$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa File: 8e538e64-2bf8-3da1-9438-625e450840da.roa (raw, json) Hash identifier: 5k7frMMCyqqfoLk0gcvyDSEvYmkMWssxD+Q7W9FTZqY= Subject key identifier: 3C:12:5C:88:1B:36:16:50:43:83:AB:5E:F9:D1:12:72:1F:3F:6F:82 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584CBDB203AD981B1207472B4280 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 15204 IP address blocks: 66.6.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:03:ad:98:1b:12:07:47:2b:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=fa3da6f3-d66d-45cb-a369-14894fff178e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f9:d3:df:43:33:95:10:b6:81:41:77:d0:14: 63:9b:46:f9:7d:30:4c:fa:6b:85:52:c0:94:cf:cb: 25:0c:63:b2:f1:5b:c7:25:3c:2e:0b:d4:2b:5a:f0: 49:8a:45:1a:2f:97:54:44:27:c3:f3:3f:9a:6f:c1: 1a:ca:4f:29:65:3b:a6:fa:91:89:b3:7f:d1:f6:8e: 17:a8:0e:32:34:6d:fa:73:57:d2:2a:df:96:34:e6: 79:d1:47:cc:0a:42:28:68:a4:53:32:8e:da:01:47: 97:ee:63:b7:09:98:ae:71:0c:a2:9b:4a:f2:7f:77: 69:ea:a3:6b:d5:cd:23:db:e0:37:83:b3:96:80:64: c2:86:46:43:bd:30:6d:56:3c:a6:95:a4:9c:01:72: ea:4d:74:67:ec:dc:77:c6:37:60:d2:48:e1:14:5d: d1:ed:a6:90:a2:e7:f1:ae:1e:35:bb:49:88:97:08: a4:7d:13:16:22:fe:ef:ec:3e:6f:6b:5a:66:05:c8: 58:58:c3:ab:cb:03:ed:f5:ec:1a:36:87:4a:c0:18: 01:e4:a0:51:5d:1f:4e:cb:71:42:52:f8:2b:35:02: 61:dd:b1:e0:b4:a4:25:0e:35:61:d8:ae:2c:52:f7: 64:21:03:29:4f:07:b6:99:fa:82:06:71:d8:67:01: 63:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:12:5C:88:1B:36:16:50:43:83:AB:5E:F9:D1:12:72:1F:3F:6F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:12:f7:4c:6a:a3:4d:05:ab:49:84:ca:8b:a4:55:4b:ef:ea: bf:3b:ff:d1:7a:c5:d5:ee:a9:d2:39:25:60:cc:75:23:01:6b: 32:dd:36:94:66:05:9f:11:76:86:24:43:91:ec:69:71:2c:08: c6:5f:a7:36:ea:9f:17:20:4a:f9:44:d5:cd:76:54:fc:de:c8: 25:1c:20:8d:73:e1:e6:2f:b7:af:84:83:47:45:1b:4a:c1:80: 64:5a:25:a4:e6:27:66:55:ac:a1:a0:56:5b:2c:97:44:96:cf: 9a:67:9d:7e:18:f9:c5:30:52:17:7d:14:9e:f6:da:ad:4a:26: cb:b6:9f:20:37:38:d8:d1:ba:06:97:56:fd:c2:97:26:4c:be: ae:25:1d:ce:3e:14:c0:d2:25:60:cd:6e:bc:5a:94:d6:59:49: 32:5d:57:13:dd:93:87:0e:b4:c9:da:0b:3b:3a:b0:c4:a8:89: e5:d8:80:54:9c:f6:3d:ae:f3:f0:46:15:ff:2c:14:46:6a:cf: 5f:68:90:97:b1:4b:1d:74:33:96:1c:62:f4:b2:d6:48:09:3d: 75:3e:2a:ab:2e:d0:f3:d8:0c:c2:9f:ba:8c:da:a5:ae:51:0e: 0b:f4:05:f0:18:ac:2b:7e:8c:63:0d:85:1f:84:95:2c:d8:0f: f0:aa:eb:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9sgOtmBsSB0crQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk ZmEzZGE2ZjMtZDY2ZC00NWNiLWEzNjktMTQ4OTRmZmYxNzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvnT30MzlRC2gUF30BRjm0b5fTBM+muFUsCU z8slDGOy8VvHJTwuC9QrWvBJikUaL5dURCfD8z+ab8Eayk8pZTum+pGJs3/R9o4X qA4yNG36c1fSKt+WNOZ50UfMCkIoaKRTMo7aAUeX7mO3CZiucQyim0ryf3dp6qNr 1c0j2+A3g7OWgGTChkZDvTBtVjymlaScAXLqTXRn7Nx3xjdg0kjhFF3R7aaQoufx rh41u0mIlwikfRMWIv7v7D5va1pmBchYWMOrywPt9ewaNodKwBgB5KBRXR9Oy3FC UvgrNQJh3bHgtKQlDjVh2K4sUvdkIQMpTwe2mfqCBnHYZwFjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwSXIgbNhZQQ4OrXvnREnIfP2+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGU1MzhlNjQtMmJmOC0z ZGExLTk0MzgtNjI1ZTQ1MDg0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFkS90xqo00Fq0mEyoukVUvv6r87/9F6xdXuqdI5JWDMdSMBazLdNpRm BZ8RdoYkQ5HsaXEsCMZfpzbqnxcgSvlE1c12VPzeyCUcII1z4eYvt6+Eg0dFG0rB gGRaJaTmJ2ZVrKGgVlssl0SWz5pnnX4Y+cUwUhd9FJ722q1KJsu2nyA3ONjRugaX Vv3ClyZMvq4lHc4+FMDSJWDNbrxalNZZSTJdVxPdk4cOtMnaCzs6sMSoieXYgFSc 9j2u8/BGFf8sFEZqz19okJexSx10M5YcYvSy1kgJPXU+Kqsu0PPYDMKfuozapa5R Dgv0BfAYrCt+jGMNhR+ElSzYD/Cq65I= -----END CERTIFICATE-----Generated at Mon Mar 2 07:32:00 2026 by rpki-client