23:9F:06:17:FE:F3:AF:D1:9E:DE:82:BD:30:57:69:0E:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:75:26:22:25:c6:fe:e0:90:1d:3a:57:68:08:fe:b7:dc:7d: ff:c2:37:d1:8c:eb:e4:01:2f:3c:17:f8:14:9d:fd:ca:fb:4a: 1c:74:b6:7a:99:3a:07:63:9b:fa:e4:e0:dd:b6:71:e5:3e:04: d0:e8:07:7f:16:78:96:28:05:26:b7:6e:7d:0b:48:e7:0a:0a: 87:1c:4c:c6:ef:d4:8d:0b:e5:7d:53:a4:3f:18:30:db:e4:fb: 10:6e:96:5c:40:51:69:ca:7e:6e:d1:74:27:91:56:52:fc:15: 40:d0:70:ba:14:df:fe:79:8e:41:b1:f8:eb:b1:c6:a6:e4:43: c6:bf:b3:a5:ad:46:fa:c6:23:a2:61:e9:bb:68:4c:a3:7e:f5: 8f:54:d7:f1:19:11:c9:7a:0d:2a:0f:1b:cc:95:28:29:e8:d0: fb:b1:fe:b0:da:20:88:99:e2:7a:77:a2:79:af:41:29:0c:fb: e2:b8:1a:88:5f:2b:f6:99:80:47:e6:00:e5:0a:47:06:b5:56: b1:92:cb:36:e5:c8:55:10:1b:a8:38:31:36:ec:7c:45:b3:f2: 04:96:7d:2b:74:32:f2:8b:09:c2:60:d8:1e:8f:b9:5b:a1:b6: 9b:9d:3a:30:44:70:3b:f7:5e:0a:7b:ef:9e:9e:2c:b2:3c:2f: 4b:70:b4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HBDVzRiNayL7VQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZGNjOTlhNGYtZDYxYi00ZGUyLWIzYjktYzlmNmRlZmFlZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxPTyH0IyOJM1xS5MFFNucuZS+kmlqr1kliQ OkV8VWQTcd2S0kV+GVdhb8NkS+WzNJMRMIGZDbgJEp2x06Gv/EkJwhH1tw73Q9zM XO+Tiy9q75y+HwBn5zMUu8Ui1v961flL5xnIehQeRZtZ99p5ugFZ0ggwep+y6Z0U 5Qu5dIxrkdMUE3COeW/t2W+yw8f4EuHYKiqaS/3RRbtTGWSYDyrsL8Dbx5SzIE6A I/q5Vx5I7ejkeumgKyUvVnObA63DJQ/asOnKiF41edo3uvOdfgHkor1Jv8d+klRo 9pAcQYyNbXRcLHaRKCjUmwMk1WQ6l0xdRfZsKRPKU97Ml9sPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI5xyOfBhf+86/Rnt6CvTBXaQ7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGU1MzhlNjQtMmJmOC0z ZGExLTk0MzgtNjI1ZTQ1MDg0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl1JiIlxv7gkB06V2gI/rfcff/CN9GM6+QBLzwX+BSd/cr7Shx0tnqZ Ogdjm/rk4N22ceU+BNDoB38WeJYoBSa3bn0LSOcKCoccTMbv1I0L5X1TpD8YMNvk +xBullxAUWnKfm7RdCeRVlL8FUDQcLoU3/55jkGx+OuxxqbkQ8a/s6WtRvrGI6Jh 6btoTKN+9Y9U1/EZEcl6DSoPG8yVKCno0Pux/rDaIIiZ4np3onmvQSkM++K4Gohf K/aZgEfmAOUKRwa1VrGSyzblyFUQG6g4MTbsfEWz8gSWfSt0MvKLCcJg2B6PuVuh tpudOjBEcDv3Xgp7756eLLI8L0twtKs= -----END CERTIFICATE-----Generated at Fri Oct 10 03:57:19 2025 by rpki-client