$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa File: af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa (raw, json) Hash identifier: qxgzuachaPzO7Wf0IOmTud/AFJU9G5nBcqpRY5RwryM= Subject key identifier: A3:75:B1:1D:4C:38:A1:FE:48:4C:9C:04:91:2C:77:64:D9:8F:28:44 Certificate issuer: /CN=53e52220-fa56-4913-b008-c1121580f510 Certificate serial: 010D0C9F4328584EAE81BA1C53303B639DC91140 Authority key identifier: B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa Signing time: Fri 31 Jul 2026 13:00:12 +0000 ROA not before: Fri 31 Jul 2026 13:00:12 +0000 ROA not after: Thu 29 Oct 2026 13:00:12 +0000 asID: 12684 IP address blocks: 66.133.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ae:81:ba:1c:53:30:3b:63:9d:c9:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53e52220-fa56-4913-b008-c1121580f510 Validity Not Before: Jul 31 13:00:12 2026 GMT Not After : Oct 29 13:00:12 2026 GMT Subject: CN=2813377a-a7c2-4d98-aa26-eaa52dbea4af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:8c:94:2f:90:d8:26:1f:f4:2d:a9:2e:95: df:ba:70:7f:5e:d2:68:96:e5:09:38:ff:13:4b:27: c7:96:21:68:a6:d7:11:31:db:85:68:8a:98:d0:77: 35:e3:0e:f4:93:a1:8e:b3:61:de:2c:74:08:c1:2a: 75:6a:57:86:49:d2:0a:73:79:28:c5:43:6f:42:4b: 65:67:0a:d7:ba:78:4c:a3:90:ca:0d:10:90:48:97: d3:55:2a:88:13:b1:b9:69:a8:86:5c:d2:a3:e4:34: 36:25:27:b8:8a:c7:cc:58:0a:83:d5:48:09:08:d6: cb:cb:30:71:f9:a3:90:a4:b3:26:8b:91:0b:36:17: 57:8f:c5:42:cc:3f:7b:e2:9f:e5:1b:ba:d5:0d:e4: 56:21:15:07:d5:f3:33:8b:15:f3:bd:64:cc:2d:fb: ea:19:76:2e:d6:1a:ca:5c:35:16:5f:66:a1:d7:cb: f0:b5:30:74:33:2f:8c:b3:26:7a:26:a3:5d:bd:2c: b0:95:9d:1b:f1:77:48:d0:07:26:0a:93:33:d9:59: 2f:41:4f:8c:f9:e4:da:72:f0:26:45:18:5e:da:ab: 16:cb:dd:78:ae:80:35:b9:2a:c3:66:0d:14:e2:f3: 85:21:77:d1:c3:ab:1c:8e:d7:be:fe:23:fd:49:49: 19:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:75:B1:1D:4C:38:A1:FE:48:4C:9C:04:91:2C:77:64:D9:8F:28:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/af5066dd-70d7-3cb3-a565-ca0dbcfc9f2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510/53e52220-fa56-4913-b008-c1121580f510.crl X509v3 Authority Key Identifier: keyid:B6:C8:08:6B:80:F5:32:00:56:7A:31:3B:7C:58:72:AA:44:0B:B8:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/53e52220-fa56-4913-b008-c1121580f510.cer sbgp-ipAddrBlock: critical IPv4: 66.133.