$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa File: 8e538e64-2bf8-3da1-9438-625e450840da.roa (raw, json) Hash identifier: 42fUloXgt6TFT/h6e7EAHVf4OMoeKu6dftVXkmKXLFQ= Subject key identifier: 45:6B:0C:DB:60:DB:4D:7C:4A:90:2A:8A:C5:CD:09:0B:72:F8:3B:2D Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584E7E94F93AC9CEA7D3C8E25F80 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 15204 IP address blocks: 66.6.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:f9:3a:c9:ce:a7:d3:c8:e2:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=136bf89a-d95a-4a78-bc22-e0ceae2e9594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:72:f1:05:36:c3:5c:c6:03:f7:b2:9a:21:44: 05:b7:64:16:e7:f3:75:da:1b:fc:9b:fb:51:1b:89: 90:2c:6a:23:06:f9:34:de:68:50:41:98:2e:2f:e0: 88:db:ac:a8:d8:19:92:4b:76:18:a2:0b:7e:f4:fd: 27:5a:4f:4b:ee:a3:52:52:f4:2f:3a:38:47:a3:c8: 69:40:92:40:d0:88:5d:88:9a:57:5a:0e:2c:49:86: c2:62:53:7d:0a:4c:54:97:fd:04:59:8d:80:07:61: 13:52:ff:7c:4d:1f:4c:fa:66:57:80:05:70:3d:bf: 8a:44:cf:ac:dc:40:5e:89:0e:cf:0a:90:96:86:68: e4:99:65:13:bc:ed:49:07:a3:b4:c4:0d:0e:bd:6f: 01:38:08:44:be:82:44:83:40:8b:cc:14:d2:1d:e1: 0b:09:ac:75:b5:31:d8:10:0c:2a:fe:90:05:83:c8: 64:13:66:b6:f0:d8:60:41:ad:19:84:68:bb:03:8e: 19:ef:5c:36:ec:a4:e9:3b:00:0e:39:52:c3:f5:7f: 5e:ee:a3:b0:d8:35:a1:a9:78:72:ed:b7:e7:36:a1: f4:ed:27:2f:bf:9f:b1:8a:8d:1a:f9:c3:53:2f:c9: e8:11:93:b2:bf:65:f8:b0:a7:9b:16:04:29:fa:1d: fa:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6B:0C:DB:60:DB:4D:7C:4A:90:2A:8A:C5:CD:09:0B:72:F8:3B:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:39:4e:89:da:d5:5a:34:63:d0:59:61:25:49:e9:13:af:9a: 57:40:f7:92:81:4d:cd:01:62:58:41:63:1e:56:f6:a5:bb:b8: 3c:e4:88:31:83:cc:a4:a1:2e:75:42:21:76:99:79:d7:b1:0a: 42:9e:fd:ec:b6:dd:7a:c3:f5:17:66:3b:55:e8:ed:fd:e5:35: ec:51:cb:63:91:0f:15:88:a8:79:a0:31:76:71:18:50:d7:91: 76:ec:5f:88:61:97:6c:16:d0:18:5e:57:ba:cc:87:60:13:ed: 4c:63:04:12:c8:2b:39:40:46:d8:5a:74:d0:e2:04:a9:9a:07: 15:b2:7e:8a:42:e7:3a:e0:6b:35:80:f9:15:e9:c9:5f:26:cb: d1:99:7c:b7:7d:49:d1:10:3b:01:12:dc:c5:84:4c:9a:92:10: 82:39:f8:18:34:a9:8f:4a:bf:bf:e4:fc:50:a3:e7:f2:ca:ec: 1b:70:7c:ec:7d:b7:37:ea:25:e7:34:8e:1c:86:7f:7d:c5:2e: 5c:78:b8:f7:59:e1:ba:01:b4:46:c1:0b:b8:1d:99:ec:1c:5a: 28:41:a5:90:68:cf:2e:be:f4:11:d3:8e:e3:2d:b6:02:f7:f1: d3:83:a2:c0:3a:28:89:da:5e:7f:21:f3:2b:c8:ce:df:db:23: d9:43:32:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lPk6yc6n08jiX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MTM2YmY4OWEtZDk1YS00YTc4LWJjMjItZTBjZWFlMmU5NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XLxBTbDXMYD97KaIUQFt2QW5/N12hv8m/tR G4mQLGojBvk03mhQQZguL+CI26yo2BmSS3YYogt+9P0nWk9L7qNSUvQvOjhHo8hp QJJA0IhdiJpXWg4sSYbCYlN9CkxUl/0EWY2AB2ETUv98TR9M+mZXgAVwPb+KRM+s 3EBeiQ7PCpCWhmjkmWUTvO1JB6O0xA0OvW8BOAhEvoJEg0CLzBTSHeELCax1tTHY EAwq/pAFg8hkE2a28NhgQa0ZhGi7A44Z71w27KTpOwAOOVLD9X9e7qOw2DWhqXhy 7bfnNqH07Scvv5+xio0a+cNTL8noEZOyv2X4sKebFgQp+h36KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVrDNtg2018SpAqisXNCQty+DstMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGU1MzhlNjQtMmJmOC0z ZGExLTk0MzgtNjI1ZTQ1MDg0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM5Tona1Vo0Y9BZYSVJ6ROvmldA95KBTc0BYlhBYx5W9qW7uDzkiDGD zKShLnVCIXaZedexCkKe/ey23XrD9RdmO1Xo7f3lNexRy2ORDxWIqHmgMXZxGFDX kXbsX4hhl2wW0BheV7rMh2AT7UxjBBLIKzlARthadNDiBKmaBxWyfopC5zrgazWA +RXpyV8my9GZfLd9SdEQOwES3MWETJqSEII5+Bg0qY9Kv7/k/FCj5/LK7BtwfOx9 tzfqJec0jhyGf33FLlx4uPdZ4boBtEbBC7gdmewcWihBpZBozy6+9BHTjuMttgL3 8dODosA6KInaXn8h8yvIzt/bI9lDMos= -----END CERTIFICATE-----Generated at Wed Jul 22 03:08:19 2026 by rpki-client