$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa File: 8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa (raw, json) Hash identifier: xqR/1vDKtn1+bPs8qVqXQJNSjmjJUwKDeHfzbFnqYT8= Subject key identifier: 3A:05:3A:0C:1B:1F:E6:1E:90:6A:AF:97:91:AC:74:18:60:DD:F4:80 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584EAE81BA27B9D5D9FC970E2680 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 12684 IP address blocks: 66.133.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:ba:27:b9:d5:d9:fc:97:0e:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=59fe5208-1d99-4e9e-8288-92a8aa653649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c7:f6:6b:f6:20:b6:a3:7b:0e:4f:d6:dc:ee: c6:a0:f6:37:84:0d:9a:9c:7e:a7:8b:5c:ff:c5:08: a5:22:52:99:a6:09:58:6b:80:c0:4d:20:74:14:e8: ff:6a:dd:ce:e0:15:2e:bd:7d:3b:93:e3:66:a9:02: 14:a6:af:33:3e:0b:3f:52:eb:e1:78:41:04:91:df: 32:ca:e4:69:74:b6:57:b5:7d:7f:c3:b5:fc:53:e2: 56:86:ed:66:03:87:65:6f:16:9d:0c:8d:a5:60:f5: f9:16:6c:4e:26:07:35:af:af:6e:6a:19:a4:41:f1: 5e:72:a7:7a:02:ee:9a:0d:61:ea:bf:68:a9:fa:87: 46:4a:d2:97:f8:dc:5e:82:a6:86:43:46:e4:9c:5e: be:36:74:f7:6b:d0:cf:f1:05:58:07:5d:1a:5f:45: a4:46:82:5b:0c:cb:8a:5b:88:02:27:5f:f0:b4:d3: 7d:e2:84:b0:a3:c4:43:c5:1f:3d:a5:68:35:b1:1f: cc:f7:35:94:33:d1:d9:f1:3c:d8:34:a7:65:6e:3b: 3e:84:12:32:1c:79:05:0c:8a:cc:e7:32:3b:72:95: 6f:41:4c:05:87:6e:44:15:ad:d3:da:1b:81:71:3b: e4:13:e5:f2:0e:ea:a2:05:e9:b5:7e:98:cf:17:69: 7a:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:05:3A:0C:1B:1F:E6:1E:90:6A:AF:97:91:AC:74:18:60:DD:F4:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/8a107d0e-dacf-3f24-af3b-0d6063b87a1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:11:27:42:68:95:b2:4a:fc:a3:36:f5:de:fd:d2:38:08:2c: 3b:19:a4:e5:a8:1b:9a:23:13:71:3a:5e:a8:0b:ed:9c:a7:d5: a7:3a:2e:05:be:f9:01:24:f4:23:5a:4c:cf:30:6d:76:b9:53: f0:42:79:54:fc:53:7e:02:0d:58:a5:13:9f:76:d3:89:0c:07: 60:44:72:64:7e:e4:ac:d9:4a:6b:26:49:86:a4:83:cc:74:17: c7:37:d5:06:26:46:80:bf:db:14:92:ce:1f:fb:d5:3f:22:8e: ae:5e:13:44:88:21:97:61:54:77:fa:7e:54:d6:4f:9e:81:cc: 74:b8:a5:bf:d9:50:99:48:4b:d2:6b:46:d0:88:b9:75:fc:c9: ee:c7:0f:cd:ec:0d:ac:81:ac:6f:97:df:9f:8a:43:29:be:09: 29:fd:c8:ce:80:49:e6:44:bb:ea:68:f3:22:9a:39:c6:00:27: 8f:74:d6:1f:df:f4:1c:1a:04:f8:4e:f6:cf:c9:15:ae:d6:ed: 8b:41:26:e2:64:9b:a1:de:b1:64:8b:bf:b8:a0:0f:30:2e:b7: 93:bd:e0:a9:fe:ff:1c:15:23:2e:1c:ed:08:29:f1:e7:6e:2c: 51:5a:ad:65:f6:6d:1e:91:fc:05:6e:eb:09:f1:7c:68:4f:ec: 6c:2d:8b:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbonudXZ/JcOJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk NTlmZTUyMDgtMWQ5OS00ZTllLTgyODgtOTJhOGFhNjUzNjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMf2a/YgtqN7Dk/W3O7GoPY3hA2anH6ni1z/ xQilIlKZpglYa4DATSB0FOj/at3O4BUuvX07k+NmqQIUpq8zPgs/UuvheEEEkd8y yuRpdLZXtX1/w7X8U+JWhu1mA4dlbxadDI2lYPX5FmxOJgc1r69uahmkQfFecqd6 Au6aDWHqv2ip+odGStKX+NxegqaGQ0bknF6+NnT3a9DP8QVYB10aX0WkRoJbDMuK W4gCJ1/wtNN94oSwo8RDxR89pWg1sR/M9zWUM9HZ8TzYNKdlbjs+hBIyHHkFDIrM 5zI7cpVvQUwFh25EFa3T2huBcTvkE+XyDuqiBem1fpjPF2l6qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoFOgwbH+YekGqvl5GsdBhg3fSAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvOGExMDdkMGUtZGFjZi0z ZjI0LWFmM2ItMGQ2MDYzYjg3YTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQRJ0JolbJK/KM29d790jgILDsZpOWoG5ojE3E6XqgL7Zyn1ac6LgW+ +QEk9CNaTM8wbXa5U/BCeVT8U34CDVilE59204kMB2BEcmR+5KzZSmsmSYakg8x0 F8c31QYmRoC/2xSSzh/71T8ijq5eE0SIIZdhVHf6flTWT56BzHS4pb/ZUJlIS9Jr RtCIuXX8ye7HD83sDayBrG+X35+KQym+CSn9yM6ASeZEu+po8yKaOcYAJ4901h/f 9BwaBPhO9s/JFa7W7YtBJuJkm6HesWSLv7igDzAut5O94Kn+/xwVIy4c7Qgp8edu LFFarWX2bR6R/AVu6wnxfGhP7Gwti0k= -----END CERTIFICATE-----Generated at Sat Sep 5 05:26:21 2026 by rpki-client