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:35:fa:5f:02:6a:63:85:3e:96:92:72:66:69:d9:d4:33:a3: df:11:0a:45:ab:d9:b4:f1:92:b4:4b:f2:a1:8b:2e:09:60:50: 3c:d1:a8:63:7e:ca:4f:72:80:54:77:fa:1b:bd:1b:d3:b6:d4: 4d:1e:3c:8d:30:d6:06:3f:38:50:42:f2:83:3e:3f:de:1c:3a: 5a:98:97:34:e6:e8:b8:e1:c3:de:25:79:a1:ac:15:45:fa:f2: 17:3f:16:66:5b:d5:8f:23:2e:ef:32:00:36:e1:55:f0:af:7a: e8:c1:89:73:c2:9f:5f:6a:e7:02:52:e4:09:eb:93:38:f0:83: 86:7a:43:5a:17:d2:f3:34:a9:3d:5b:2a:31:9e:ae:02:c9:36: a0:5f:87:ec:30:b4:e1:63:4f:68:dd:57:59:61:59:b1:9e:60: be:bc:ad:9c:6d:f7:fb:74:c7:01:05:4c:7c:20:56:c6:6e:d5: 11:e7:2b:85:13:5f:08:75:e1:c7:70:b9:ab:a5:57:70:87:7d: 8c:99:93:00:93:b1:ac:ca:f0:e8:30:ac:82:c5:9e:12:26:31: 18:8a:e6:db:40:d0:a9:fc:b3:3e:c6:5f:35:fb:57:c4:dc:6a: 12:71:7b:46:16:1d:74:52:25:70:03:4b:5a:af:14:c4:46:5d: 71:57:19:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ugbocUzA7Y53JEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTNlNTIyMjAtZmE1Ni00OTEzLWIwMDgtYzExMjE1ODBm NTEwMB4XDTI2MDczMTEzMDAxMloXDTI2MTAyOTEzMDAxMlowLzEtMCsGA1UEAxMk MjgxMzM3N2EtYTdjMi00ZDk4LWFhMjYtZWFhNTJkYmVhNGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdqMlC+Q2CYf9C2pLpXfunB/XtJoluUJOP8T SyfHliFoptcRMduFaIqY0Hc14w70k6GOs2HeLHQIwSp1aleGSdIKc3koxUNvQktl ZwrXunhMo5DKDRCQSJfTVSqIE7G5aaiGXNKj5DQ2JSe4isfMWAqD1UgJCNbLyzBx +aOQpLMmi5ELNhdXj8VCzD974p/lG7rVDeRWIRUH1fMzixXzvWTMLfvqGXYu1hrK XDUWX2ah18vwtTB0My+MsyZ6JqNdvSywlZ0b8XdI0AcmCpMz2VkvQU+M+eTacvAm RRhe2qsWy914roA1uSrDZg0U4vOFIXfRw6scjte+/iP9SUkZQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN1sR1MOKH+SEycBJEsd2TZjyhEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81M2U1 MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEyMTU4MGY1MTAvYWY1MDY2ZGQtNzBkNy0z Y2IzLWE1NjUtY2EwZGJjZmM5ZjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTNlNTIyMjAtZmE1Ni00OTEzLWIw MDgtYzExMjE1ODBmNTEwLzUzZTUyMjIwLWZhNTYtNDkxMy1iMDA4LWMxMTIxNTgw ZjUxMC5jcmwwHwYDVR0jBBgwFoAUtsgIa4D1MgBWejE7fFhyqkQLuDUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81M2U1MjIyMC1mYTU2LTQ5MTMtYjAwOC1jMTEy MTU4MGY1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoUlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB41+l8CamOFPpaScmZp2dQzo98RCkWr2bTxkrRL8qGLLglgUDzRqGN+ yk9ygFR3+hu9G9O21E0ePI0w1gY/OFBC8oM+P94cOlqYlzTm6Ljhw94leaGsFUX6 8hc/FmZb1Y8jLu8yADbhVfCveujBiXPCn19q5wJS5Anrkzjwg4Z6Q1oX0vM0qT1b KjGergLJNqBfh+wwtOFjT2jdV1lhWbGeYL68rZxt9/t0xwEFTHwgVsZu1RHnK4UT Xwh14cdwuaulV3CHfYyZkwCTsazK8OgwrILFnhImMRiK5ttA0Kn8sz7GXzX7V8Tc ahJxe0YWHXRSJXADS1qvFMRGXXFXGTI= -----END CERTIFICATE-----Generated at Sat Sep 5 05:26:22 2026 by rpki-client