$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/aabb56d4-4b4e-3b6b-9752-10bc5a345bfb.roa File: aabb56d4-4b4e-3b6b-9752-10bc5a345bfb.roa (raw, json) Hash identifier: daQEKe+ng2a+IIfyBk1Qsrw20dwWWyl0y0wYbUdcd0Y= Subject key identifier: 99:12:F7:D9:A3:DF:D5:65:7F:5C:A6:99:6C:BD:0E:84:21:1F:23:BF Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584F506D4BDC1D462115D989CA20 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/aabb56d4-4b4e-3b6b-9752-10bc5a345bfb.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 12684 IP address blocks: 66.133.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:4b:dc:1d:46:21:15:d9:89:ca:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=5a8cae59-432c-40ed-b78e-2f5efc57538e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2f:0b:05:a1:1d:3a:a4:55:10:43:11:f3:f7: ca:13:f2:3e:fd:c6:d1:fc:0c:36:bc:94:e3:7b:1a: 09:2e:d2:f5:d2:9f:86:7f:f9:4c:8c:ed:38:b1:b9: 7e:96:33:44:de:6d:b9:b4:f7:d9:ad:7a:b1:6b:cc: 5a:d3:00:a7:44:05:52:a9:d9:d3:a6:b4:7d:00:82: 7e:23:b3:e5:1c:49:d7:68:e9:76:91:d3:f3:f7:7b: af:62:62:42:27:ec:27:7d:d8:8b:15:55:5c:c3:b9: 4a:e1:00:49:27:b0:83:d8:be:50:fc:24:c5:36:d1: 1f:83:12:98:08:98:f4:09:5b:8b:56:20:4d:70:62: f9:41:77:56:85:e9:94:33:e5:9d:d0:4d:fb:e2:98: 5e:97:d0:fb:d8:1a:c0:e2:71:77:c7:db:5c:3f:76: da:7b:c9:d3:51:64:e4:24:41:4a:fa:bc:d3:85:eb: cc:2b:2b:26:4f:c5:e7:5f:5e:f4:f9:b3:b7:87:83: c9:dc:30:26:15:09:c6:1c:9f:1d:4e:e0:59:a9:90: 6a:35:53:ac:61:d8:2f:5c:80:38:91:c2:96:ef:a6: df:c1:2d:90:47:f4:b2:df:8d:21:d0:48:05:e5:23: d2:44:81:9d:3c:83:e5:78:97:a7:b8:c8:8b:96:cc: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:12:F7:D9:A3:DF:D5:65:7F:5C:A6:99:6C:BD:0E:84:21:1F:23:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/aabb56d4-4b4e-3b6b-9752-10bc5a345bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:ce:7e:76:49:22:5b:d4:08:34:04:dd:e1:7f:a6:d4:1f:da: af:d6:3a:f0:60:f2:d5:ad:0c:dd:af:64:06:3a:52:03:76:80: 24:c0:6c:44:1e:67:1a:51:cc:bd:5c:0e:ba:b4:4f:55:a9:d5: bd:9e:7c:24:56:94:5c:25:26:f3:49:78:cf:55:e1:45:4b:dc: ca:2c:04:9a:99:55:53:d6:d6:2b:54:e3:d0:29:2c:7c:cd:85: 3f:ee:5d:a6:06:78:2e:c0:58:b4:16:ed:e6:96:1f:47:49:6a: 74:76:6d:16:6f:dc:f3:38:db:18:fd:7a:2f:e2:cc:59:a9:bf: 13:0b:4c:66:03:d9:34:f2:46:40:c5:94:7e:1d:f2:42:70:8b: 47:17:c4:a2:04:48:8c:d0:37:91:18:2e:4c:b3:f8:4d:26:96: 36:dd:f7:dd:bd:c9:e7:77:b8:2b:f3:1a:1e:a7:2c:18:b7:03: c7:2b:e2:6b:0a:0a:6a:c7:07:62:bc:00:dd:5c:6e:fa:86:06: 6e:36:88:75:42:6f:03:af:93:4b:f6:d6:11:8c:c2:95:3b:b5: 65:17:24:d6:d0:b2:07:93:8c:eb:a8:31:b1:fa:b6:c9:35:e3: 8c:c4:d7:65:54:4c:e2:03:83:89:74:0a:24:c5:c8:b9:01:0f: e8:fd:3c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUvcHUYhFdmJyiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk NWE4Y2FlNTktNDMyYy00MGVkLWI3OGUtMmY1ZWZjNTc1MzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi8LBaEdOqRVEEMR8/fKE/I+/cbR/Aw2vJTj exoJLtL10p+Gf/lMjO04sbl+ljNE3m25tPfZrXqxa8xa0wCnRAVSqdnTprR9AIJ+ I7PlHEnXaOl2kdPz93uvYmJCJ+wnfdiLFVVcw7lK4QBJJ7CD2L5Q/CTFNtEfgxKY CJj0CVuLViBNcGL5QXdWhemUM+Wd0E374phel9D72BrA4nF3x9tcP3bae8nTUWTk JEFK+rzThevMKysmT8XnX170+bO3h4PJ3DAmFQnGHJ8dTuBZqZBqNVOsYdgvXIA4 kcKW76bfwS2QR/Sy340h0EgF5SPSRIGdPIPleJenuMiLlswQCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkS99mj39Vlf1ymmWy9DoQhHyO/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvYWFiYjU2ZDQtNGI0ZS0z YjZiLTk3NTItMTBiYzVhMzQ1YmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTOfnZJIlvUCDQE3eF/ptQf2q/WOvBg8tWtDN2vZAY6UgN2gCTAbEQe ZxpRzL1cDrq0T1Wp1b2efCRWlFwlJvNJeM9V4UVL3MosBJqZVVPW1itU49ApLHzN hT/uXaYGeC7AWLQW7eaWH0dJanR2bRZv3PM42xj9ei/izFmpvxMLTGYD2TTyRkDF lH4d8kJwi0cXxKIESIzQN5EYLkyz+E0mljbd9929yed3uCvzGh6nLBi3A8cr4msK CmrHB2K8AN1cbvqGBm42iHVCbwOvk0v21hGMwpU7tWUXJNbQsgeTjOuoMbH6tsk1 44zE12VUTOIDg4l0CiTFyLkBD+j9PBY= -----END CERTIFICATE-----Generated at Mon Oct 26 01:49:28 2026 by rpki-client