$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa File: 8e538e64-2bf8-3da1-9438-625e450840da.roa (raw, json) Hash identifier: YBVJW/R7+0cr3dXGzXEYPgiSiINZLxPlbDfZCsCe8As= Subject key identifier: F3:A7:82:BD:91:BC:0E:3A:04:8B:67:E8:6C:FE:C5:E8:49:5F:F3:B0 Certificate issuer: /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Certificate serial: 010D0C9F4328584BAEC6FAE688B49C330053E500 Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 15204 IP address blocks: 66.6.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c6:fa:e6:88:b4:9c:33:00:53:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=bf563cc4-6d96-4da4-8aa8-f595417e5b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:8f:3e:56:a9:d6:1c:f0:84:d3:de:dc:c8: ae:d5:ed:27:14:17:0d:e9:e8:62:6d:75:c7:54:d6: f0:a6:f4:2a:f0:3b:b6:9b:63:a5:0d:17:a5:b0:12: 3c:b2:2b:b8:7c:08:1c:70:ad:06:73:ea:92:91:86: 06:f2:f1:0a:20:67:a5:d8:2b:6b:db:41:39:bf:d4: 2c:e8:20:01:c8:29:75:f1:d1:e5:da:67:ac:c3:cb: 80:e0:63:d4:f1:45:55:10:0a:df:da:b5:63:44:d8: 64:63:04:41:b8:16:7b:c6:d0:6d:aa:b0:cc:7a:1f: d1:05:b3:65:6f:c3:ab:bb:58:23:26:16:8a:79:f4: d9:a3:63:a5:60:cb:dd:37:da:f7:40:4a:a4:fa:b7: 68:92:38:27:f7:9a:10:74:09:c4:0e:cd:06:df:4e: 0d:ec:b8:2a:4b:b1:33:b3:cf:37:5a:fe:e1:fe:ff: 84:98:8f:9e:30:5b:a1:d9:d9:56:41:ab:1f:29:83: 01:73:c9:63:bc:08:a1:50:c8:13:8c:73:6e:d0:db: 03:bb:98:1a:6a:79:84:b8:c0:85:cb:1b:36:fb:72: 85:b0:3d:ab:61:e7:61:a5:ca:29:b8:b8:d5:68:2c: 3a:64:fe:ef:c8:a8:3e:b1:46:49:b9:19:16:70:f5: 1a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:A7:82:BD:91:BC:0E:3A:04:8B:67:E8:6C:FE:C5:E8:49:5F:F3:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8e538e64-2bf8-3da1-9438-625e450840da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl X509v3 Authority Key Identifier: keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer sbgp-ipAddrBlock: critical IPv4: 66.6.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:31:8d:37:4a:87:54:0f:0c:2a:4a:b1:10:fa:88:f8:68:eb: fb:ce:83:ac:bb:7f:d8:57:4b:78:8a:8e:89:a4:e3:81:4d:a2: e0:0f:a4:e1:4d:0b:91:a2:06:d0:fb:aa:f0:e5:0c:f6:b4:a7: 90:cb:99:74:f3:8e:c6:8c:48:60:07:2e:32:61:52:af:1d:af: 55:7f:2e:16:5a:ef:c9:20:94:b5:53:cd:24:f0:09:53:a3:a2: 8d:23:f5:2e:ea:45:50:5f:a1:d5:f5:76:c3:97:23:12:c7:2d: 4e:7d:79:e5:ce:f7:23:b3:ac:29:60:5d:17:ba:b1:fc:a5:b5: 0b:f8:28:99:34:d1:0f:8c:7d:b6:4f:be:9e:4f:85:50:a4:68: b1:21:a5:e2:33:6c:aa:12:64:0e:c1:b9:c1:d3:1b:51:ea:59: 7d:31:62:47:c0:b8:6a:4e:2f:b9:e0:1d:0b:d7:38:ca:ed:e8: de:86:0c:7d:5b:1f:9a:eb:52:1f:a3:bf:c2:a6:7f:1e:65:63: b8:b5:dd:49:80:ff:3e:90:c7:a4:1c:2b:03:af:f0:19:78:33: f6:93:5d:eb:2b:23:9c:d8:ca:c6:19:2f:91:74:69:78:0f:27: 13:ec:12:5d:da:28:31:5f:48:8e:ba:0b:46:ec:37:ec:46:bd: 3e:59:ec:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuuxvrmiLScMwBT5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4 MDM1MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk YmY1NjNjYzQtNmQ5Ni00ZGE0LThhYTgtZjU5NTQxN2U1Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohKPPlap1hzwhNPe3Miu1e0nFBcN6ehibXXH VNbwpvQq8Du2m2OlDRelsBI8siu4fAgccK0Gc+qSkYYG8vEKIGel2Ctr20E5v9Qs 6CAByCl18dHl2mesw8uA4GPU8UVVEArf2rVjRNhkYwRBuBZ7xtBtqrDMeh/RBbNl b8Oru1gjJhaKefTZo2OlYMvdN9r3QEqk+rdokjgn95oQdAnEDs0G304N7LgqS7Ez s883Wv7h/v+EmI+eMFuh2dlWQasfKYMBc8ljvAihUMgTjHNu0NsDu5gaanmEuMCF yxs2+3KFsD2rYedhpcopuLjVaCw6ZP7vyKg+sUZJuRkWcPUa4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOngr2RvA46BItn6Gz+xehJX/OwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvOGU1MzhlNjQtMmJmOC0z ZGExLTk0MzgtNjI1ZTQ1MDg0MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4 ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQgYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4xjTdKh1QPDCpKsRD6iPho6/vOg6y7f9hXS3iKjomk44FNouAPpOFN C5GiBtD7qvDlDPa0p5DLmXTzjsaMSGAHLjJhUq8dr1V/LhZa78kglLVTzSTwCVOj oo0j9S7qRVBfodX1dsOXIxLHLU59eeXO9yOzrClgXRe6sfyltQv4KJk00Q+MfbZP vp5PhVCkaLEhpeIzbKoSZA7BucHTG1HqWX0xYkfAuGpOL7ngHQvXOMrt6N6GDH1b H5rrUh+jv8Kmfx5lY7i13UmA/z6Qx6QcKwOv8Bl4M/aTXesrI5zYysYZL5F0aXgP JxPsEl3aKDFfSI66C0bsN+xGvT5Z7Ho= -----END CERTIFICATE-----Generated at Wed Nov 5 14:23:46 2025 by rpki-client