$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa File: 8e538e64-2bf8-3da1-9438-625e450840da.roa (raw, json) Hash identifier: 2/xoGuOj6XlFlQEW//jMqDMv5Ln4XCJ1DF0QZSZgQPY= Subject key identifier: 22:D7:07:3F:4F:01:AF:FC:26:D1:58:19:F6:F4:F5:34:00:46:D0:3D Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584F20F7C2F45C31013976F09D80 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 15204 IP address blocks: 66.6.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c2:f4:5c:31:01:39:76:f0:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=ba2a9e76-3cd7-4d88-8bbd-6e7d11b3104b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6b:d8:18:c1:ce:76:9d:63:5d:48:b9:a1:15: 3d:2d:51:4a:16:29:f6:98:3d:9c:01:22:48:00:85: df:5f:02:95:00:c9:4b:ca:7f:7c:79:7f:74:01:08: 42:f4:25:a0:61:5f:3b:a3:c9:f5:c3:75:e9:03:02: 49:95:b1:29:6c:04:fd:9a:c7:55:0c:ba:66:28:4c: 34:df:1a:94:8a:2d:20:89:09:d5:46:4e:72:5a:80: 75:88:bb:58:51:41:b1:a7:65:77:68:b3:d5:45:6a: f3:f3:80:39:bf:f6:81:76:e4:f9:26:c2:74:fe:c7: 56:1a:e9:31:f9:2c:89:a4:7c:39:d5:44:29:5f:9f: 70:91:d8:86:9d:18:d4:55:a9:54:c6:c1:6f:71:88: 4a:5c:e0:c3:e1:c3:b8:d3:1e:1d:47:54:8b:bc:b2: 6b:6f:b5:62:89:47:b1:e5:bc:4c:c2:25:7c:47:47: 29:6a:a5:02:29:85:74:35:01:59:01:0c:26:db:59: 92:3a:14:93:2b:bf:08:02:75:40:b1:86:c8:b8:4c: c4:25:af:bd:40:20:c0:1e:5f:fc:1f:6d:cd:77:36: f9:f7:12:e4:d4:8d:3e:d4:5d:ff:e7:a3:d6:d1:8f: d4:19:57:39:f8:07:7f:d7:c3:e9:1a:b8:02:9f:b5: 89:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D7:07:3F:4F:01:AF:FC:26:D1:58:19:F6:F4:F5:34:00:46:D0:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:3b:87:0e:36:91:3e:4d:c3:13:72:7a:1f:5e:30:76:2c:bf: 0c:b5:a8:46:49:c2:f4:f8:e8:26:95:de:12:a3:61:67:d8:30: a5:c3:fb:0a:06:50:46:8c:47:bf:ca:95:58:f2:06:59:98:e4: 00:cc:01:11:32:09:7b:37:44:a4:9f:60:c1:55:b7:27:e4:b4: ea:2d:de:68:ae:43:90:de:a3:19:90:f6:f9:02:35:ba:94:b6: ae:60:51:8b:1a:4c:39:48:3b:78:88:1b:88:d1:91:81:e1:e9: 9e:59:a7:db:9e:83:41:a7:82:4e:f1:47:78:c8:32:b2:31:ca: 09:2e:f4:d4:30:52:d5:9a:e8:68:74:64:c8:50:78:f6:c3:c0: 31:95:ff:8c:39:a4:c1:61:74:a5:12:46:91:90:23:0d:32:2c: cd:45:be:8b:3c:83:f1:2c:e8:3e:cf:1c:38:41:46:82:b2:ec: d3:55:8e:39:6a:8b:fb:b6:30:78:b8:ef:14:cf:4c:81:d4:17: 2a:59:fe:29:0e:d2:aa:53:01:4e:12:b5:c6:04:e3:f1:2b:c4: 3a:01:23:c5:6f:ea:74:87:fa:c4:ed:cf:34:ba:a7:cf:50:b6: 0b:ab:22:7f:6f:1d:a3:05:06:c1:dd:97:a2:bb:06:d2:eb:81: f7:8d:05:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98L0XDEBOXbwnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YmEyYTllNzYtM2NkNy00ZDg4LThiYmQtNmU3ZDExYjMxMDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmvYGMHOdp1jXUi5oRU9LVFKFin2mD2cASJI AIXfXwKVAMlLyn98eX90AQhC9CWgYV87o8n1w3XpAwJJlbEpbAT9msdVDLpmKEw0 3xqUii0giQnVRk5yWoB1iLtYUUGxp2V3aLPVRWrz84A5v/aBduT5JsJ0/sdWGukx +SyJpHw51UQpX59wkdiGnRjUValUxsFvcYhKXODD4cO40x4dR1SLvLJrb7ViiUex 5bxMwiV8R0cpaqUCKYV0NQFZAQwm21mSOhSTK78IAnVAsYbIuEzEJa+9QCDAHl/8 H23Ndzb59xLk1I0+1F3/56PW0Y/UGVc5+Ad/18PpGrgCn7WJTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLXBz9PAa/8JtFYGfb09TQARtA9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGU1MzhlNjQtMmJmOC0z ZGExLTk0MzgtNjI1ZTQ1MDg0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAY7hw42kT5NwxNyeh9eMHYsvwy1qEZJwvT46CaV3hKjYWfYMKXD+woG UEaMR7/KlVjyBlmY5ADMAREyCXs3RKSfYMFVtyfktOot3miuQ5DeoxmQ9vkCNbqU tq5gUYsaTDlIO3iIG4jRkYHh6Z5Zp9ueg0Gngk7xR3jIMrIxygku9NQwUtWa6Gh0 ZMhQePbDwDGV/4w5pMFhdKUSRpGQIw0yLM1Fvos8g/Es6D7PHDhBRoKy7NNVjjlq i/u2MHi47xTPTIHUFypZ/ikO0qpTAU4StcYE4/ErxDoBI8Vv6nSH+sTtzzS6p89Q tgurIn9vHaMFBsHdl6K7BtLrgfeNBck= -----END CERTIFICATE-----Generated at Tue Sep 22 09:56:42 2026 by rpki-client