$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa File: 01e40dda-5eab-3214-9c08-7fdc40175580.roa (raw, json) Hash identifier: f7zdXxV3bUtb9RGoC0/fWLr0jLk7rAZDs2VqBQJry/k= Subject key identifier: F9:A2:EE:49:5A:66:58:A5:A1:7C:3A:FF:7C:1E:EA:0C:81:F2:A5:28 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584E0865F3F8E3D064123B96BE80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa Signing time: Tue 02 Jun 2026 01:00:10 +0000 ROA not before: Tue 02 Jun 2026 01:00:10 +0000 ROA not after: Mon 31 Aug 2026 01:00:10 +0000 asID: 15169 IP address blocks: 66.102.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:08:65:f3:f8:e3:d0:64:12:3b:96:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Jun 2 01:00:10 2026 GMT Not After : Aug 31 01:00:10 2026 GMT Subject: CN=eafeeccc-b9cb-49f3-b1ee-4f85267efb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:2b:d0:8e:9b:f4:3b:c3:48:63:b6:ea:b2:42: 81:a7:bd:ef:79:2a:87:16:cd:c5:d3:5a:df:56:eb: 33:14:04:61:55:0b:e5:99:4d:61:49:2c:eb:ca:8b: 5c:8f:15:1e:d5:7b:07:aa:71:9b:8d:68:f4:3c:33: fe:a0:d1:7f:68:bf:5b:fe:6c:00:b8:a5:cd:d7:57: 5a:a9:e9:5f:da:ee:9c:d6:77:a6:c5:eb:a1:11:e8: a3:e6:fe:10:bd:14:cd:46:4b:b5:0e:91:e7:57:85: 66:a9:ef:49:0b:1f:03:94:bb:0e:aa:da:01:cf:0c: eb:16:7a:07:67:f1:47:4f:8a:70:d3:da:fc:82:22: 23:de:7f:eb:a8:14:46:13:ef:e0:cf:40:e7:6c:4a: 5c:86:ba:9b:3b:53:f2:67:c7:07:dd:0b:d7:8f:a0: 9d:af:16:85:7b:51:1e:23:08:45:d9:dc:f2:72:56: 1d:81:a4:0a:19:7d:7c:39:1b:eb:39:e5:12:68:79: 53:24:e8:97:b7:a0:25:2f:59:8a:8a:60:53:ec:31: 66:93:fd:53:c9:29:48:f6:e0:64:75:7c:23:1a:78: da:3b:74:0d:4c:19:3b:bc:cc:cc:9d:86:0c:cd:22: b3:37:02:81:fc:2c:df:29:6c:bb:46:21:a2:c6:06: f1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A2:EE:49:5A:66:58:A5:A1:7C:3A:FF:7C:1E:EA:0C:81:F2:A5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/01e40dda-5eab-3214-9c08-7fdc40175580.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 66.102.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:0a:36:bc:57:95:aa:08:48:b0:b6:00:d0:a8:65:1c:9c:47: 00:82:06:d5:e6:c5:6c:da:ce:9e:72:0e:07:82:35:24:5a:e7: 11:da:da:93:0e:c9:80:3e:a1:c7:13:8e:0b:3c:79:50:be:d5: 91:06:3c:7a:9c:49:b0:16:bc:13:26:bc:ce:1c:af:de:5a:70: a4:7a:2b:3f:66:30:fc:21:60:46:f2:45:98:50:eb:62:fa:72: ab:44:a6:4f:08:be:0e:5c:23:98:ec:2c:6c:fe:8d:46:53:63: 61:31:31:55:1a:12:28:ad:fe:5e:ad:94:b1:fe:ad:2c:e1:4e: d0:06:d6:11:63:21:ca:4d:ba:3d:b4:78:67:91:23:55:c7:3c: 73:67:e7:76:1a:2b:05:a2:49:ed:de:8c:f6:f0:ff:35:43:3c: fd:88:2b:2e:a6:f9:94:2c:8b:3a:64:87:70:bd:c1:2b:bc:25: 40:46:35:7c:42:30:06:06:06:0b:7b:4d:39:d4:57:0c:26:b0: 57:b9:35:e4:7e:6c:9a:7f:c2:3a:7f:0b:67:32:37:10:01:70: 9b:52:a3:57:b5:27:84:e8:3b:e8:69:84:ab:e9:66:09:e4:da: f0:a2:32:27:b5:98:86:49:5c:e9:ab:27:58:b7:e1:c9:e1:1c: 04:1b:bd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4IZfP449BkEjuWvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDYwMjAxMDAxMFoXDTI2MDgzMTAxMDAxMFowLzEtMCsGA1UEAxMk ZWFmZWVjY2MtYjljYi00OWYzLWIxZWUtNGY4NTI2N2VmYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCvQjpv0O8NIY7bqskKBp73veSqHFs3F01rf VuszFARhVQvlmU1hSSzryotcjxUe1XsHqnGbjWj0PDP+oNF/aL9b/mwAuKXN11da qelf2u6c1nemxeuhEeij5v4QvRTNRku1DpHnV4Vmqe9JCx8DlLsOqtoBzwzrFnoH Z/FHT4pw09r8giIj3n/rqBRGE+/gz0DnbEpchrqbO1PyZ8cH3QvXj6CdrxaFe1Ee IwhF2dzyclYdgaQKGX18ORvrOeUSaHlTJOiXt6AlL1mKimBT7DFmk/1TySlI9uBk dXwjGnjaO3QNTBk7vMzMnYYMzSKzNwKB/CzfKWy7RiGixgbx3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmi7klaZliloXw6/3we6gyB8qUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMDFlNDBkZGEtNWVhYi0z MjE0LTljMDgtN2ZkYzQwMTc1NTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQmYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkKNrxXlaoISLC2ANCoZRycRwCCBtXmxWzazp5yDgeCNSRa5xHa2pMO yYA+occTjgs8eVC+1ZEGPHqcSbAWvBMmvM4cr95acKR6Kz9mMPwhYEbyRZhQ62L6 cqtEpk8Ivg5cI5jsLGz+jUZTY2ExMVUaEiit/l6tlLH+rSzhTtAG1hFjIcpNuj20 eGeRI1XHPHNn53YaKwWiSe3ejPbw/zVDPP2IKy6m+ZQsizpkh3C9wSu8JUBGNXxC MAYGBgt7TTnUVwwmsFe5NeR+bJp/wjp/C2cyNxABcJtSo1e1J4ToO+hphKvpZgnk 2vCiMie1mIZJXOmrJ1i34cnhHAQbvcg= -----END CERTIFICATE-----Generated at Sat Jun 13 09:20:42 2026 by rpki-client