$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/a7e2cd99-4b23-3e49-b118-7fc49e3cd78c.roa File: a7e2cd99-4b23-3e49-b118-7fc49e3cd78c.roa (raw, json) Hash identifier: 6rScjwZmmNkAP4gyxOcZ5p3qSM9lJdS4oGYV+cMJ/3w= Subject key identifier: BC:50:13:FB:29:51:06:BA:DC:FF:D0:56:5B:65:96:81:7F:12:C9:98 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584EAFE6E6268DBE6CF30094AF00 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/a7e2cd99-4b23-3e49-b118-7fc49e3cd78c.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 12684 IP address blocks: 66.133.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:e6:26:8d:be:6c:f3:00:94:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=4e98f89f-8cc0-4bb9-8989-d3542cf0f79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e3:d7:52:e3:45:78:4c:47:75:83:bf:eb:7e: a1:28:27:25:1b:54:ca:1b:8c:84:e1:1b:1a:85:c0: 36:b0:ef:59:8b:c2:c9:ab:d1:9d:ee:8a:e2:8a:e5: 62:30:b9:74:7e:52:1b:f2:e4:73:fe:56:69:9c:70: 16:15:69:a6:32:e9:04:31:5c:c5:be:17:70:d4:ce: 72:a1:20:8c:e0:4b:25:99:7f:a9:b2:64:22:33:26: 6f:75:25:9a:91:a4:bb:15:7c:36:54:f4:01:78:95: ef:cd:9f:90:8a:93:35:b7:fd:f2:c0:5f:b6:f5:e1: dc:b0:d7:9f:a1:2c:a3:0e:95:9a:85:c2:3e:ca:66: 7b:ef:2c:bb:c0:f1:d8:9b:f6:cf:cb:7c:af:e6:33: 82:7e:91:0a:04:0a:44:64:38:26:2f:0a:33:eb:6c: 25:23:4a:94:f5:47:5d:6a:55:d9:a7:6d:2a:c9:84: 62:c3:31:ae:6a:ca:55:da:25:07:3c:57:d1:9b:50: bf:cc:9e:a0:ef:ef:fd:88:f2:a9:de:72:a7:5b:65: d6:cf:60:e4:92:3f:15:97:fb:40:77:8b:ab:86:00: a0:66:97:ef:0c:d1:94:4e:ca:ce:4f:21:b9:54:4b: be:a0:10:0b:a5:62:4c:0a:1e:f9:25:d6:e2:f8:9a: 0f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:50:13:FB:29:51:06:BA:DC:FF:D0:56:5B:65:96:81:7F:12:C9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/a7e2cd99-4b23-3e49-b118-7fc49e3cd78c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:c3:04:74:5a:b0:ce:3a:f5:8d:f3:3c:e5:94:a3:2d:cd:42: d4:52:26:8b:cf:bf:8c:86:37:70:c7:7b:b6:79:18:49:3f:59: 36:b7:7a:45:f7:a1:47:4a:03:93:eb:62:30:aa:b7:e8:e5:bb: 8f:cb:bd:cd:2b:fd:b3:9d:02:93:d3:e0:12:99:cd:a2:5c:f1: 57:41:8c:e7:ca:1b:10:e3:14:90:b6:6e:dd:08:f0:b8:c4:06: 6f:ed:f0:fc:7a:25:ee:0f:f6:0d:26:de:f1:4e:56:2c:d9:e6: 62:7f:b5:f0:7b:ca:06:5d:14:18:46:c5:0c:93:7d:24:6f:53: 36:c1:63:b9:eb:8e:2c:ba:ba:62:cf:fe:63:de:de:0c:9e:83: ae:98:2a:c2:c3:ba:86:44:d1:30:28:91:56:e4:22:68:92:4a: e4:84:ef:de:ce:8e:ab:0b:40:30:bb:07:92:83:35:1b:bb:f1: 43:bb:98:da:6b:53:ca:ef:17:5b:29:76:b7:d2:50:d6:f7:74: 58:d3:7c:cd:c6:fd:b2:aa:a0:da:f2:d3:67:95:d5:33:41:12: ed:d2:0a:5b:40:7f:d7:aa:0b:c9:ec:cb:25:30:1d:91:da:17: 52:f7:e2:c9:78:2b:67:99:26:74:4e:63:9d:33:54:18:ef:9b: 09:65:cb:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5uYmjb5s8wCUrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk NGU5OGY4OWYtOGNjMC00YmI5LTg5ODktZDM1NDJjZjBmNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOPXUuNFeExHdYO/636hKCclG1TKG4yE4Rsa hcA2sO9Zi8LJq9Gd7oriiuViMLl0flIb8uRz/lZpnHAWFWmmMukEMVzFvhdw1M5y oSCM4EslmX+psmQiMyZvdSWakaS7FXw2VPQBeJXvzZ+QipM1t/3ywF+29eHcsNef oSyjDpWahcI+ymZ77yy7wPHYm/bPy3yv5jOCfpEKBApEZDgmLwoz62wlI0qU9Udd alXZp20qyYRiwzGuaspV2iUHPFfRm1C/zJ6g7+/9iPKp3nKnW2XWz2Dkkj8Vl/tA d4urhgCgZpfvDNGUTsrOTyG5VEu+oBALpWJMCh75Jdbi+JoPzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxQE/spUQa63P/QVltlloF/EsmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvYTdlMmNkOTktNGIyMy0z ZTQ5LWIxMTgtN2ZjNDllM2NkNzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDDBHRasM469Y3zPOWUoy3NQtRSJovPv4yGN3DHe7Z5GEk/WTa3ekX3 oUdKA5PrYjCqt+jlu4/Lvc0r/bOdApPT4BKZzaJc8VdBjOfKGxDjFJC2bt0I8LjE Bm/t8Px6Je4P9g0m3vFOVizZ5mJ/tfB7ygZdFBhGxQyTfSRvUzbBY7nrjiy6umLP /mPe3gyeg66YKsLDuoZE0TAokVbkImiSSuSE797OjqsLQDC7B5KDNRu78UO7mNpr U8rvF1spdrfSUNb3dFjTfM3G/bKqoNry02eV1TNBEu3SCltAf9eqC8nsyyUwHZHa F1L34sl4K2eZJnROY50zVBjvmwlly5U= -----END CERTIFICATE-----Generated at Sat Sep 5 05:26:24 2026 by rpki-client