$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/61b68676-99e9-3931-ae67-c5a72bfe3647.roa File: 61b68676-99e9-3931-ae67-c5a72bfe3647.roa (raw, json) Hash identifier: S61aL4TP0DxdEuxWSEEW6qqOSI7Co2dUSiVW5+WzKRo= Subject key identifier: 87:18:B8:A3:03:02:BF:CC:72:BD:5C:C2:53:2D:61:F2:91:44:66:BE Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584EAFE6E6127BD5E2184237DC00 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/61b68676-99e9-3931-ae67-c5a72bfe3647.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 12684 IP address blocks: 66.133.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:e6:12:7b:d5:e2:18:42:37:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=3a4918f5-735a-4ced-8313-74df0ef4e38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b8:03:0c:2c:bc:cd:f6:e0:55:14:03:56:a8: 80:da:37:93:82:f6:bf:0a:ee:d2:ce:fc:fc:7b:7b: fc:67:c3:a1:e1:4c:72:ea:b0:0d:29:99:7d:5e:cb: 1d:4b:8e:64:12:85:4d:7b:b1:2e:c6:0d:b0:07:92: 14:00:01:4b:1a:c8:99:d3:ff:a9:20:e6:46:60:30: 03:e3:3d:20:b0:cd:3f:1c:39:2c:25:b1:c8:c5:c8: 93:25:32:a5:9e:05:f8:85:3a:e0:55:36:f9:56:c4: c0:cf:52:bd:c0:59:2a:31:f1:82:6b:73:ee:35:31: 32:60:4d:78:14:ba:ba:6c:de:bd:c4:a4:a6:1e:1a: 73:95:fa:98:21:07:c9:6b:e1:d9:03:df:93:c5:d6: cc:c5:7f:52:c6:bd:3f:ec:2e:43:9f:dd:9c:1c:e6: ce:6e:ca:9f:35:a2:43:4f:14:da:3a:e8:e6:22:69: c9:47:d7:da:6e:c7:af:46:4a:b9:4e:a7:19:b8:4a: 73:2c:6f:1f:f9:56:60:91:06:d9:ff:a1:6f:73:49: 79:60:ce:9c:4d:1e:0b:01:66:4a:7b:49:09:5a:01: 75:8f:1a:71:c8:68:bf:25:49:ad:86:ea:ee:04:be: 63:0c:29:25:f9:f5:40:b7:77:ec:1a:24:a3:7f:86: a0:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:18:B8:A3:03:02:BF:CC:72:BD:5C:C2:53:2D:61:F2:91:44:66:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/61b68676-99e9-3931-ae67-c5a72bfe3647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d1:e8:89:0f:46:45:12:6f:c1:e5:b4:cb:e1:3e:a3:85:0d: 96:ed:d0:34:e3:01:18:a9:71:91:bd:61:fd:a8:91:ad:1e:64: fb:85:39:e7:f1:c3:d1:0e:54:ea:6f:26:69:03:4e:7f:30:97: e9:28:6f:a3:5c:5f:0d:fb:bc:3b:fb:70:64:0c:72:a8:32:97: 52:7d:e3:4b:a8:2f:d0:76:c4:d2:15:b3:84:07:04:64:46:6b: b4:5b:cc:6e:fa:f1:cf:06:f8:4b:7a:d8:96:0a:e4:68:c4:8a: 4e:22:c6:7a:71:1a:a7:1f:f5:62:56:d5:ad:df:e7:77:c5:28: a0:9c:fd:83:53:d4:1b:57:fd:c6:fe:c7:34:15:f9:21:41:fb: a4:0a:bd:03:c9:0f:02:c0:13:f0:c3:d8:82:13:6d:98:1e:05: 79:dd:75:b4:bd:91:70:ab:bc:db:33:38:9c:bf:4b:2b:67:fd: 70:7e:b5:ee:aa:ac:a6:c7:cc:c5:d0:de:d5:e2:b2:1a:4a:31: df:7b:b5:b7:9e:0f:81:7f:b6:27:d5:e8:70:42:d4:a2:a1:cd: 0d:df:ba:a5:e2:43:4e:09:41:c9:c5:17:6b:0a:e3:cf:74:8f: a8:25:4c:59:0c:f8:a5:2f:34:2b:42:21:82:84:3e:f7:fd:d8: 85:2f:05:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5uYSe9XiGEI33AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk M2E0OTE4ZjUtNzM1YS00Y2VkLTgzMTMtNzRkZjBlZjRlMzhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbgDDCy8zfbgVRQDVqiA2jeTgva/Cu7Szvz8 e3v8Z8Oh4Uxy6rANKZl9XssdS45kEoVNe7Euxg2wB5IUAAFLGsiZ0/+pIOZGYDAD 4z0gsM0/HDksJbHIxciTJTKlngX4hTrgVTb5VsTAz1K9wFkqMfGCa3PuNTEyYE14 FLq6bN69xKSmHhpzlfqYIQfJa+HZA9+TxdbMxX9Sxr0/7C5Dn92cHObObsqfNaJD TxTaOujmImnJR9fabsevRkq5TqcZuEpzLG8f+VZgkQbZ/6Fvc0l5YM6cTR4LAWZK e0kJWgF1jxpxyGi/JUmthuruBL5jDCkl+fVAt3fsGiSjf4agIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcYuKMDAr/Mcr1cwlMtYfKRRGa+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvNjFiNjg2NzYtOTllOS0z OTMxLWFlNjctYzVhNzJiZmUzNjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvR6IkPRkUSb8HltMvhPqOFDZbt0DTjARipcZG9Yf2oka0eZPuFOefx w9EOVOpvJmkDTn8wl+kob6NcXw37vDv7cGQMcqgyl1J940uoL9B2xNIVs4QHBGRG a7RbzG768c8G+Et62JYK5GjEik4ixnpxGqcf9WJW1a3f53fFKKCc/YNT1BtX/cb+ xzQV+SFB+6QKvQPJDwLAE/DD2IITbZgeBXnddbS9kXCrvNszOJy/Sytn/XB+te6q rKbHzMXQ3tXishpKMd97tbeeD4F/tifV6HBC1KKhzQ3fuqXiQ04JQcnFF2sK4890 j6glTFkM+KUvNCtCIYKEPvf92IUvBTQ= -----END CERTIFICATE-----Generated at Sat Sep 5 08:58:51 2026 by rpki-client