$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa File: 8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa (raw, json) Hash identifier: kOQli4UOTrF+10y6feq8vEyrMYrvNfWBJmVZTXdcIPc= Subject key identifier: 38:AD:DF:35:A3:ED:24:FC:98:AD:75:20:E0:8C:F2:8C:7C:5B:87:9E Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584E0C95D1A837382EE75364AF00 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa Signing time: Wed 03 Jun 2026 13:00:05 +0000 ROA not before: Wed 03 Jun 2026 13:00:05 +0000 ROA not after: Tue 01 Sep 2026 13:00:05 +0000 asID: 12684 IP address blocks: 66.133.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:95:d1:a8:37:38:2e:e7:53:64:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Jun 3 13:00:05 2026 GMT Not After : Sep 1 13:00:05 2026 GMT Subject: CN=213f05d4-90f2-4039-972c-4d37b32aafff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:80:e2:0b:05:b9:84:9e:09:fe:50:df:cc: ed:17:05:88:c0:31:5a:b4:78:ba:ba:97:2a:7f:55: c8:34:89:87:29:69:0c:3b:b6:3b:18:59:6e:07:25: e9:f3:e7:bf:fc:35:72:ef:f8:d1:cc:27:61:6e:c4: 90:97:20:85:e9:12:6a:eb:58:6f:5e:a2:71:1e:19: dc:56:7f:65:31:5b:fa:46:53:74:cd:78:97:de:b4: 6b:31:3d:db:fd:1c:8b:52:91:8f:e1:e0:0b:e2:57: 24:98:f4:2a:be:dc:ad:6c:e5:07:90:8f:90:a0:89: 85:07:f4:b4:88:6e:e1:e6:55:4c:1c:e2:15:7c:28: 42:d9:22:9e:f2:d4:0c:38:cc:b2:3a:2e:54:2f:8d: 4f:0b:3b:88:a2:c2:cc:f6:a3:9e:25:21:0f:17:a4: 94:fe:86:a6:ff:d8:2f:96:01:65:94:c9:b3:db:55: 37:ce:17:4f:e2:f2:3e:00:81:42:9d:f6:4a:b8:65: f9:ac:63:07:df:49:75:25:3b:27:91:d4:e1:58:8b: 61:98:6e:5a:f9:05:07:b5:28:6b:0f:5c:aa:7f:cd: cb:c7:f4:c0:52:1f:46:7d:fb:a3:7a:57:83:31:4e: 9e:f2:92:3a:68:11:32:a4:51:29:a9:34:9b:c2:3d: b9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AD:DF:35:A3:ED:24:FC:98:AD:75:20:E0:8C:F2:8C:7C:5B:87:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dc:c7:c5:ce:f1:b5:6f:89:2c:8c:1e:8c:ca:1b:88:e0:0f: 20:28:1e:2e:8a:a2:db:8a:40:80:65:1d:b5:d8:7b:44:a5:8f: 4d:89:97:88:3c:fb:9d:88:64:85:4c:6e:7c:70:90:6e:b5:15: bd:bf:2d:db:54:17:ea:b4:90:d7:c8:49:1a:06:43:cf:dd:d8: b2:41:75:8a:43:72:33:e6:d5:8c:32:2d:99:37:24:7d:54:a8: 73:49:f4:8c:11:2c:1a:b8:07:91:f7:07:d3:89:b0:44:c3:da: bb:f0:93:55:f4:d1:6f:67:14:c7:f5:1f:cb:bd:b7:59:47:fd: 41:fb:16:5d:13:9c:fa:0f:3a:67:b2:ab:29:b3:3e:89:00:4e: 8a:e5:ce:1e:e4:ed:78:81:54:7f:91:36:55:7c:03:de:94:ef: ee:3f:20:e8:40:c1:80:e0:db:0b:4c:b7:c2:5e:fc:47:23:41: c1:42:22:8c:34:d8:2e:18:7e:f6:46:1f:08:66:44:74:6d:e0: 60:46:fb:76:ea:97:3d:80:09:ed:c5:1f:83:ed:8c:97:eb:c6: 46:52:15:4d:96:ec:04:e4:74:77:aa:6b:32:47:51:7b:05:c6: 4c:53:3e:0b:c5:71:31:32:68:14:4d:0a:72:93:77:35:47:dc: 30:6e:d0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MldGoNzgu51NkrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDYwMzEzMDAwNVoXDTI2MDkwMTEzMDAwNVowLzEtMCsGA1UEAxMk MjEzZjA1ZDQtOTBmMi00MDM5LTk3MmMtNGQzN2IzMmFhZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMyA4gsFuYSeCf5Q38ztFwWIwDFatHi6upcq f1XINImHKWkMO7Y7GFluByXp8+e//DVy7/jRzCdhbsSQlyCF6RJq61hvXqJxHhnc Vn9lMVv6RlN0zXiX3rRrMT3b/RyLUpGP4eAL4lckmPQqvtytbOUHkI+QoImFB/S0 iG7h5lVMHOIVfChC2SKe8tQMOMyyOi5UL41PCzuIosLM9qOeJSEPF6SU/oam/9gv lgFllMmz21U3zhdP4vI+AIFCnfZKuGX5rGMH30l1JTsnkdThWIthmG5a+QUHtShr D1yqf83Lx/TAUh9GffujeleDMU6e8pI6aBEypFEpqTSbwj25NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDit3zWj7ST8mK11IOCM8ox8W4eeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvOGExMDdkMGUtZGFjZi0z ZjI0LWFmM2ItMGQ2MDYzYjg3YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvcx8XO8bVviSyMHozKG4jgDyAoHi6KotuKQIBlHbXYe0Slj02Jl4g8 +52IZIVMbnxwkG61Fb2/LdtUF+q0kNfISRoGQ8/d2LJBdYpDcjPm1YwyLZk3JH1U qHNJ9IwRLBq4B5H3B9OJsETD2rvwk1X00W9nFMf1H8u9t1lH/UH7Fl0TnPoPOmey qymzPokATorlzh7k7XiBVH+RNlV8A96U7+4/IOhAwYDg2wtMt8Je/EcjQcFCIow0 2C4YfvZGHwhmRHRt4GBG+3bqlz2ACe3FH4PtjJfrxkZSFU2W7ATkdHeqazJHUXsF xkxTPgvFcTEyaBRNCnKTdzVH3DBu0JM= -----END CERTIFICATE-----Generated at Sat Jun 6 12:05:24 2026 by rpki-client